Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TAKkN8mWc7QHuzoTizLPkeydvdM.roa
File: TAKkN8mWc7QHuzoTizLPkeydvdM.roa (raw, json)
Hash identifier: d8K2dltIKxARZcUY9U30kcR4Nyhm2oot9FT05zIblqs=
Subject key identifier: 4C:02:A4:37:C9:96:73:B4:07:BB:3A:13:8B:32:CF:91:EC:9D:BD:D3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A11B5C29274B9A78BE9A2E376ADF9080C5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TAKkN8mWc7QHuzoTizLPkeydvdM.roa
Signing time: Thu 08 Oct 2026 11:53:07 +0000
ROA not before: Thu 08 Oct 2026 11:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 151.243.32.0/24 maxlen: 24
151.245.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:5c:29:27:4b:9a:78:be:9a:2e:37:6a:df:90:80:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 8 11:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c02a437c99673b407bb3a138b32cf91ec9dbdd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:81:32:da:4f:aa:6e:2d:a9:7a:f7:ec:8b:
56:e6:fa:c6:32:e3:5b:d2:10:75:f3:bf:dc:1b:be:
55:64:35:6c:10:56:70:84:84:fa:e8:a4:cd:cc:a7:
42:11:54:25:4b:14:e7:fe:19:68:29:c8:f5:bb:17:
7d:18:a0:09:75:36:4e:df:e2:d4:bf:e9:f1:b6:e4:
e7:eb:03:44:8b:3f:fa:a9:6d:c9:09:87:0e:7a:9d:
2b:55:6e:6d:0f:47:90:af:b5:b2:91:96:9d:95:99:
23:8a:4e:d6:45:aa:d1:d0:20:c3:b8:9e:48:53:0c:
83:99:68:94:55:08:e2:77:a5:4d:d2:7d:e7:e4:7a:
87:7d:50:d6:1e:23:2b:4c:9d:a9:d4:df:75:34:b4:
15:f4:bf:dc:18:cf:0c:ed:e5:4b:9a:2e:65:37:be:
66:03:f3:50:b0:a5:e3:29:10:c9:04:87:2b:a2:0e:
7f:b2:eb:7a:b8:9d:bc:23:8a:3d:7e:6d:ea:92:b4:
c0:01:9b:86:51:46:90:a3:58:11:d6:42:3a:f6:60:
7a:c2:71:32:f8:5e:f7:75:52:4d:18:6a:c3:7b:10:
a7:82:2b:a6:b3:e4:11:4b:b7:ab:73:23:fb:f0:de:
61:93:90:64:0c:82:18:a5:f9:80:96:6c:97:ee:ea:
64:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:02:A4:37:C9:96:73:B4:07:BB:3A:13:8B:32:CF:91:EC:9D:BD:D3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TAKkN8mWc7QHuzoTizLPkeydvdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.32.0/24
151.245.165.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ab:4d:38:8a:63:6b:c5:15:1e:09:51:49:27:49:a3:f7:0c:
93:e4:c6:d0:06:0a:a7:4b:c9:79:d9:49:ff:39:e6:0f:10:a5:
8f:13:95:7c:c2:bd:82:a6:42:fc:60:d7:50:c4:a8:59:d8:96:
05:39:0a:9a:31:66:5b:00:f0:71:6d:ed:89:83:8c:e2:4f:28:
9d:df:4a:3e:00:53:0c:b3:8d:81:ca:ce:1a:34:41:38:a6:2a:
60:3d:a8:46:8a:49:2e:40:68:72:65:5d:26:ec:7d:53:dc:c7:
23:05:a2:27:d1:e1:0b:0b:1f:b5:19:5f:f6:80:94:a5:91:f6:
83:ad:d2:5a:48:f6:98:e0:e1:11:95:09:8b:dc:9d:1b:a0:24:
6c:21:7e:ce:6a:f3:88:c1:63:c3:39:bd:31:25:6c:d4:40:97:
71:0a:c1:ee:12:54:bf:c3:3f:81:49:a6:c1:ec:6f:be:bc:bd:
4a:e5:60:7d:47:30:77:8e:32:0d:04:1f:43:99:97:2e:18:ab:
ea:80:72:53:ba:1b:d3:af:5b:71:c6:eb:0f:ee:eb:c9:d4:9e:
f7:e4:fd:d2:a4:b6:d6:7d:26:e5:cb:46:79:07:9d:20:53:25:
fd:0a:b9:b7:21:eb:5a:d5:7a:c8:9b:fc:3f:83:4c:22:ed:c0:
df:09:1c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 03:08:22 2026 by rpki-client