Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ii2BrHitf9QoB3G9HEPZ-nGkwfo.roa
File: ii2BrHitf9QoB3G9HEPZ-nGkwfo.roa (raw, json)
Hash identifier: Uj0ueVu4bOdXR9FB6bmMTVcgTxZFfF5UU/H+UhHYVa8=
Subject key identifier: 8A:2D:81:AC:78:AD:7F:D4:28:07:71:BD:1C:43:D9:FA:71:A4:C1:FA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A02A434EAF779E7A906BE6A26B54392412
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ii2BrHitf9QoB3G9HEPZ-nGkwfo.roa
Signing time: Sat 22 Aug 2026 16:17:29 +0000
ROA not before: Sat 22 Aug 2026 16:17:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.246.131.0/24 maxlen: 24
151.246.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:43:4e:af:77:9e:7a:90:6b:e6:a2:6b:54:39:24:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 22 16:17:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a2d81ac78ad7fd4280771bd1c43d9fa71a4c1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:c4:b1:be:6d:a2:dc:19:f8:d1:21:0d:79:
26:0f:e9:f7:65:71:08:d6:e6:57:d7:ca:64:73:8c:
16:39:54:26:2b:b3:10:9b:8c:1f:5b:95:7d:f7:8b:
48:6d:cd:7f:5b:9c:fd:63:da:b8:cf:56:5f:f5:83:
64:a0:39:6d:4f:93:11:21:d5:d0:21:4c:69:31:83:
f8:18:11:13:e9:98:6e:9d:f6:0a:f8:cf:67:34:47:
49:1c:da:c3:e4:ae:89:e8:22:af:ea:6e:e7:c1:7e:
d5:d1:90:0e:35:60:a1:4c:df:4c:4a:84:a4:b2:33:
09:8e:bc:40:cd:89:bd:2b:c8:89:9d:91:56:d0:3e:
b3:d0:39:15:4d:1b:dd:bc:85:0f:a6:f9:34:41:3f:
dc:7b:ec:a2:63:52:35:c4:1d:45:a9:b8:10:66:fb:
c2:72:b8:ae:e7:03:19:60:aa:f9:0f:2f:88:2e:f8:
ae:1b:d3:2f:87:2a:28:d3:db:13:1b:aa:d2:9f:90:
df:a5:12:38:38:2c:71:84:0f:98:d5:b5:98:a2:fe:
09:6c:51:a4:3e:f2:83:2c:4d:9e:95:02:7e:83:3c:
30:87:d3:9e:af:86:3f:d8:92:59:fc:b5:b7:f8:65:
3c:89:72:2b:f2:17:4e:b0:e3:19:85:41:4f:12:ff:
8c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:81:AC:78:AD:7F:D4:28:07:71:BD:1C:43:D9:FA:71:A4:C1:FA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ii2BrHitf9QoB3G9HEPZ-nGkwfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.131.0/24
151.246.158.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c9:c2:b9:fc:d9:c6:74:ce:a7:bc:6c:05:39:2b:38:fa:af:
1f:54:20:15:16:2c:e9:19:50:16:9e:d9:21:85:3b:db:e6:59:
95:b0:ff:88:6e:fa:26:f1:45:f7:4f:58:f3:13:db:dd:25:51:
22:0c:d2:0b:79:34:a7:d1:18:b8:20:51:9a:19:c6:09:3d:f3:
d5:6c:08:7a:e0:38:f8:8f:75:28:f4:71:df:21:5c:35:44:af:
30:03:3c:3e:89:6f:39:29:f9:20:70:61:30:9e:8d:ac:76:fe:
4e:f7:f1:db:7a:d4:92:61:40:57:ef:40:d7:65:37:66:55:63:
12:da:76:4b:76:66:d7:0e:2e:a8:8a:cc:4a:4f:f7:06:35:c6:
78:61:8f:72:7b:53:91:06:e3:49:04:37:1f:75:55:0d:2e:10:
28:17:22:9a:46:c1:2f:04:b6:bf:f6:22:a1:06:b2:f3:e0:4a:
f2:94:03:25:30:d5:c9:68:77:ef:e5:52:ae:94:16:0a:73:c3:
3f:90:c1:09:a7:29:26:70:1b:fa:be:e2:59:34:2a:62:07:62:
7a:46:c0:f0:90:25:7a:b9:ce:5d:43:7d:bf:22:a7:e5:e5:65:
29:5c:9b:1b:ac:3f:ae:dc:8d:e8:65:00:3e:94:ec:5b:f1:25:
d3:08:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:59 2026 by rpki-client