Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kgKBE1ewuoXGz7LmeuUOUAQerdI.roa
File: kgKBE1ewuoXGz7LmeuUOUAQerdI.roa (raw, json)
Hash identifier: D/LSW+eZxICCAjM3RGhFAOvDAjcYrZSj9DJptuRbnoY=
Subject key identifier: 92:02:81:13:57:B0:BA:85:C6:CF:B2:E6:7A:E5:0E:50:04:1E:AD:D2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05C38FFBE87586D182D23BC5BFA8CAF49
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kgKBE1ewuoXGz7LmeuUOUAQerdI.roa
Signing time: Tue 01 Sep 2026 09:07:14 +0000
ROA not before: Tue 01 Sep 2026 09:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 151.243.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:38:ff:be:87:58:6d:18:2d:23:bc:5b:fa:8c:af:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 09:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9202811357b0ba85c6cfb2e67ae50e50041eadd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:63:9a:66:28:67:57:f8:a3:32:2f:1a:6b:2d:
04:60:f1:b7:60:ac:20:71:26:0e:b4:a4:d0:cf:33:
15:cc:c4:03:ce:de:c4:97:d8:23:56:a9:88:15:df:
03:ab:dd:11:a9:f0:d5:ec:c2:fa:e2:47:0d:04:f1:
8c:ea:5a:15:cb:6f:35:fc:f7:c2:d9:5a:34:33:7b:
a3:6e:73:f9:eb:6e:c2:67:d2:85:fe:ff:eb:7a:da:
c3:5a:9f:65:6d:5e:6a:c8:25:4e:2b:7c:c2:89:01:
61:62:a5:af:a9:10:05:72:4e:43:84:36:5f:57:e5:
da:47:47:4a:15:cd:97:de:12:a1:7a:93:20:09:7d:
fb:ad:85:7d:b7:a3:45:d3:3e:3c:8c:4c:e9:8b:79:
d0:44:1a:1b:81:1b:37:85:51:60:5b:53:72:10:93:
f6:11:63:c7:92:5d:70:6d:52:32:fc:06:17:31:7f:
d2:a2:03:98:72:6f:f2:cc:6d:57:b7:c4:2e:6a:1c:
87:93:d0:1b:4f:b3:ce:4b:bd:c8:4b:a5:ef:dc:e9:
51:2a:fa:e1:8e:fc:a7:d7:28:80:ab:8d:be:83:57:
75:f9:34:b5:21:54:e5:a9:b0:d6:4c:e1:20:4e:ce:
44:e1:1c:62:a3:44:9f:af:ea:b5:77:50:9b:ff:f6:
05:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:02:81:13:57:B0:BA:85:C6:CF:B2:E6:7A:E5:0E:50:04:1E:AD:D2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kgKBE1ewuoXGz7LmeuUOUAQerdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:02:67:b7:c6:d9:bb:ea:d4:8e:a8:1c:96:d3:54:75:07:9e:
a3:53:ff:13:15:39:ab:63:14:a1:9a:56:7a:1b:8f:db:04:c1:
00:91:2e:fc:d8:4a:30:0d:47:20:37:ef:33:86:71:87:17:03:
99:ed:fa:fb:43:6f:72:32:57:50:3c:c7:fc:1b:fe:e0:3b:4c:
2e:10:63:06:2f:25:95:e2:d5:c7:04:39:50:7d:39:24:18:69:
a6:2d:0d:42:d3:8e:35:14:0c:4d:0b:2d:3b:cf:c5:e8:c5:35:
bc:5b:67:92:58:71:8a:94:17:ba:fb:84:d5:f0:95:ff:0d:56:
13:e5:fb:5d:de:a6:66:9e:92:54:3c:f4:62:90:ec:2b:c5:7e:
9a:90:fb:73:15:ef:25:f3:f5:66:cb:28:e9:58:50:b0:7c:82:
c6:4b:bd:bb:66:66:c2:bf:f0:0a:e9:00:a4:2e:b7:4e:f4:37:
79:1b:f5:e4:3f:db:88:cb:26:19:c6:3d:0a:18:a3:7e:cc:3c:
14:47:70:c7:92:4a:bf:dd:f5:0a:e8:f2:5d:8b:3e:47:f4:a1:
20:c4:90:52:44:7a:16:1f:dd:9a:5b:bc:64:5f:e2:90:82:ec:
71:35:aa:95:40:37:c5:10:07:bd:ff:3c:58:81:c1:f2:72:b5:
b0:b5:c9:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 09:56:13 2026 by rpki-client