Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o19pJ8G-w9-X82sYArF6wc_xljU.roa
File: o19pJ8G-w9-X82sYArF6wc_xljU.roa (raw, json)
Hash identifier: FSmelVfpqi2ETKjf+j99bRmPqT6TGWZgfb+gy42OQIQ=
Subject key identifier: A3:5F:69:27:C1:BE:C3:DF:97:F3:6B:18:02:B1:7A:C1:CF:F1:96:35
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DA141E02317A89A7913F04F06EA3F3FE5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o19pJ8G-w9-X82sYArF6wc_xljU.roa
Signing time: Sat 18 Apr 2026 15:42:22 +0000
ROA not before: Sat 18 Apr 2026 15:42:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198748
IP address blocks: 151.246.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:41:e0:23:17:a8:9a:79:13:f0:4f:06:ea:3f:3f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 18 15:42:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a35f6927c1bec3df97f36b1802b17ac1cff19635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:80:72:98:a7:6c:52:10:72:98:61:54:ec:3a:
3b:9a:3a:12:f5:4c:a7:3b:73:5c:99:da:03:a9:10:
91:69:8f:ed:0a:21:96:f6:37:15:3a:7a:6d:d1:8f:
d2:18:30:64:60:06:14:3a:7d:89:ca:15:8f:16:99:
f2:5f:bb:ff:41:14:70:00:97:13:f4:14:4b:be:44:
9a:5c:85:59:e5:fe:9e:f0:22:a8:28:a9:8b:83:83:
86:e6:e2:ac:04:47:ef:2a:3c:e3:f6:74:20:7d:d2:
e2:5e:52:9a:a6:da:cb:c6:14:52:89:8e:3f:22:40:
8b:87:37:eb:15:f0:73:77:1e:13:e1:0d:95:1f:ed:
51:65:9d:08:19:a0:9a:74:e0:86:99:e8:e0:2e:74:
11:fe:2e:a6:51:a0:cd:ab:38:2e:60:be:b8:b2:69:
35:83:bb:e2:1a:c3:fc:e9:c8:e5:96:e1:c9:77:0a:
89:14:29:bb:a5:13:cc:14:c4:8b:65:ab:6f:f7:af:
11:95:59:f5:6f:86:ab:1f:cb:63:25:49:c9:6f:22:
2d:76:bd:a8:36:cf:59:8a:93:1f:0c:23:a4:2a:e3:
85:11:20:5d:9e:a2:7b:62:9e:f1:0f:6b:24:7c:a1:
40:ce:7d:4b:f4:1b:0d:04:a8:c0:2d:4e:bc:33:95:
f1:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5F:69:27:C1:BE:C3:DF:97:F3:6B:18:02:B1:7A:C1:CF:F1:96:35
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o19pJ8G-w9-X82sYArF6wc_xljU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.151.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b2:6f:df:62:a4:5f:f3:b3:cd:43:c6:92:72:7f:7b:c7:75:
51:fe:dd:e1:c6:8a:90:99:28:6c:d4:d6:78:47:7d:d8:30:64:
46:8e:ca:83:67:d8:c1:cd:e5:f1:a6:bf:0d:35:c9:7d:ed:9e:
3d:64:62:89:6e:4d:b2:0a:33:65:25:9b:52:be:0a:81:48:f5:
cf:ac:52:6c:0f:43:92:b5:9d:5a:6b:6a:c1:0f:2d:15:53:1e:
e8:22:4b:c0:ff:38:97:30:9c:da:53:d4:02:ce:c6:cf:8b:a7:
45:53:7d:f2:4a:60:13:eb:45:89:43:53:f0:6e:d7:57:fe:0c:
b6:1a:94:e5:bb:3d:0e:7c:81:12:5c:04:e2:5c:97:18:9a:f5:
8f:55:c6:ae:97:00:db:d6:35:e7:38:b8:7e:8d:53:47:87:26:
02:22:42:6b:dd:cd:92:5e:ce:33:4a:c7:00:f6:0e:79:aa:76:
e1:40:88:e7:ef:a6:5f:3c:53:fe:bf:8a:7e:c3:f8:b1:81:a9:
aa:88:e9:f3:a4:56:34:74:69:fa:d9:15:e7:3a:79:cd:ee:2f:
17:1b:bd:37:9f:98:10:14:15:fe:56:67:bc:6d:c1:56:cc:b0:
61:e6:b9:f2:85:fd:e3:95:f3:53:eb:41:af:df:d9:d6:5b:f1:
91:b3:73:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 18:42:09 2026 by rpki-client