Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cuC8dvYObT-ROGACzTNjtoJ79EM.roa
File: cuC8dvYObT-ROGACzTNjtoJ79EM.roa (raw, json)
Hash identifier: RWo4ZZFmHBsckYo4OQZlRhAJQR3BhLhAR2d2ATCJ8a4=
Subject key identifier: 72:E0:BC:76:F6:0E:6D:3F:91:38:60:02:CD:33:63:B6:82:7B:F4:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DC3074A5A826C5E59CD7C9885E82B5178
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cuC8dvYObT-ROGACzTNjtoJ79EM.roa
Signing time: Sat 25 Apr 2026 05:05:28 +0000
ROA not before: Sat 25 Apr 2026 05:05:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53107
IP address blocks: 151.244.117.0/24 maxlen: 24
151.244.141.0/24 maxlen: 24
151.245.229.0/24 maxlen: 24
151.246.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 13:58:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:07:4a:5a:82:6c:5e:59:cd:7c:98:85:e8:2b:51:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 25 05:05:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72e0bc76f60e6d3f91386002cd3363b6827bf443
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:7b:5f:ea:f9:e3:2e:d7:c7:73:7e:93:e5:
b8:f3:3f:93:88:3c:d8:2e:6e:c3:0b:5e:04:68:21:
63:fb:69:2f:89:9a:88:ad:4d:c9:01:df:31:38:50:
ce:78:c4:e5:0f:90:1b:a9:31:51:f8:3e:dd:ba:56:
49:42:2f:02:0d:f6:91:c9:39:0a:96:0e:be:57:ed:
22:87:c6:cf:f0:4b:a7:91:9f:7d:9b:b1:ed:d1:35:
34:ca:25:89:22:04:e0:99:81:df:c2:a5:3d:13:b6:
2c:de:56:af:7f:e5:48:01:51:ac:b1:e6:c7:2e:7a:
67:d3:44:c0:ed:00:84:d4:7c:96:ed:91:55:7d:98:
1d:b6:e8:b4:93:84:0c:76:0d:af:a5:8f:6a:a1:10:
21:64:2c:7c:a9:01:d9:97:95:6c:0b:15:7d:62:ba:
fd:cc:79:8d:62:1b:c1:28:ea:48:3f:d2:ac:17:e5:
ed:63:6c:71:f2:ee:c0:d1:d0:03:bb:e0:6e:0f:1b:
8a:b0:6f:00:d6:a4:85:02:e6:a9:6b:3c:fd:23:eb:
38:d3:23:09:6f:19:6a:fe:5c:fd:c3:a9:01:1a:a8:
b9:72:c4:a0:3a:77:2a:e9:af:32:b0:1a:91:11:1a:
9f:00:0c:19:e7:9a:07:81:11:01:30:1e:2a:24:11:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E0:BC:76:F6:0E:6D:3F:91:38:60:02:CD:33:63:B6:82:7B:F4:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cuC8dvYObT-ROGACzTNjtoJ79EM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.117.0/24
151.244.141.0/24
151.245.229.0/24
151.246.233.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d4:c6:1a:db:5e:c7:4b:a4:a9:70:a5:34:0b:8c:66:ab:92:
4f:f4:13:cb:b0:a2:f6:3a:4d:47:d0:af:e7:51:34:3d:4e:aa:
f6:57:db:f6:2f:6e:5e:26:af:aa:b2:2e:ac:88:17:18:a2:f5:
9b:7c:aa:98:e9:5c:5c:28:d3:82:86:26:e2:6a:d1:8d:03:24:
ad:70:da:b3:90:15:52:b8:54:e6:a3:6a:de:8e:f2:ae:b0:62:
97:2b:b1:fd:b0:a3:5e:70:2f:59:04:0f:d9:6d:d9:60:5c:f8:
19:92:36:fc:4f:e1:6c:bd:b8:d4:16:c2:40:d5:ff:08:ca:49:
74:f5:c5:9c:18:be:73:1c:19:a2:cd:4a:e5:0a:4f:f2:4c:9b:
4e:c5:aa:23:eb:12:98:9b:ec:49:ec:96:39:d2:e3:e0:81:3c:
86:e8:27:23:47:c3:07:e7:cd:95:70:87:b9:10:ec:7b:e5:1b:
b1:48:83:f3:43:2d:8a:d3:bf:43:0b:ad:8a:5e:b4:02:2d:37:
94:b3:6b:88:77:fa:29:77:16:15:11:c5:11:5d:73:2b:13:15:
04:55:fc:0d:e3:8f:fd:5b:21:1c:c7:eb:cb:eb:bc:13:dc:82:
e2:55:9e:5b:56:a8:61:0e:8d:c9:9d:14:ff:5f:a9:eb:a8:87:
b8:8e:61:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 23:18:25 2026 by rpki-client