Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WkWEt4PvTCCrzA7PCHh7edsORHI.roa
File: WkWEt4PvTCCrzA7PCHh7edsORHI.roa (raw, json)
Hash identifier: YAKxy0uZbVgr7Fsy7iJ4vfLG0r08cdq4CK06jXWAFr4=
Subject key identifier: 5A:45:84:B7:83:EF:4C:20:AB:CC:0E:CF:08:78:7B:79:DB:0E:44:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1CA4971F5283E7962027D3A3DE788F2C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WkWEt4PvTCCrzA7PCHh7edsORHI.roa
Signing time: Wed 01 Jul 2026 07:46:16 +0000
ROA not before: Wed 01 Jul 2026 07:46:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 151.244.142.0/24 maxlen: 24
151.245.214.0/23 maxlen: 23
151.246.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a4:97:1f:52:83:e7:96:20:27:d3:a3:de:78:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:46:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5a4584b783ef4c20abcc0ecf08787b79db0e4472
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:b0:b5:f9:80:10:a6:5c:1f:7b:a0:f9:0d:
29:19:96:f8:6c:6a:99:a0:8e:6d:e2:6a:c0:b1:bb:
93:87:9a:6f:b8:a6:f2:ad:7c:47:0e:1e:35:66:8d:
21:d2:1d:bb:bb:d6:0a:11:70:80:00:34:e5:5f:3d:
cf:08:2b:96:40:d2:f2:72:72:b5:82:90:69:6a:ef:
e4:cb:9b:32:1e:02:bb:11:67:5a:a2:a5:0a:7f:4a:
02:f0:36:72:f3:e3:cf:5b:fa:05:a6:67:e1:cd:d8:
e4:7d:db:05:69:65:bb:02:1b:fb:79:4f:56:c2:82:
42:b7:0c:a9:0a:90:f3:79:c1:11:1d:b0:3d:77:49:
91:b2:de:5d:d6:14:01:62:53:85:28:4f:35:75:b0:
75:67:3d:71:74:3b:81:7d:b7:28:00:2d:a0:f5:7d:
f4:95:1d:17:f4:15:35:09:27:aa:38:72:09:63:ac:
52:37:b6:53:a0:9c:9b:c2:66:72:66:bb:1f:5b:eb:
73:87:ec:23:20:ed:dd:1d:40:3e:21:59:de:f2:ac:
c1:5b:8a:e2:a6:44:80:e0:ed:ac:d3:a7:ca:05:8c:
a1:6e:53:7c:d1:15:6a:0f:b9:a1:5b:76:04:63:b8:
b5:8c:6e:23:f2:de:3a:82:4f:80:9b:ee:d0:d7:51:
e3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:45:84:B7:83:EF:4C:20:AB:CC:0E:CF:08:78:7B:79:DB:0E:44:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WkWEt4PvTCCrzA7PCHh7edsORHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.142.0/24
151.245.214.0/23
151.246.32.0/21
Signature Algorithm: sha256WithRSAEncryption
93:ea:d8:a8:7d:99:a7:6f:d4:39:0d:e1:42:d0:0c:20:03:63:
ea:a9:c5:46:c4:bb:bf:f1:44:db:f1:1d:fd:b5:0b:f1:69:e2:
9a:f9:1a:4f:c5:50:0e:6c:e5:27:14:63:b6:99:5e:da:01:d8:
18:6b:d3:f7:52:23:3e:23:09:f3:97:55:4f:48:aa:f5:a4:30:
23:fe:d7:1c:28:0a:d5:11:c1:f4:bd:cd:8b:96:93:f2:d1:b9:
0e:ef:d0:00:6b:4e:29:b9:44:66:d6:e6:1c:b9:22:b0:33:84:
b7:28:c6:a8:86:12:91:84:27:09:02:4d:24:7d:53:4f:a3:fe:
4d:85:87:ff:96:a0:e9:93:ef:18:54:37:67:81:37:d7:bf:b9:
87:b7:97:4e:ea:90:75:81:85:58:74:7d:81:9f:24:f6:86:d8:
6b:33:f1:ae:fc:45:fc:09:6d:b7:f0:b4:67:93:9a:d0:02:f2:
2a:5f:9a:47:48:4a:df:95:d3:3d:4d:f1:59:ea:a2:b7:64:ae:
88:3e:c6:6c:7c:7c:c3:3e:7c:f2:6b:0e:75:7a:13:19:45:a9:
f0:66:d0:66:4b:4a:38:57:f2:ca:98:19:94:11:e0:93:a5:e1:
86:4b:d3:e0:46:4f:f9:b2:e5:8b:75:6b:18:e9:72:4b:e6:9a:
0b:bf:00:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:46:23 2026 by rpki-client