Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWkNOXr_UtDZnueeuy7htXSXlbA.roa
File: RWkNOXr_UtDZnueeuy7htXSXlbA.roa (raw, json)
Hash identifier: sILqCeVIZiK5GoPX+6QjVL9odLD5cCIeOCbyYWmWKDY=
Subject key identifier: 45:69:0D:39:7A:FF:52:D0:D9:9E:E7:9E:BB:2E:E1:B5:74:97:95:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3838AB9D6EDD51B01B0BAB901A49BCA9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWkNOXr_UtDZnueeuy7htXSXlbA.roa
Signing time: Mon 06 Jul 2026 16:17:45 +0000
ROA not before: Mon 06 Jul 2026 16:17:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402221
IP address blocks: 151.246.128.0/24 maxlen: 24
151.247.1.0/24 maxlen: 24
151.247.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:38:ab:9d:6e:dd:51:b0:1b:0b:ab:90:1a:49:bc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 16:17:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45690d397aff52d0d99ee79ebb2ee1b5749795b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9d:44:23:d0:67:10:85:81:0c:07:7b:b2:8e:
6d:af:59:8a:17:51:fb:c0:48:a1:5b:7d:75:1d:48:
44:33:42:cd:87:f0:ae:a3:99:09:7d:d7:f7:be:40:
29:ac:ea:a0:99:0f:27:9a:f0:cb:2b:50:4c:fc:84:
75:f2:24:6f:7d:a9:c8:24:e6:dc:ea:59:ca:7e:7e:
2d:53:6b:e7:d0:f8:a7:a1:c9:1e:98:f0:0f:96:2c:
83:99:79:48:47:98:87:91:c9:cd:c1:11:f1:aa:5e:
4d:ac:cc:fa:44:61:11:36:68:7c:ef:3d:f8:db:c6:
d8:be:a3:5a:72:0e:06:bf:5a:df:9d:2e:a0:33:e5:
d0:3b:62:0c:5f:69:73:55:5d:20:a2:96:77:73:43:
ed:e5:e8:fb:d2:b9:91:43:b4:1f:a1:6a:36:5b:35:
8f:48:c4:ea:e4:0f:de:97:32:81:96:0a:b4:14:78:
76:fb:44:66:e6:8c:d0:b3:3e:d0:4d:8a:eb:e2:4d:
42:4c:1a:78:d2:16:a7:77:7e:f2:95:6f:ff:49:1e:
e4:a0:c8:b3:b8:88:c5:c4:b4:14:13:e8:15:1a:4c:
18:ba:7b:59:04:03:37:3e:60:7d:56:b2:5e:6e:09:
a1:a3:2c:97:02:a6:2e:98:09:5a:82:18:52:73:0b:
f4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:69:0D:39:7A:FF:52:D0:D9:9E:E7:9E:BB:2E:E1:B5:74:97:95:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RWkNOXr_UtDZnueeuy7htXSXlbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.128.0/24
151.247.1.0/24
151.247.103.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:ad:19:db:31:a2:a4:2b:7c:ef:05:32:43:95:0a:02:29:af:
28:4e:d8:8a:93:c6:be:7b:3a:7c:07:74:4a:32:e6:73:4b:b7:
f7:74:3a:2b:94:5b:d2:d5:10:37:ed:15:77:93:0f:c1:27:65:
f4:bc:8c:d0:1c:32:6d:2f:dc:d7:fc:85:e4:ec:7a:90:ac:ea:
21:98:67:32:ec:f3:e5:9f:e9:33:db:cf:23:3a:1b:98:b1:2d:
b8:65:73:61:af:3c:46:59:8e:ae:9b:40:4b:ad:7a:4d:1d:e0:
71:71:b8:86:38:56:e9:b3:eb:9c:ec:3e:1e:ad:97:a2:ab:fc:
4d:88:70:e1:94:f2:65:af:53:e6:62:48:11:6d:cf:dc:55:b4:
55:79:b1:cd:4e:2f:a5:5e:ff:d6:b1:59:25:d6:93:cf:80:85:
bb:76:9f:ef:7a:42:b6:6d:aa:41:67:70:1a:1e:c3:2e:73:2a:
17:10:fe:70:d7:81:5b:86:ce:29:14:d8:fd:c1:89:a2:62:04:
9e:c6:a2:a3:49:03:af:d4:ef:bd:a7:c1:e3:52:3a:0e:73:42:
a4:5e:35:cf:b8:21:22:9a:a1:94:66:5f:dc:36:43:de:4a:a3:
0a:13:ba:84:db:cb:d6:e5:37:26:7e:c7:41:fa:22:b7:73:28:
80:ff:5c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:58 2026 by rpki-client