Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bbQgerKH0msERq8pC0r_fv0cV7o.roa
File: bbQgerKH0msERq8pC0r_fv0cV7o.roa (raw, json)
Hash identifier: Hf/iOZqpHT5M7Q1WyF8sAGDZYdZ3Dk5LOmymBnbL9p4=
Subject key identifier: 6D:B4:20:7A:B2:87:D2:6B:04:46:AF:29:0B:4A:FF:7E:FD:1C:57:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A03D54E615948E4388AAAEA0B3AADE902E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bbQgerKH0msERq8pC0r_fv0cV7o.roa
Signing time: Wed 26 Aug 2026 09:09:29 +0000
ROA not before: Wed 26 Aug 2026 09:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 151.243.147.0/24 maxlen: 24
151.247.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:54:e6:15:94:8e:43:88:aa:ae:a0:b3:aa:de:90:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 26 09:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6db4207ab287d26b0446af290b4aff7efd1c57ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:25:39:04:80:be:ad:6e:6f:f0:8c:8f:fc:20:
b4:7b:b8:92:4b:04:72:70:a6:ec:e0:16:2f:1b:32:
5d:dc:c0:70:86:36:5c:2f:4f:fc:eb:45:ef:8c:5e:
90:ed:62:a9:9a:89:39:05:65:e2:8d:30:8b:46:43:
9e:e9:41:f9:d2:5c:f4:15:66:b8:9a:ee:d2:f3:54:
4a:e5:9a:27:e7:87:16:1e:f3:aa:e3:44:b0:71:ee:
de:09:da:3b:be:11:9d:df:f2:e7:36:c4:65:e9:10:
71:bb:c6:f5:07:61:6b:2c:e4:aa:02:a9:16:76:ee:
30:8b:61:1b:08:64:86:e3:9f:1c:42:ff:d1:84:85:
60:3e:38:6e:de:f5:e6:26:85:68:be:23:a8:1e:20:
22:72:34:d7:54:93:4d:59:d3:55:0f:ce:e8:8d:35:
98:35:a1:fe:58:4e:e7:5f:87:01:58:20:5b:c0:88:
3f:c6:59:c1:11:bb:9f:16:00:28:41:da:36:0d:de:
fa:75:35:f0:56:77:08:79:79:f7:00:21:4b:fd:98:
ed:44:65:80:27:c6:3b:0b:50:44:02:b2:90:7d:2e:
fe:90:ed:52:2e:cb:b0:70:ed:72:f7:7f:9d:1c:ff:
7e:12:7a:64:00:7c:bb:50:ed:49:d0:ae:d0:cd:01:
c1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B4:20:7A:B2:87:D2:6B:04:46:AF:29:0B:4A:FF:7E:FD:1C:57:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bbQgerKH0msERq8pC0r_fv0cV7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.147.0/24
151.247.10.0/24
Signature Algorithm: sha256WithRSAEncryption
62:62:9c:42:62:21:27:0c:47:40:00:57:df:11:1a:68:a6:4c:
05:b1:5b:d7:7d:95:49:6f:f3:ba:47:de:2c:3a:81:a2:9d:f9:
7a:7d:92:e0:a9:fc:95:e6:83:68:d9:ca:44:48:13:0c:45:a9:
9c:39:96:2b:f3:73:c3:80:f2:76:a3:a1:b3:6d:53:5d:fc:22:
77:64:2c:e1:36:4b:f0:34:39:17:fa:82:28:5a:d6:26:1d:a8:
16:0c:7f:da:d1:9c:7b:92:51:a9:7a:94:dd:c9:d3:2b:fc:41:
67:ea:a2:95:8f:f6:2c:aa:09:13:2c:35:40:97:18:42:c3:99:
1c:9a:a4:f7:42:89:96:f2:3c:e3:06:59:1d:bc:fd:82:55:32:
80:17:e0:0b:f3:ad:4c:92:e8:f4:98:f0:e3:b6:9c:4a:0f:37:
74:6e:f4:6e:18:97:ff:4d:3b:4f:99:f7:97:a0:05:ff:fb:41:
2a:3e:cf:4c:2c:0e:c9:b0:22:b9:65:de:86:43:f7:a2:de:b5:
7c:9d:b1:08:b0:ac:d0:22:56:05:71:28:a9:3b:67:1c:b5:52:
f1:d7:d7:5e:ed:f1:65:1e:27:30:a3:6d:98:96:59:de:12:8e:
3f:12:57:aa:c1:10:7e:a6:90:df:85:cc:36:94:10:4e:82:63:
d3:09:c4:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:18 2026 by rpki-client