Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fD1OGSrrd5kQJaILlf60SnTLNYM.roa
File: fD1OGSrrd5kQJaILlf60SnTLNYM.roa (raw, json)
Hash identifier: VFbO9SyExeIXPC8dm5hgt6Xwqlvs2JzIynKEuBHE4OM=
Subject key identifier: 7C:3D:4E:19:2A:EB:77:99:10:25:A2:0B:95:FE:B4:4A:74:CB:35:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0E29665812C2A25188078C8439B8ED29A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fD1OGSrrd5kQJaILlf60SnTLNYM.roa
Signing time: Sun 27 Sep 2026 11:18:22 +0000
ROA not before: Sun 27 Sep 2026 11:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 151.242.86.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:96:65:81:2c:2a:25:18:80:78:c8:43:9b:8e:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 27 11:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c3d4e192aeb77991025a20b95feb44a74cb3583
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f5:ad:c2:52:e1:34:ea:8b:97:87:23:18:d0:
83:bf:5b:cb:c8:96:7b:7a:09:a8:14:fd:d9:55:6e:
fe:4e:5c:5f:9a:a7:1b:e1:b8:e2:75:1a:60:e6:b9:
71:67:48:ae:85:f4:52:18:de:4c:1b:2e:6f:4d:8c:
95:52:13:3b:51:29:1f:c5:7a:55:82:d8:a9:98:b7:
b6:d5:41:70:36:6a:10:6b:38:09:e4:7a:c3:6b:67:
d7:b0:bf:ee:c9:6f:6b:07:c0:86:68:e3:3b:14:94:
34:19:9c:9b:61:23:0e:ac:80:df:d6:e9:e5:75:dc:
ad:ad:93:72:f7:4d:c0:93:10:fc:bc:88:90:c7:45:
80:b9:a9:a9:77:a9:7d:b9:34:70:7b:d2:43:c8:63:
4f:1d:50:f5:0e:45:db:c7:80:75:e2:e6:46:6c:05:
55:3e:af:9a:03:05:4e:79:5a:5f:ea:63:3b:86:81:
d5:4e:41:37:6e:63:cf:fe:72:59:b0:ef:3a:57:5e:
68:aa:27:2c:e8:f7:80:df:3c:e0:0f:93:5f:87:63:
8f:b0:f2:f5:47:07:57:b8:33:67:d1:2b:a7:74:fc:
44:be:c9:67:7e:bb:93:5c:63:ff:b6:c0:81:f8:ec:
5e:4e:57:39:35:38:65:73:3a:40:65:00:58:f1:a0:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:4E:19:2A:EB:77:99:10:25:A2:0B:95:FE:B4:4A:74:CB:35:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fD1OGSrrd5kQJaILlf60SnTLNYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.86.0/24
151.243.4.0/24
151.243.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:49:b1:56:af:d1:05:44:64:43:44:2d:f6:b5:2f:f1:63:f8:
1b:de:18:e2:8d:24:b6:d9:58:f7:d7:19:f0:cb:95:82:f5:e2:
9d:32:26:b7:1c:4f:1c:60:0e:ca:6a:0d:df:5d:5a:dc:2e:38:
b9:a2:df:43:4a:e2:34:41:8b:22:6f:0e:37:ef:5f:5a:5b:6f:
98:f7:f2:ef:07:80:e7:54:72:e0:c4:54:6e:01:41:9e:82:92:
8a:fc:e2:5a:e0:9c:bd:87:e3:fe:a0:8e:50:70:58:bd:05:e3:
ed:fc:25:76:85:a0:2f:bd:44:12:7a:41:8f:56:93:0d:88:f5:
07:67:9e:89:70:69:8e:fe:cc:19:ae:5b:cf:01:98:8b:09:6c:
1d:15:7b:ab:8c:65:59:92:c1:63:e1:36:30:b0:69:63:e9:01:
9f:e0:85:de:7f:f8:35:b3:c9:29:47:10:e5:f9:df:c4:e9:fb:
73:e0:b3:6e:8c:d7:0f:7e:82:1d:a1:94:4b:49:19:45:37:e3:
09:7b:b9:0e:e7:e3:38:53:98:f4:ac:27:20:6e:5b:fe:4e:56:
a2:b3:ac:fa:53:6b:ad:c7:2c:95:a0:8c:ba:ff:41:5e:e5:33:
ee:5e:1a:56:58:67:a0:d4:42:4d:2f:d6:74:6c:ad:67:40:59:
1b:e2:ef:4b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaDilmWBLColGIB4yEObjtKaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTI3MTExODIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzNkNGUxOTJhZWI3Nzk5MTAyNWEyMGI5NWZlYjQ0YTc0Y2IzNTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPWtwlLhNOqLl4cjGNCDv1vLyJZ7
egmoFP3ZVW7+Tlxfmqcb4bjidRpg5rlxZ0iuhfRSGN5MGy5vTYyVUhM7USkfxXpV
gtipmLe21UFwNmoQazgJ5HrDa2fXsL/uyW9rB8CGaOM7FJQ0GZybYSMOrIDf1unl
ddytrZNy903AkxD8vIiQx0WAuampd6l9uTRwe9JDyGNPHVD1DkXbx4B14uZGbAVV
Pq+aAwVOeVpf6mM7hoHVTkE3bmPP/nJZsO86V15oqics6PeA3zzgD5Nfh2OPsPL1
RwdXuDNn0SundPxEvslnfruTXGP/tsCB+OxeTlc5NThlczpAZQBY8aDuLwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHw9Thkq63eZECWiC5X+tEp0yzWDMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZkQxT0dTcnJkNWtRSmFJTGxmNjBTblRMTllNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/JWAwQA
l/MEAwQAl/POMA0GCSqGSIb3DQEBCwUAA4IBAQCoSbFWr9EFRGRDRC32tS/xY/gb
3hjijSS22Vj31xnwy5WC9eKdMia3HE8cYA7Kag3fXVrcLji5ot9DSuI0QYsibw43
719aW2+Y9/LvB4DnVHLgxFRuAUGegpKK/OJa4Jy9h+P+oI5QcFi9BePt/CV2haAv
vUQSekGPVpMNiPUHZ56JcGmO/swZrlvPAZiLCWwdFXurjGVZksFj4TYwsGlj6QGf
4IXef/g1s8kpRxDl+d/E6ftz4LNujNcPfoIdoZRLSRlFN+MJe7kO5+M4U5j0rCcg
blv+Tlais6z6U2utxyyVoIy6/0Fe5TPuXhpWWGeg1EJNL9Z0bK1nQFkb4u9L
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:41 2026 by rpki-client