Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hDJY_DFLAFkq0_RhSlSeme3fczs.roa
File: hDJY_DFLAFkq0_RhSlSeme3fczs.roa (raw, json)
Hash identifier: KIsw51eHoX3LrbQGF/x0OKJefkMnzrkj3pXGWe9xO0A=
Subject key identifier: 84:32:58:FC:31:4B:00:59:2A:D3:F4:61:4A:54:9E:99:ED:DF:73:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D0B3F4CD6E5DD0F8D378A4FEFEBE4880F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hDJY_DFLAFkq0_RhSlSeme3fczs.roa
Signing time: Fri 20 Mar 2026 12:36:31 +0000
ROA not before: Fri 20 Mar 2026 12:36:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49592
IP address blocks: 151.241.17.0/24 maxlen: 24
151.242.111.0/24 maxlen: 24
151.246.132.0/22 maxlen: 24
151.247.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 06:43:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:3f:4c:d6:e5:dd:0f:8d:37:8a:4f:ef:eb:e4:88:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 12:36:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=843258fc314b00592ad3f4614a549e99eddf733b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:69:0a:32:e8:64:e6:e0:83:73:cb:d4:b0:
1f:f9:1d:a7:c6:8a:fa:83:f6:9e:4c:7d:93:88:ef:
d2:39:00:9d:71:a6:b3:9d:7c:a9:65:68:41:4c:89:
09:13:c0:5c:3d:0a:24:d6:66:94:8b:5d:98:24:d6:
64:7d:1c:67:d1:d3:ca:84:b7:7b:42:30:c4:28:64:
97:88:3e:d3:62:29:40:99:3f:fb:71:e1:89:6d:d0:
86:d7:e2:89:cc:0a:87:82:c9:c0:ea:79:5a:3b:6d:
d6:d6:40:15:c5:5e:67:35:19:99:67:66:6c:68:6e:
25:b3:65:4a:f5:77:94:a3:9b:01:49:ba:67:7a:63:
ca:29:a2:01:14:83:d4:ce:ee:e7:ed:e4:d8:a1:59:
83:70:28:bb:00:41:27:5f:7a:c4:07:b0:b5:9a:2c:
e0:09:78:6b:ea:61:fb:58:2d:16:0f:fa:71:07:e3:
c6:63:3a:c6:ba:23:20:1a:87:a3:f2:a0:13:04:53:
92:eb:d2:02:1d:12:9d:ce:9e:71:13:bc:22:59:04:
46:78:8b:03:d5:06:f9:36:24:8d:01:06:f2:7e:f2:
e9:8a:8b:b2:3a:59:1f:be:68:4a:4b:3f:e5:b0:75:
f0:04:6f:63:14:e4:f9:8b:7e:49:8f:5d:c2:80:73:
0b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:32:58:FC:31:4B:00:59:2A:D3:F4:61:4A:54:9E:99:ED:DF:73:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hDJY_DFLAFkq0_RhSlSeme3fczs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
151.242.111.0/24
151.246.132.0/22
151.247.34.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:3b:cd:29:19:fa:dd:6a:6c:29:18:6a:c7:af:10:76:1a:7a:
59:d1:e4:b4:0e:99:45:5f:66:c2:a4:4b:b5:86:f4:c0:91:99:
6f:be:2d:49:ee:2b:d1:e5:2e:fd:d4:ea:3e:b4:23:5e:70:64:
e6:f6:55:f7:38:24:ce:f2:ee:a2:f6:2c:33:fa:0e:6f:33:ff:
3b:58:44:ac:f9:1a:39:31:8d:47:db:7d:c4:e3:17:63:e7:2f:
9c:85:2f:75:e7:c6:de:06:43:25:ae:93:ab:ca:07:8f:3f:2d:
6b:f3:d8:c7:a2:ee:28:ed:2c:fe:14:e9:e7:d0:aa:e5:36:30:
09:df:1d:4b:4a:7e:75:a9:ad:fe:fa:aa:db:90:3b:17:29:94:
37:52:41:b8:3d:68:28:82:33:d5:7e:80:08:5e:1b:e7:92:7f:
f9:03:90:7f:2b:0b:84:4f:d5:03:0d:8d:07:86:8c:c6:cf:5c:
9a:cb:4c:ef:45:37:26:db:4a:49:31:ae:45:ea:32:52:b4:5c:
e8:72:24:a9:a1:5d:b5:55:15:a8:bf:fe:70:50:7a:48:89:eb:
44:ec:81:3b:cd:13:4b:d1:b8:e8:89:55:4c:72:78:fc:21:c5:
65:73:f6:4e:db:91:8c:b1:04:5c:03:95:69:95:2f:6b:ca:39:
ff:a7:c5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 13:21:47 2026 by rpki-client