Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oFMzaSqxHsUmt91qa8dTeUJsop0.roa
File: oFMzaSqxHsUmt91qa8dTeUJsop0.roa (raw, json)
Hash identifier: mXTKb2zIdBVlLj9GTUSv6IUOt/OS984smvZxFMmn5Ts=
Subject key identifier: A0:53:33:69:2A:B1:1E:C5:26:B7:DD:6A:6B:C7:53:79:42:6C:A2:9D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A044915A01D0EA4BD4D84AB519036777F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oFMzaSqxHsUmt91qa8dTeUJsop0.roa
Signing time: Thu 27 Aug 2026 18:52:51 +0000
ROA not before: Thu 27 Aug 2026 18:52:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268581
IP address blocks: 151.240.163.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.247.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:91:5a:01:d0:ea:4b:d4:d8:4a:b5:19:03:67:77:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 18:52:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a05333692ab11ec526b7dd6a6bc75379426ca29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:ef:c1:8a:c4:c0:10:f0:6a:7f:fa:85:8c:
4d:56:31:6c:77:b8:9e:15:85:26:50:0a:8d:e0:c2:
3c:e1:bc:fb:65:5a:87:dc:43:0a:0e:bc:43:ab:cf:
b6:43:1c:97:b9:68:fe:15:ab:1f:b5:31:b5:c3:db:
89:a5:7c:d5:6a:41:4a:29:f8:7f:13:78:8f:93:2b:
be:be:31:2a:94:36:c7:58:2d:59:a0:05:46:0b:f0:
a1:15:88:dd:c1:2a:bf:15:65:23:21:8e:97:04:3c:
9a:cc:fe:ae:a7:2f:4e:bf:32:4d:f2:65:91:c6:bc:
bd:44:27:8b:46:2c:00:42:88:a2:d7:31:7d:7f:09:
46:a4:fa:5e:2e:c5:4b:c1:8a:dd:0b:c9:a1:56:60:
9d:eb:b3:85:45:b0:1d:15:79:84:e4:32:c5:2a:56:
78:ad:b0:1e:ce:15:3d:c7:b7:b1:97:47:02:3b:b1:
1c:dc:1c:a8:c0:08:be:8a:63:0c:5c:6a:59:e9:47:
3b:98:3e:66:b7:cf:9b:bf:15:3d:3f:91:09:ed:77:
61:0d:fe:47:d1:2d:e0:f7:03:c6:e3:d0:0d:f4:30:
4a:1f:90:56:7a:e1:dc:cc:d9:b8:0d:7c:bf:1a:17:
08:3a:3a:e1:ed:76:b7:32:1e:ba:72:6a:e0:e1:5b:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:53:33:69:2A:B1:1E:C5:26:B7:DD:6A:6B:C7:53:79:42:6C:A2:9D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oFMzaSqxHsUmt91qa8dTeUJsop0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.163.0/24
151.240.165.0/24
151.247.145.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a8:d5:64:df:9b:40:d1:01:2e:f6:8d:cb:68:56:c1:94:a7:
51:26:9a:97:35:aa:a6:52:8b:52:ed:3d:b8:2e:38:b8:c8:9f:
8f:5b:bb:f6:59:18:9a:73:e0:5c:87:2f:57:93:f5:e1:53:fd:
6c:c8:10:63:81:e0:e5:7b:bc:77:9d:6e:55:ac:f0:c9:6c:01:
3d:60:1d:15:da:4e:70:13:e7:d3:c4:4c:3e:b2:1c:1a:99:fb:
00:ff:4c:06:8c:00:38:84:3d:57:df:03:91:d7:5e:43:ab:ff:
95:ea:5a:99:c2:54:18:c1:80:5b:8f:eb:19:a3:99:f4:ad:e6:
50:07:00:60:38:af:52:67:6a:65:b3:2c:ed:96:a2:cb:e5:30:
c0:74:26:32:5c:4a:c7:a4:8d:54:53:0c:98:c9:68:c9:b0:67:
29:35:7f:aa:a1:49:98:c1:50:e0:40:1b:9c:8d:04:b0:8e:a3:
50:a9:70:b0:67:32:07:d5:7f:17:da:89:2d:58:b9:65:55:76:
5c:46:a7:60:6b:af:30:e8:7b:8a:a2:55:aa:81:9a:9c:e4:35:
32:6b:e4:dc:f4:94:30:8d:30:03:03:62:e3:60:92:88:3f:b2:
f3:b2:a4:2f:8c:15:f4:2a:94:64:79:f1:67:3b:10:2f:8e:60:
a6:57:5c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 18:31:36 2026 by rpki-client