Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pJZD8qaW1wPVL8IcLLF-4NquaHg.roa
File: pJZD8qaW1wPVL8IcLLF-4NquaHg.roa (raw, json)
Hash identifier: Sl2MZJDNaOGVWL13gPESyMMtCFafwUx17nwM5VuNTgU=
Subject key identifier: A4:96:43:F2:A6:96:D7:03:D5:2F:C2:1C:2C:B1:7E:E0:DA:AE:68:78
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FDBC8771056685CA74622233DA2B26610
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pJZD8qaW1wPVL8IcLLF-4NquaHg.roa
Signing time: Fri 07 Aug 2026 10:32:55 +0000
ROA not before: Fri 07 Aug 2026 10:32:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134494
IP address blocks: 151.240.131.0/24 maxlen: 24
151.241.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:47:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:c8:77:10:56:68:5c:a7:46:22:23:3d:a2:b2:66:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 7 10:32:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a49643f2a696d703d52fc21c2cb17ee0daae6878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:0f:a2:fb:58:0c:72:10:39:2e:ce:6c:6d:
d1:ca:38:66:e2:82:cf:71:b3:81:07:64:37:85:a6:
6d:60:12:19:76:93:79:9a:3f:50:00:91:e8:28:db:
8b:37:5f:4a:39:ab:58:15:bd:a4:0d:b0:c6:de:df:
1a:c1:27:39:28:a5:cf:ef:0e:f1:9c:a8:2a:c9:f1:
16:b6:19:fc:8c:3c:a5:70:b9:9f:2f:d0:6f:ad:99:
3d:86:77:7b:44:d9:1f:00:ea:e7:7d:49:25:9e:c3:
17:82:c3:6a:92:bb:d4:3c:63:99:f0:6c:d7:80:7a:
2d:57:91:f4:8e:0d:f8:0b:5e:06:47:cb:6c:6e:6e:
a7:ca:e1:48:8e:dc:31:7f:04:f8:9e:7d:d4:a8:e2:
4b:62:f1:5e:7f:b2:73:58:0f:87:29:33:89:40:d8:
67:69:ee:34:cf:9e:ac:99:2c:29:d3:90:fc:86:10:
54:ba:ed:f5:e1:30:ea:00:2c:21:c2:f4:f0:fd:c9:
1f:33:b0:e5:42:35:dc:9d:5c:c6:04:ed:18:e0:38:
66:ae:17:94:03:62:4f:9b:88:2d:9b:af:a3:6f:e8:
1c:3a:a7:7d:c8:1b:9b:4d:4e:23:8d:b0:1b:bc:fa:
7a:d4:d3:78:88:f0:a7:4f:dd:0f:9a:1e:2e:95:53:
8e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:96:43:F2:A6:96:D7:03:D5:2F:C2:1C:2C:B1:7E:E0:DA:AE:68:78
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pJZD8qaW1wPVL8IcLLF-4NquaHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.131.0/24
151.241.145.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:19:65:13:1d:c6:4f:86:55:d1:a4:fc:5a:60:82:34:f1:5f:
aa:83:02:ab:85:e3:4b:40:f0:e8:5b:52:fa:82:f4:fe:8e:4e:
3a:33:d2:f2:31:80:ae:2d:fb:a7:76:88:4d:1b:2d:87:42:43:
4d:ff:d5:93:a9:e7:1e:ce:54:be:5d:a8:14:51:bb:a3:61:12:
1a:65:f4:e2:be:5c:80:b9:3d:7f:1a:88:1b:28:d1:2f:00:17:
37:bf:78:e9:bd:c5:e7:7f:89:02:0e:66:ac:92:6b:9e:87:1b:
e8:e1:96:60:bc:aa:1c:8a:5e:63:2e:ba:28:1a:e4:b1:07:0a:
af:d4:c4:bb:e5:1a:6a:1d:6a:81:81:99:fd:82:38:92:c3:24:
7f:fe:50:e5:fb:5e:13:d9:70:69:68:e2:72:46:3d:41:69:ca:
a0:f4:5f:70:ad:59:46:b2:b1:ee:90:1c:a0:80:0c:d1:ed:de:
e5:6a:3c:bf:54:48:dd:af:43:c2:82:e3:a0:12:7f:7a:91:b7:
b5:2f:db:d6:3d:9c:f6:76:b7:c9:fe:16:60:a5:3f:83:84:bd:
0a:50:a2:3c:5d:1d:83:f7:c1:34:6f:4a:62:c5:ed:9f:2b:64:
8e:13:ca:4c:3b:c2:90:68:73:22:ac:68:0b:f6:5d:eb:92:59:
01:63:0d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 00:29:11 2026 by rpki-client