Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQz5LIj-Yqi5oBr2LjZhnXgde5I.roa
File: UQz5LIj-Yqi5oBr2LjZhnXgde5I.roa (raw, json)
Hash identifier: H+b+gQraIC3+1ISuOjiu8/OHbiQf7wsHm3Vr4yesR7Y=
Subject key identifier: 51:0C:F9:2C:88:FE:62:A8:B9:A0:1A:F6:2E:36:61:9D:78:1D:7B:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05D20A0D8391FB445C5F1DEE78835C4C6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQz5LIj-Yqi5oBr2LjZhnXgde5I.roa
Signing time: Tue 01 Sep 2026 13:20:14 +0000
ROA not before: Tue 01 Sep 2026 13:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 151.240.169.0/24 maxlen: 24
151.242.61.0/24 maxlen: 24
151.247.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:20:a0:d8:39:1f:b4:45:c5:f1:de:e7:88:35:c4:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 13:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=510cf92c88fe62a8b9a01af62e36619d781d7b92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0c:15:1e:92:f5:6a:95:fa:ab:06:12:7b:53:
4c:3a:d6:a7:de:65:f2:9b:33:76:70:3d:07:f9:56:
57:47:f9:34:0a:63:77:a9:f3:1f:b8:1e:c7:7c:1f:
7f:8e:96:12:dc:0e:00:6e:af:26:fe:27:d7:78:91:
bd:11:08:17:ff:92:80:4b:97:52:10:c7:ec:89:4e:
a8:a5:38:c8:3d:79:61:7f:8b:3e:c8:64:f6:6a:19:
8b:f1:8d:44:88:a4:a0:33:cc:8f:61:90:f3:5b:b8:
0d:93:d6:68:6d:ec:67:f3:03:dc:26:2a:52:09:68:
7e:5a:a6:7c:72:cb:15:9e:aa:79:57:6d:b1:75:b5:
af:78:98:35:7a:4d:c9:54:2c:7b:aa:87:94:45:32:
4f:32:31:28:53:39:13:f5:2b:fa:65:53:fe:9b:b0:
4f:01:a2:bd:49:1c:99:2e:fe:99:61:f6:d2:29:48:
e4:34:81:3d:3b:83:5a:2b:60:2b:92:1f:bc:52:9c:
8f:26:6b:ab:9f:fb:f6:a7:a4:bb:cd:bd:9b:37:dd:
7e:a9:76:bd:df:87:6d:0c:be:05:f0:b8:48:bc:46:
51:81:2d:eb:2f:2c:c5:47:11:c4:47:c8:2c:21:a0:
89:9b:b0:aa:f8:7d:fb:0f:42:9a:03:75:1d:a6:c2:
10:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0C:F9:2C:88:FE:62:A8:B9:A0:1A:F6:2E:36:61:9D:78:1D:7B:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UQz5LIj-Yqi5oBr2LjZhnXgde5I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.169.0/24
151.242.61.0/24
151.247.244.0/24
Signature Algorithm: sha256WithRSAEncryption
20:aa:10:28:48:5f:80:b4:bf:45:37:0f:9e:27:a9:29:6c:b6:
bc:37:69:52:cd:8f:3b:46:ce:6d:7b:a8:f4:05:e1:86:81:60:
b1:16:c9:54:af:13:e3:8b:c3:ff:ea:df:f9:d0:ee:26:5b:8b:
12:d2:b2:4b:e8:fc:72:d2:7f:a2:81:49:ff:94:77:42:bd:66:
f1:81:92:09:e0:a7:19:bb:7f:1e:f2:c4:3a:b8:8a:2b:89:64:
40:be:d4:46:6f:53:56:b3:a7:f6:02:15:5a:bb:b9:ac:cb:12:
85:9f:4c:b2:04:23:b6:c9:8b:3a:05:b9:b7:f7:54:11:ca:be:
9c:00:34:f2:f4:46:44:34:02:06:af:c6:56:48:89:a2:c2:9e:
14:ba:0a:6d:14:e6:af:7f:67:84:a0:16:bd:4a:7b:46:53:c6:
43:11:6c:6b:14:4d:39:85:dc:d9:2c:11:63:c7:a1:e0:90:6a:
9c:84:3a:43:e6:d6:7e:81:f5:ea:4d:5a:34:5d:88:d9:1e:44:
b9:2e:5e:18:6d:ed:a7:1b:bc:9b:83:18:3f:b3:74:38:8b:01:
66:4a:f8:f0:b3:35:5b:d1:39:fc:a8:a1:3b:09:5f:6f:7e:b0:
70:34:bb:53:f9:b2:b5:71:02:96:ae:61:e4:fa:17:26:23:9b:
d3:7c:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:20:15 2026 by rpki-client