Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/duYG5iReUaVcj8CvK_cOzW81y0E.roa
File: duYG5iReUaVcj8CvK_cOzW81y0E.roa (raw, json)
Hash identifier: TyuGa4iIJAyQEP5zbnYDNVYbBt38Wbody3yDjJlVTy4=
Subject key identifier: 76:E6:06:E6:24:5E:51:A5:5C:8F:C0:AF:2B:F7:0E:CD:6F:35:CB:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C6B04ADE35321003647B9C0AD36831532
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/duYG5iReUaVcj8CvK_cOzW81y0E.roa
Signing time: Tue 17 Feb 2026 09:53:14 +0000
ROA not before: Tue 17 Feb 2026 09:53:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 151.244.101.0/24 maxlen: 24
151.247.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Feb 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:04:ad:e3:53:21:00:36:47:b9:c0:ad:36:83:15:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 17 09:53:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76e606e6245e51a55c8fc0af2bf70ecd6f35cb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:a7:bf:26:b6:20:4e:c2:0c:10:7e:57:b3:
cc:74:b7:54:2a:5e:80:36:dd:15:9c:14:00:a4:a8:
f3:9d:d9:43:5d:1f:28:b6:6e:b0:68:06:8a:da:43:
26:cd:6c:9c:da:20:54:01:36:c3:db:aa:b4:ed:72:
da:43:25:72:57:56:49:ea:ad:eb:19:fd:64:0b:df:
93:e4:1d:a4:fc:b7:b7:f5:db:83:73:d3:d3:2d:79:
34:cb:4e:62:09:68:c1:cf:a6:4a:a0:34:8d:04:f3:
39:8c:ec:b0:3c:a1:bf:40:1a:9a:90:39:8e:fc:5c:
b0:29:49:a1:86:d9:24:c9:a1:1e:47:ab:cc:df:fe:
20:3c:fd:f0:66:a6:6b:63:aa:3e:c4:7e:a3:f2:f9:
2e:c1:26:2b:b0:23:aa:33:ce:57:b5:2f:4d:e5:49:
e6:8f:b1:03:d2:dc:71:fe:d9:fc:04:05:36:3e:f1:
6f:90:63:35:6b:48:8a:e4:de:ac:82:31:88:35:23:
e2:3f:46:42:8b:c4:00:f7:d9:f4:41:f7:3c:80:99:
4f:7f:f1:57:3e:cf:58:26:38:7c:5c:a5:35:6c:97:
88:04:29:12:ff:eb:fe:03:c0:c6:b9:e7:3a:67:df:
39:fb:75:59:2b:f6:14:5f:3c:ca:22:ca:0f:03:d0:
f1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E6:06:E6:24:5E:51:A5:5C:8F:C0:AF:2B:F7:0E:CD:6F:35:CB:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/duYG5iReUaVcj8CvK_cOzW81y0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.101.0/24
151.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
85:4b:64:2a:ce:f5:a1:df:1b:4e:1a:85:cf:9d:4c:2a:e2:dc:
c6:08:05:20:42:32:e5:20:87:24:bf:20:68:df:31:c6:ef:24:
f2:0a:ed:cf:b2:84:e5:52:4c:51:4d:45:d5:0a:a9:8a:90:fa:
c1:94:f9:d4:8d:bf:a2:8e:5e:c3:cd:1b:31:9a:f7:d6:44:dd:
8b:e4:56:92:43:f9:1e:4f:c1:16:b7:3a:d5:50:c5:ae:5e:ab:
d0:57:80:5b:53:0d:14:a6:aa:8a:07:9f:88:85:e4:ab:c1:ac:
9f:8f:72:0e:96:11:06:a4:02:9f:40:94:50:29:c1:1b:69:00:
6a:a3:3f:56:83:53:34:d0:fc:06:39:98:aa:70:ed:1f:71:d7:
2d:24:b8:89:3f:e2:c8:4a:dd:47:46:a5:8e:19:4b:cb:d6:fe:
33:1f:99:89:6f:94:e3:89:a1:66:9e:1e:57:ff:c8:d8:26:d4:
53:5a:d5:c5:53:45:ac:66:9c:4d:dd:78:59:9f:71:4d:a7:af:
b4:0a:aa:ff:88:31:e6:d8:98:f0:16:d9:47:9f:de:41:79:77:
dd:de:9c:37:b9:73:a0:83:e2:c5:7e:36:2f:d2:ad:05:f3:26:
fc:d6:7b:d3:22:6d:c0:20:99:ec:62:49:ab:26:b2:24:9b:ea:
ff:30:04:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 26 03:25:53 2026 by rpki-client