Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uuui6gixuUpO9pg9X260Y-AvU2o.roa
File: Uuui6gixuUpO9pg9X260Y-AvU2o.roa (raw, json)
Hash identifier: QpquZaNblaiyigtqFrncusKBbmYji3hocDDtkmk1S6k=
Subject key identifier: 52:EB:A2:EA:08:B1:B9:4A:4E:F6:98:3D:5F:6E:B4:63:E0:2F:53:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A015C46D8040C3EE9AFDBEFA95BB6E9635
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uuui6gixuUpO9pg9X260Y-AvU2o.roa
Signing time: Tue 18 Aug 2026 16:46:29 +0000
ROA not before: Tue 18 Aug 2026 16:46:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136897
IP address blocks: 151.246.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:c4:6d:80:40:c3:ee:9a:fd:be:fa:95:bb:6e:96:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 18 16:46:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=52eba2ea08b1b94a4ef6983d5f6eb463e02f536a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:74:34:05:4a:52:47:e6:d6:7e:55:41:88:
e8:f9:17:13:bf:50:cc:f6:50:44:b4:6f:82:29:cd:
77:f4:78:d3:fe:32:5e:49:51:07:3b:0d:0a:9a:43:
7e:57:9b:64:ef:5d:41:57:24:61:5d:18:8c:13:0c:
8b:bf:c2:b4:6e:16:87:1a:b6:c3:88:6a:6c:1e:52:
5d:fc:d1:ed:49:aa:82:ff:69:08:80:fe:aa:44:2b:
b0:32:40:30:22:20:bb:9b:87:1a:4d:39:bd:38:ff:
d1:fb:52:e5:44:10:7e:d2:06:af:7e:00:7a:89:3b:
e4:9a:48:bf:48:b4:80:e3:68:93:df:ee:cd:c3:71:
eb:77:6c:f3:f1:f1:51:50:53:93:fe:21:39:d5:4d:
89:1b:c4:12:d3:87:55:6b:4e:29:98:58:94:87:c1:
38:4e:cf:42:86:e2:3a:04:98:d3:c7:07:a0:96:51:
c8:73:c4:cf:17:68:02:50:2e:8f:8d:c7:82:ce:e8:
72:8d:33:43:8b:f2:37:37:c3:15:3b:c1:45:d1:41:
8f:d4:40:76:52:09:c0:58:66:1e:ec:23:a5:24:5e:
9f:64:42:9b:ce:5c:7a:2f:6f:7c:2c:62:9d:ae:50:
76:3a:3c:23:87:c6:de:38:70:d2:3e:4d:3d:23:69:
54:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:A2:EA:08:B1:B9:4A:4E:F6:98:3D:5F:6E:B4:63:E0:2F:53:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Uuui6gixuUpO9pg9X260Y-AvU2o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.189.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:cc:8c:54:38:28:f8:c8:7f:56:81:9f:01:5c:f4:9d:54:c6:
d0:43:35:a9:6a:ed:0c:a9:4f:00:6f:d3:97:b0:f3:08:58:ae:
6b:bc:fc:c8:e6:76:bb:73:ce:81:3f:93:ca:a1:2d:4f:dc:32:
a5:e2:63:c5:49:b6:98:6c:ab:cb:74:9e:b5:13:95:62:47:11:
9f:04:59:6f:f2:db:ea:d8:e7:fe:85:51:ac:d7:80:d4:e1:1c:
35:4a:81:36:38:99:f7:98:cb:2f:b4:90:20:18:5e:af:ed:ad:
ac:cc:bb:89:28:14:5d:8f:28:eb:ac:13:52:db:2d:6d:05:77:
ae:da:0d:9e:5e:a3:43:d2:29:28:75:0d:e5:6d:5c:65:33:19:
06:c9:28:4c:79:48:62:c1:eb:00:fd:27:d3:06:4d:61:57:ab:
db:42:cf:51:2c:78:7f:92:3c:6c:8e:78:39:4c:ea:0c:34:72:
90:2f:76:98:26:a3:36:6d:e5:a6:f5:eb:c6:a5:e8:df:b3:c6:
3b:93:b9:4f:c4:16:95:4c:bf:b6:9e:98:2f:22:bf:45:01:c9:
b9:5c:d5:38:04:5b:4f:f5:47:5f:e3:e8:2a:f7:34:1e:1f:88:
bd:87:ae:e6:7d:25:46:d9:94:d8:6c:98:1d:b7:30:4b:36:5d:
9a:f7:a7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:09:32 2026 by rpki-client