Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmX_KKTGc-HeYV8XogKAP9rvOUI.roa
File: gmX_KKTGc-HeYV8XogKAP9rvOUI.roa (raw, json)
Hash identifier: dbsM5ymWIfzJr2IhwMgThm44rQ/c6BmxcROM6a8FVQ8=
Subject key identifier: 82:65:FF:28:A4:C6:73:E1:DE:61:5F:17:A2:02:80:3F:DA:EF:39:42
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0CD5B9EEA4C084B9ADCE5C79750D2655D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmX_KKTGc-HeYV8XogKAP9rvOUI.roa
Signing time: Wed 23 Sep 2026 08:22:08 +0000
ROA not before: Wed 23 Sep 2026 08:22:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211422
IP address blocks: 151.241.136.0/24 maxlen: 24
151.241.139.0/24 maxlen: 24
151.241.164.0/24 maxlen: 24
151.241.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:16:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:5b:9e:ea:4c:08:4b:9a:dc:e5:c7:97:50:d2:65:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 23 08:22:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8265ff28a4c673e1de615f17a202803fdaef3942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:2b:db:fb:31:50:15:73:7c:76:67:36:78:
f4:45:f9:42:62:29:ac:25:6e:2b:2d:91:e7:25:6a:
9c:93:d7:99:9e:f3:85:3c:4e:ed:f1:55:7a:c3:3b:
fd:5b:e6:4f:b9:0d:63:23:1c:03:1e:9b:11:80:6a:
6f:0c:ad:a6:6f:98:f6:7c:55:cd:eb:b1:5b:13:8b:
fa:af:19:c7:21:f3:d4:fd:c5:41:d5:8b:d6:87:4d:
22:75:16:05:e3:82:5c:fd:c2:0a:4e:a1:a9:db:db:
70:f9:27:47:94:c7:72:64:95:33:74:0b:51:10:cb:
45:09:09:61:6c:52:e2:89:95:c8:16:ee:76:c1:7e:
b2:80:c5:a2:5e:6e:b2:24:72:85:f9:7b:42:ee:f7:
c5:e5:da:d0:db:90:02:4a:e6:ca:7c:7e:85:6c:07:
2d:45:0a:2a:28:f3:62:cd:6f:15:c9:79:13:30:07:
94:36:f5:ba:b0:3e:47:c3:fa:e8:3b:66:f2:1e:fa:
10:91:83:77:02:4f:fa:fd:38:07:9b:88:1b:e9:02:
b2:83:c6:a6:5f:bb:ab:42:65:0a:ea:e9:20:d7:f9:
14:38:d6:aa:72:8d:d8:2c:b3:8b:f2:d0:6d:d1:30:
97:c0:ff:69:ce:dd:bc:ec:11:ef:9a:10:97:15:8d:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:65:FF:28:A4:C6:73:E1:DE:61:5F:17:A2:02:80:3F:DA:EF:39:42
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmX_KKTGc-HeYV8XogKAP9rvOUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.136.0/24
151.241.139.0/24
151.241.164.0/24
151.241.167.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:9d:bf:df:5b:90:e9:5b:cb:58:28:c3:2e:fd:4f:94:a6:38:
1b:e0:67:97:9e:01:30:e5:a3:8c:20:bf:0c:d1:34:ba:c6:19:
a3:c0:4a:0a:63:95:fa:be:8d:cf:2a:8d:fc:cc:eb:95:71:9b:
7e:a6:61:49:37:28:37:b3:1c:3e:11:a4:0e:03:41:0a:06:fe:
75:03:f3:6e:55:9d:34:12:d5:00:6d:3a:59:32:4b:9e:a1:67:
82:21:33:fe:e4:a2:40:f4:e7:e3:7d:41:af:e2:bb:5e:57:83:
4e:b8:38:63:14:22:8d:af:ed:e9:2b:90:7c:0a:37:3b:78:b3:
e4:88:41:1d:a1:ea:58:a9:9a:e8:96:8d:f1:24:ba:92:19:ff:
e8:32:36:89:69:08:ab:db:61:f6:31:f6:70:80:35:6f:71:41:
64:89:34:cf:d0:1c:a2:ac:b8:88:b6:7b:9a:c9:09:0a:c2:b8:
a9:2a:5c:d5:3b:bd:42:1f:a6:49:af:49:18:9b:11:67:4f:7c:
33:ab:3a:80:2e:6d:8b:5b:e1:e0:37:f7:d6:fe:d9:22:c4:0f:
3c:94:bf:54:54:e3:1f:90:59:fa:3d:43:33:2e:45:88:7f:d8:
9a:f7:a0:cc:a4:f2:7e:f2:20:e1:54:54:6f:8d:2f:38:a3:c6:
a2:0f:e3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:06:24 2026 by rpki-client