Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QbOKwt2GY8K2BpkR6aZin81jO6w.roa
File: QbOKwt2GY8K2BpkR6aZin81jO6w.roa (raw, json)
Hash identifier: fOki1hnTKOq12RXiaavjCBS00HHuxGUGVWY3hAR4T3Y=
Subject key identifier: 41:B3:8A:C2:DD:86:63:C2:B6:06:99:11:E9:A6:62:9F:CD:63:3B:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E6999D04C6E921C7AD92F5DFC7859A2DD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QbOKwt2GY8K2BpkR6aZin81jO6w.roa
Signing time: Wed 27 May 2026 13:22:28 +0000
ROA not before: Wed 27 May 2026 13:22:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213476
IP address blocks: 151.241.37.0/24 maxlen: 24
151.242.205.0/24 maxlen: 24
151.243.103.0/24 maxlen: 24
151.245.0.0/24 maxlen: 24
151.246.111.0/24 maxlen: 24
151.247.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 15:04:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:99:d0:4c:6e:92:1c:7a:d9:2f:5d:fc:78:59:a2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 13:22:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b38ac2dd8663c2b6069911e9a6629fcd633bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:96:e2:f4:8b:9f:61:40:e5:3d:4d:d5:b3:2f:
8d:b2:d8:1f:6c:55:9d:62:72:1e:8f:ab:5a:b7:e8:
ad:4e:a4:53:dd:e3:8d:d5:55:6e:5c:46:69:ec:fb:
49:02:c1:4d:18:cd:53:78:ff:7e:b9:63:95:90:86:
45:8d:fd:5a:f1:90:2f:bf:58:67:d7:37:63:cb:6b:
c2:72:05:88:03:40:6c:d9:89:5e:9f:f5:0a:c3:8c:
6e:7c:35:b4:44:9b:c7:fd:69:89:37:15:65:d5:ce:
47:b0:5d:6c:85:ea:7f:a8:f6:da:dd:15:99:42:f9:
bb:93:9d:44:1b:3e:71:6c:9f:29:90:c2:bb:5d:9e:
3d:de:11:28:ae:a8:6b:86:3a:f7:2b:8c:35:3e:56:
34:84:3d:aa:b9:68:a9:bc:38:bc:08:72:3f:d8:db:
2b:5d:19:14:0d:a5:d8:d7:26:25:6e:56:f4:92:a8:
8a:99:b7:c1:cb:40:f3:65:44:4a:27:f6:c5:45:20:
c3:e9:80:1b:9a:fd:a0:bc:15:92:ea:89:5f:93:40:
63:ee:3b:f4:ad:f1:7d:1c:08:83:9d:91:e9:b1:60:
20:bb:7c:e4:54:38:07:ad:a7:d2:d6:46:18:7b:b0:
33:b2:cd:63:f7:28:17:ca:87:b5:b7:10:48:52:f3:
0f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B3:8A:C2:DD:86:63:C2:B6:06:99:11:E9:A6:62:9F:CD:63:3B:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QbOKwt2GY8K2BpkR6aZin81jO6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.37.0/24
151.242.205.0/24
151.243.103.0/24
151.245.0.0/24
151.246.111.0/24
151.247.154.0/24
Signature Algorithm: sha256WithRSAEncryption
14:da:a1:b4:cf:88:26:82:f7:57:13:99:9e:f7:be:62:33:06:
5c:41:15:d0:c8:ba:f0:fa:84:23:d3:60:d4:c5:df:34:57:82:
38:88:2b:30:a2:53:57:bc:1f:e0:43:4a:6f:46:97:5d:68:03:
ac:75:64:37:e0:a6:54:a7:24:7f:96:a0:a9:68:59:1e:59:50:
4f:47:af:69:a0:db:3d:bf:59:74:b9:ae:10:1c:fd:7c:fa:14:
c4:78:e7:6e:f6:7e:ec:17:aa:0b:b0:2a:4e:ab:87:1d:e6:24:
8b:7d:67:72:dd:b7:c5:eb:a9:82:e6:2a:d5:19:c0:92:f9:07:
5e:38:07:f6:da:5f:26:bc:07:9f:eb:a1:9c:6f:57:e1:5d:23:
ea:9d:d9:f7:6b:9a:e7:36:50:de:aa:03:c6:2f:72:4b:ce:13:
b3:75:07:7f:5f:36:9e:b0:15:7d:88:98:a9:00:fc:98:81:56:
3d:3a:92:e5:d8:43:21:69:f7:72:e1:64:cf:dc:bb:55:a9:7b:
50:de:ce:3d:4c:dd:91:6c:98:76:c5:54:d4:59:b4:f3:fd:02:
74:7c:ab:c4:a5:c6:78:5e:3d:da:24:2a:54:d1:c8:73:46:3a:
82:0c:53:19:89:7f:70:00:43:19:49:d3:e6:b8:65:e3:a2:33:
00:48:b3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 20:34:47 2026 by rpki-client