Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PwBfR9CWv0idPeghq1V-3VmM9HU.roa
File: PwBfR9CWv0idPeghq1V-3VmM9HU.roa (raw, json)
Hash identifier: JdTUlW2FPDKGWP7emb513w/LcQS8soX/MX5f6gtSabM=
Subject key identifier: 3F:00:5F:47:D0:96:BF:48:9D:3D:E8:21:AB:55:7E:DD:59:8C:F4:75
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A10F87BF58DF5CF2CE31C6389567AE22DC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PwBfR9CWv0idPeghq1V-3VmM9HU.roa
Signing time: Tue 06 Oct 2026 04:45:16 +0000
ROA not before: Tue 06 Oct 2026 04:45:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 151.240.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:87:bf:58:df:5c:f2:ce:31:c6:38:95:67:ae:22:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 6 04:45:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f005f47d096bf489d3de821ab557edd598cf475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d8:22:0b:1a:03:de:09:99:bb:14:76:ed:3e:
31:e1:18:1a:28:be:56:bb:01:a7:0e:26:4f:f3:cf:
98:8c:d5:8d:8a:c7:72:70:4b:24:ac:70:ae:d1:99:
75:45:52:aa:02:f5:29:85:50:ba:13:5d:8a:bd:1e:
27:f3:0a:58:a7:e3:a4:c1:58:d8:f5:fd:4b:c7:7d:
b6:71:15:fb:4b:68:7d:64:6b:31:9a:54:8d:b9:67:
e8:e0:41:f3:ed:49:0a:a8:88:c2:78:cf:59:0d:97:
d4:39:fe:bc:26:f6:e6:e5:ce:fd:46:62:1c:29:61:
45:e7:05:33:fa:12:f2:a1:f1:21:76:31:6c:1d:c4:
35:1c:a7:cd:16:3e:51:dc:fa:0c:45:4f:d3:78:7f:
df:e7:c4:50:1e:b6:23:76:5e:0f:35:aa:25:62:af:
b9:73:d0:bb:63:d2:f7:9b:a9:ed:44:ec:fc:be:23:
a0:4d:e2:6a:e3:fd:05:eb:66:76:4c:99:4c:e4:ef:
b1:69:65:44:5d:0b:1c:7f:c1:d4:86:f8:04:cb:f4:
02:2c:e9:fb:dd:76:bc:eb:fb:80:1e:82:96:f8:35:
53:8f:1c:07:89:3b:d3:e8:21:7e:c4:60:fc:4e:c1:
93:2f:e6:39:79:4e:4c:e7:c4:7e:09:52:76:cd:af:
fb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:5F:47:D0:96:BF:48:9D:3D:E8:21:AB:55:7E:DD:59:8C:F4:75
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PwBfR9CWv0idPeghq1V-3VmM9HU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.226.0/24
Signature Algorithm: sha256WithRSAEncryption
97:02:17:19:95:b5:b5:fd:4c:f8:f6:f8:71:6b:5e:33:c9:f7:
ca:aa:ef:6b:0c:f3:c0:06:a0:94:be:a7:10:01:a0:cd:1e:ba:
e3:f6:5d:47:77:7a:17:f9:0a:20:6a:66:5e:5f:c9:36:c8:c6:
67:57:57:26:28:18:bb:48:57:09:72:34:4e:f3:62:ae:1c:5d:
46:30:3e:ed:03:87:b3:7c:bd:fb:10:0d:81:fe:5f:0c:51:5c:
69:0e:d1:7a:32:6b:13:a3:88:75:c7:98:e5:75:b6:ca:8f:4f:
9b:4d:fc:3a:55:2a:58:04:5a:c6:13:fa:1d:6a:d1:53:77:8f:
61:e0:63:08:9f:71:80:6a:c4:c0:53:b9:d6:72:a8:56:95:a3:
fd:6a:76:74:dd:d3:58:43:4d:bd:9e:a9:ac:eb:fc:7f:91:45:
d2:e3:60:c1:7f:25:dd:1f:f1:06:e2:4b:d4:41:72:0f:f2:f1:
1f:75:fc:42:86:2b:8f:8b:49:04:cc:d2:a1:f5:cb:eb:ee:7b:
67:a9:a7:37:7b:ed:49:27:15:6a:69:47:62:28:bf:15:56:d5:
35:f6:5b:28:63:c0:17:c2:5a:9c:ae:94:45:97:83:d2:d2:63:
1b:74:76:22:ee:c9:66:ae:45:ab:b2:b5:f2:30:1b:68:c1:d4:
1f:24:cd:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:48:28 2026 by rpki-client