Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVQpEO5rysXvPPoao4ZUiFbDXOo.roa
File: kVQpEO5rysXvPPoao4ZUiFbDXOo.roa (raw, json)
Hash identifier: EgC7frEymLYsf3Ko0ZEKZAL7ViivMav9Hdn8fIIjzo8=
Subject key identifier: 91:54:29:10:EE:6B:CA:C5:EF:3C:FA:1A:A3:86:54:88:56:C3:5C:EA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ED01805309AC0B89229F69855832A385C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVQpEO5rysXvPPoao4ZUiFbDXOo.roa
Signing time: Tue 16 Jun 2026 11:01:35 +0000
ROA not before: Tue 16 Jun 2026 11:01:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 151.242.176.0/24 maxlen: 24
151.242.178.0/24 maxlen: 24
151.242.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:18:05:30:9a:c0:b8:92:29:f6:98:55:83:2a:38:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 16 11:01:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91542910ee6bcac5ef3cfa1aa386548856c35cea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9f:a4:42:5a:d6:7b:50:3c:71:a8:65:f8:e3:
29:5d:48:f7:f0:ab:42:4a:aa:0a:69:1b:c1:b3:b7:
6a:ef:a5:33:31:66:5f:8a:54:b2:9c:f1:d1:84:aa:
5b:8e:74:29:c2:1b:72:9b:60:2d:c5:3e:43:0a:25:
ca:66:75:38:3e:97:65:69:54:4f:cb:ab:75:06:90:
77:7c:a1:10:24:1f:0d:b9:7f:af:dd:25:31:99:9c:
87:59:d6:f5:df:fa:62:44:aa:05:d1:86:f5:2f:c3:
f6:93:42:50:94:2b:89:da:92:92:b3:41:d0:91:02:
dc:e9:44:43:7d:ec:ce:1c:69:5d:34:bd:03:a6:66:
88:48:0f:f9:67:a3:b8:0b:00:e0:cd:8b:87:1b:b2:
62:91:63:8a:4e:24:7a:f1:ec:82:39:f8:a7:30:40:
fb:88:a3:4d:f5:2b:51:ea:93:c3:8b:c0:fa:5b:36:
b3:f1:50:9d:00:0d:5d:df:64:0b:b9:0b:f8:82:01:
1c:f9:d5:ff:24:52:42:83:2e:57:5b:f6:66:04:3b:
58:23:0e:79:54:a2:52:9a:14:3f:52:a0:af:06:c4:
fc:d3:fd:fd:ce:33:9d:90:44:ed:20:ae:48:b1:37:
ca:ca:21:08:68:35:0d:61:84:92:e8:10:d8:b3:f7:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:54:29:10:EE:6B:CA:C5:EF:3C:FA:1A:A3:86:54:88:56:C3:5C:EA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kVQpEO5rysXvPPoao4ZUiFbDXOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.176.0/24
151.242.178.0/24
151.242.184.0/24
Signature Algorithm: sha256WithRSAEncryption
14:a6:93:87:f9:58:16:f6:16:05:05:13:84:68:a7:06:3f:e4:
66:76:65:25:b7:df:e2:6c:f5:07:fa:03:77:82:bc:d4:17:4a:
c9:f6:a9:6c:08:49:eb:42:58:16:44:7a:ca:80:6a:45:32:32:
61:2f:d7:f8:cf:80:0c:b7:b8:2b:2c:71:de:6a:f6:03:33:c1:
4e:78:fb:22:17:cc:0e:fe:d2:5c:1d:6f:d5:d2:c5:e0:0b:23:
ec:59:99:70:83:a6:bb:b2:c5:55:15:34:34:0b:39:1d:01:52:
99:c8:4f:40:57:e2:69:c7:bd:61:f5:4b:35:07:d3:94:c2:b8:
ec:4b:18:1d:84:25:6c:2e:19:67:a8:38:cc:07:73:7f:d8:b0:
2b:8c:70:45:18:73:5b:df:4a:1b:83:b6:95:5e:33:47:04:42:
5e:ec:5c:90:88:b1:15:22:3c:09:02:6c:c5:cc:5c:82:d4:5d:
91:c3:ae:af:50:62:8f:3c:08:69:b7:94:c6:55:24:fe:85:c9:
d3:1d:c8:25:fd:07:c3:60:3d:28:d6:c8:e0:50:68:cc:3f:15:
08:bb:51:68:f2:c5:f5:f4:c8:96:6f:e9:01:f3:a7:7f:4d:36:
56:99:31:8d:d8:da:7a:3d:42:0f:96:df:86:74:54:a5:93:8f:
13:0e:1d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:17 2026 by rpki-client