Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kb-h4UiQP2t0Yt2M9cSGiJK2S-M.roa
File: kb-h4UiQP2t0Yt2M9cSGiJK2S-M.roa (raw, json)
Hash identifier: uYbOj8l4doCppFP9jmsME3m6cJbtNl2c/1ssA/NT/0I=
Subject key identifier: 91:BF:A1:E1:48:90:3F:6B:74:62:DD:8C:F5:C4:86:88:92:B6:4B:E3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CED664FE4577C934703218C9C4710A96D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kb-h4UiQP2t0Yt2M9cSGiJK2S-M.roa
Signing time: Sat 14 Mar 2026 17:30:31 +0000
ROA not before: Sat 14 Mar 2026 17:30:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 151.241.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ed:66:4f:e4:57:7c:93:47:03:21:8c:9c:47:10:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 14 17:30:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=91bfa1e148903f6b7462dd8cf5c4868892b64be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:57:62:0b:e1:1d:fc:bf:94:ad:47:3d:59:c8:
9f:f8:f6:c6:5f:b9:72:02:fe:69:81:12:59:bc:3c:
3f:86:39:ce:b6:3d:9f:00:ac:14:1d:6c:be:41:85:
50:89:55:a5:86:f5:66:45:79:ff:ba:64:f7:c8:13:
67:92:f3:db:ce:12:dc:d5:7d:b6:2f:a3:3a:98:63:
e8:9f:0c:66:dc:f8:82:1b:bc:41:ee:69:d5:a2:72:
be:b2:9b:36:30:25:3e:32:15:64:91:fd:96:c7:c3:
1d:00:f1:35:f7:7d:33:62:4f:47:4b:12:8c:e6:0e:
df:09:c2:ab:3b:13:54:76:6a:26:82:fb:64:33:55:
ca:57:e0:f0:b9:8a:fe:4c:fd:ab:7a:6d:65:7d:d5:
c7:06:ab:2d:17:5e:22:ec:2b:be:5b:86:e9:4d:47:
c5:ad:54:f4:5f:9a:80:e7:96:d9:70:e6:19:2d:2e:
23:95:8c:9e:d8:be:41:58:08:de:08:c8:48:26:de:
65:c3:95:45:61:55:78:cf:68:ef:7f:72:a7:02:72:
74:5a:c1:0b:9b:3a:e1:5d:5a:94:8c:c3:4d:9e:e6:
72:b4:52:16:81:cd:e9:16:15:4c:cf:cc:68:e6:fb:
a2:d6:f6:b9:df:49:0a:a6:eb:66:76:19:13:f0:cc:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BF:A1:E1:48:90:3F:6B:74:62:DD:8C:F5:C4:86:88:92:B6:4B:E3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kb-h4UiQP2t0Yt2M9cSGiJK2S-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.18.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2c:ef:20:b6:31:ae:b5:6d:b8:2d:5d:f7:08:2a:18:25:4d:
51:d6:3d:65:da:29:b2:6e:00:dd:a2:f3:b5:3e:3f:1d:18:a5:
98:00:d0:89:2b:a7:92:26:37:d9:71:89:d9:b5:19:c7:91:6d:
de:15:20:92:f2:c0:ed:53:e9:ba:5f:98:5e:19:fc:69:e8:ff:
1a:9a:f1:57:f2:ba:77:48:f3:d5:1b:7e:e0:08:4e:a4:bf:1e:
10:25:db:15:0b:52:5d:83:8e:ce:ff:52:c8:fe:ad:16:6e:dd:
6f:97:4b:b4:32:99:f6:5b:ab:85:e9:d3:e5:ec:ae:e1:7a:94:
15:d8:66:50:c3:e2:0e:05:ca:7d:e0:51:da:d2:df:99:81:d8:
20:bf:f4:7a:83:60:ca:92:5a:f4:31:ee:18:82:00:32:e7:47:
01:66:41:16:0e:1e:05:85:d4:5a:fc:56:06:0e:a8:1b:63:9c:
ff:fe:40:5c:aa:6e:79:83:ab:c6:7b:88:08:f0:77:5b:bf:89:
08:87:15:ce:bf:f1:01:29:cf:81:6a:83:cd:00:68:2b:b6:e8:
6b:36:c7:40:b8:07:dc:36:d8:13:7c:76:7c:59:c9:77:2a:ec:
2d:33:04:87:ac:28:cb:ee:9c:d5:08:6d:76:8a:2f:86:83:3c:
e1:2a:2c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:02:39 2026 by rpki-client