Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sn3V35jz0_IiM2FG4CwMNU-fM5k.roa
File: Sn3V35jz0_IiM2FG4CwMNU-fM5k.roa (raw, json)
Hash identifier: QLZFESORBfyk7A9VdKOq0x3VhAE5TQqe1hsYA+u5j80=
Subject key identifier: 4A:7D:D5:DF:98:F3:D3:F2:22:33:61:46:E0:2C:0C:35:4F:9F:33:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1597D1FE8679D37930582B8A0D2EFE71D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sn3V35jz0_IiM2FG4CwMNU-fM5k.roa
Signing time: Tue 20 Oct 2026 13:25:34 +0000
ROA not before: Tue 20 Oct 2026 13:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136809
IP address blocks: 151.245.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:7d:1f:e8:67:9d:37:93:05:82:b8:a0:d2:ef:e7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 20 13:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a7dd5df98f3d3f222336146e02c0c354f9f3399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:70:53:3e:0c:1b:a9:82:fc:bd:92:50:a0:
80:3d:1a:21:da:da:23:54:76:84:7d:b1:ea:d4:9d:
06:68:ce:c2:cd:3f:95:37:7b:7f:dd:72:e3:2c:36:
cb:0c:c3:76:2d:93:20:fa:d3:99:0d:17:db:9a:69:
18:95:3c:1c:45:c3:d2:34:a2:b1:ea:06:be:cf:40:
b4:bd:71:ca:4f:ab:df:23:42:c9:13:aa:64:99:25:
1d:7f:3b:f5:ce:ef:80:0a:b1:1e:5e:06:7b:6f:3f:
9c:3c:cd:bd:fb:f4:1e:e4:9d:fb:8b:a6:95:46:85:
24:da:a3:ef:3b:1d:3a:04:c1:fa:45:8a:93:85:bd:
0b:0a:15:e6:fe:c4:33:8a:bb:34:7a:db:98:1d:30:
98:83:76:83:be:a4:6e:71:67:39:76:1c:e8:32:c7:
1d:32:48:f5:c7:2e:c3:ce:43:37:65:9b:2f:68:9e:
1c:93:5d:a9:2f:29:dc:76:96:38:86:39:c3:68:28:
35:4f:08:7e:eb:c8:c5:f9:3b:86:c6:ab:e8:14:e3:
cd:d9:29:31:aa:62:59:14:e0:b9:ce:d5:0f:1e:cf:
08:2c:8e:9e:03:6e:1b:01:98:8a:89:d4:a5:28:1e:
52:52:f9:0a:26:2a:6a:27:3b:23:b7:df:f2:14:4f:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:7D:D5:DF:98:F3:D3:F2:22:33:61:46:E0:2C:0C:35:4F:9F:33:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Sn3V35jz0_IiM2FG4CwMNU-fM5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.146.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:3d:80:a5:b3:3e:18:72:b7:15:0a:79:97:42:b8:eb:76:e8:
b9:d3:39:4e:22:42:9c:76:1d:bf:e1:6d:04:eb:2d:c9:25:76:
c9:50:85:9b:80:5e:9d:fe:28:82:ba:b4:19:4c:2a:ac:01:9d:
b5:0a:09:c7:0f:2f:b4:9c:9a:ed:46:ed:f5:ce:c2:7c:cd:ee:
58:f7:0f:fd:d5:ac:d1:31:5a:31:3b:a1:f2:6e:d2:e2:cb:f3:
61:43:27:fa:3c:81:ab:4e:df:89:cc:d3:b9:03:01:83:50:d4:
d3:55:d7:d7:6d:32:0e:32:ee:2a:38:79:2b:59:28:7a:de:ae:
62:39:06:fa:82:10:a2:bc:2a:b5:da:70:c3:f4:3c:1b:d8:05:
2a:d5:d0:f0:dd:ce:85:e0:13:f2:da:08:90:9d:e7:1a:fa:05:
e2:29:fb:13:e2:7a:e7:41:d2:e3:6f:94:bd:d9:a2:8c:fc:69:
24:cf:5a:5a:0f:db:52:9b:05:c5:30:6c:a8:14:f6:26:b2:08:
9c:c4:78:5e:82:29:cf:11:6f:57:10:65:65:e7:62:32:d1:54:
5e:18:25:36:9c:5b:52:e1:ef:11:c3:8b:2b:dd:45:41:71:0f:
45:5e:a6:1b:2d:8b:96:49:fb:09:f2:f5:18:5c:74:b6:d9:d0:
78:a1:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:58:50 2026 by rpki-client