Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pLFT8mp8UOHmVysTl5ZxPJbxu1k.roa
File: pLFT8mp8UOHmVysTl5ZxPJbxu1k.roa (raw, json)
Hash identifier: R1Pwqi2DAL8/JdwXlfRAC+wsxdQgo/CoCjImAenGqzU=
Subject key identifier: A4:B1:53:F2:6A:7C:50:E1:E6:57:2B:13:97:96:71:3C:96:F1:BB:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A120753936DB8822EE8DEEC8250B0085BC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pLFT8mp8UOHmVysTl5ZxPJbxu1k.roa
Signing time: Fri 09 Oct 2026 11:38:35 +0000
ROA not before: Fri 09 Oct 2026 11:38:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201320
IP address blocks: 151.246.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:75:39:36:db:88:22:ee:8d:ee:c8:25:0b:00:85:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 9 11:38:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4b153f26a7c50e1e6572b139796713c96f1bb59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7d:57:e5:96:e1:4f:ec:8a:84:37:92:72:c2:
4d:14:58:06:3d:f1:37:f9:0a:05:1c:f2:b0:ed:4b:
6a:06:8b:2a:32:21:d6:b4:b6:5a:97:91:b1:89:b6:
71:65:db:2c:2a:1e:cf:1f:03:ec:6f:2b:23:fe:a8:
61:96:cb:c0:e4:5f:19:e1:58:d5:92:32:5f:dc:03:
7f:20:f5:22:01:26:e4:d8:07:ab:3b:0e:80:d6:0f:
16:34:c2:90:ea:5f:0b:6f:7b:ac:e7:f8:0c:ad:6a:
94:cb:fe:47:66:fb:34:55:df:e6:b6:5f:f3:93:0a:
0a:bf:ee:32:a8:bc:10:18:a0:e2:6e:79:a8:c2:78:
f4:95:79:84:0d:47:91:c1:70:fd:04:84:b2:49:03:
40:da:54:19:d7:5f:fc:4f:e2:20:6f:10:11:44:29:
e7:57:16:cd:8c:96:c1:21:5c:a0:cf:18:41:09:ea:
0b:e8:46:c4:ea:30:26:d0:32:44:e2:2e:ea:da:1a:
60:8b:24:c6:b8:b6:89:69:e9:07:fb:e0:01:fe:f0:
13:2a:aa:b3:f8:20:8b:d0:d0:41:a8:26:17:f0:37:
ad:cd:62:7f:36:8f:6b:0a:d6:78:41:43:ad:d1:7a:
e0:3a:45:ad:8b:15:90:c1:7e:bf:ee:59:78:7d:3f:
c4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B1:53:F2:6A:7C:50:E1:E6:57:2B:13:97:96:71:3C:96:F1:BB:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pLFT8mp8UOHmVysTl5ZxPJbxu1k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.138.0/24
Signature Algorithm: sha256WithRSAEncryption
71:3f:68:81:bf:52:4f:3b:9a:36:f5:f4:80:56:da:fc:36:f1:
78:26:c3:34:ac:31:db:cf:25:e4:70:34:0c:69:ab:6a:c6:a2:
17:64:f0:4b:f3:73:51:0e:e9:f5:8e:42:62:a6:22:ff:ee:fa:
e2:5c:28:b8:93:7d:dc:4e:28:77:64:83:06:b3:78:55:48:ab:
6f:dd:58:af:ad:85:80:26:18:04:01:8d:e1:37:44:05:e7:9a:
15:41:b6:d4:9a:95:8c:aa:ce:5b:29:11:78:4c:8a:b9:11:a5:
11:af:3a:e4:0c:24:0a:d7:28:84:31:ec:36:a7:61:43:62:82:
11:d2:53:03:74:0b:cf:26:48:41:1c:66:36:3f:e3:e3:06:b3:
5b:09:7f:5c:60:0c:c1:2f:fc:f3:0c:08:5b:4e:dd:05:7e:fd:
e9:17:bd:cd:11:b9:87:8e:83:97:4b:a6:c9:14:7a:54:50:08:
69:85:c3:40:c6:48:c5:f9:4a:99:bf:7a:5d:82:39:4c:47:03:
a7:fe:2d:3b:db:d8:3f:34:6d:d2:95:30:c4:9a:c5:2e:15:1f:
3e:90:be:64:61:6a:d8:cc:b5:f6:63:d8:14:7b:80:89:83:43:
94:7d:59:1e:a3:83:87:2c:73:7c:da:22:c2:a6:d5:2a:4b:11:
30:13:ea:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 01:56:55 2026 by rpki-client