Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pugECA-SXmrjxuUJsBYjC5g1zeU.roa
File: pugECA-SXmrjxuUJsBYjC5g1zeU.roa (raw, json)
Hash identifier: 0aWEfPWZQgJvWHCS4//w5tbSj9JNueJicbMi7RaEYDs=
Subject key identifier: A6:E8:04:08:0F:92:5E:6A:E3:C6:E5:09:B0:16:23:0B:98:35:CD:E5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0E28A17828498363DF55AA847A5A2C6A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pugECA-SXmrjxuUJsBYjC5g1zeU.roa
Signing time: Sun 27 Sep 2026 11:04:55 +0000
ROA not before: Sun 27 Sep 2026 11:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 151.242.176.0/24 maxlen: 24
151.242.178.0/24 maxlen: 24
151.242.184.0/24 maxlen: 24
151.242.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:8a:17:82:84:98:36:3d:f5:5a:a8:47:a5:a2:c6:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 27 11:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6e804080f925e6ae3c6e509b016230b9835cde5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:ee:2f:e9:01:65:e4:bc:9d:23:56:0d:f9:
bf:78:87:4b:6c:c0:56:3e:cd:3f:22:0d:fc:fc:c4:
e7:64:6a:fa:b8:b5:c3:ee:6e:03:b2:d0:a6:e7:1e:
56:2d:35:50:57:d8:99:90:5e:ba:1f:d6:e3:a4:d9:
db:5b:61:5a:a2:b4:ae:76:0b:15:07:d2:c9:fb:d6:
c0:8f:7d:60:ed:7f:ba:6e:5d:75:1b:7f:55:16:33:
32:ea:32:72:10:35:f1:a0:2f:9a:35:b8:98:b9:86:
6a:62:f1:78:0c:ba:44:09:12:8a:81:1f:6f:dd:5c:
f9:9b:ee:fc:95:4b:03:ba:44:8d:7d:44:ab:1c:37:
4c:97:44:57:3e:a9:8f:c9:bf:50:f5:c3:28:ba:6f:
30:b8:4b:22:f3:2b:86:16:0f:d5:23:13:57:50:21:
11:25:b7:83:60:33:1d:41:76:76:92:d8:b1:1f:65:
3a:24:f5:66:56:2e:7c:6c:be:e5:8f:bf:90:50:1d:
21:19:f5:4e:f0:67:a8:ca:92:d3:93:6a:84:a3:8b:
18:22:62:b7:6a:7e:d3:b4:ca:a3:dd:c5:68:e6:78:
f7:09:f8:dc:f4:d1:29:5f:4f:47:ae:06:37:67:e8:
b7:c7:c1:8f:a5:90:c1:1f:ce:78:21:f5:db:b4:0a:
9a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:E8:04:08:0F:92:5E:6A:E3:C6:E5:09:B0:16:23:0B:98:35:CD:E5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pugECA-SXmrjxuUJsBYjC5g1zeU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.176.0/24
151.242.178.0/24
151.242.184.0/24
151.242.187.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:b7:70:d4:24:6f:52:49:70:fd:b2:9b:99:0b:66:05:c3:b5:
51:8d:43:c3:85:6f:4a:77:9c:a2:a0:63:0c:bd:78:c5:4b:f0:
2d:37:ab:f9:e8:31:1b:7c:06:d5:77:c9:3a:93:eb:46:74:4d:
95:98:7a:bf:7a:7b:bf:1c:88:a9:7d:27:b1:7e:00:e4:01:5d:
61:8f:dd:2d:1b:da:63:d6:62:8f:aa:87:49:32:44:94:31:33:
5f:9b:b3:45:3f:1c:b6:9e:da:57:f8:e7:03:6d:1e:88:84:dd:
23:6f:a5:2f:b6:06:7f:66:ab:67:e8:c5:0a:1c:fe:b9:51:76:
f6:88:79:3b:e9:99:92:b5:e5:06:88:5b:e0:e0:fe:82:70:06:
df:8a:53:6a:9f:01:3d:eb:15:31:23:2a:43:f7:26:74:8b:71:
a8:ec:d6:29:8e:06:d2:06:f9:d9:89:d4:e3:ff:03:81:cc:a3:
89:03:e8:fd:d4:84:c1:a7:e7:9a:e1:eb:92:54:d9:6b:e4:71:
0e:b9:c9:ba:77:52:7c:89:f2:42:e6:97:54:c1:fa:d8:1b:20:
6a:89:98:d6:4f:89:0c:f5:f1:9d:75:ea:9a:14:9c:a6:79:9a:
36:b7:2d:fa:05:03:01:99:a5:7f:7d:10:6d:30:5c:8f:c3:24:
ed:ec:24:45
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaDiiheChJg2PfVaqEelosaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTI3MTEwNDU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmU4MDQwODBmOTI1ZTZhZTNjNmU1MDliMDE2MjMwYjk4MzVjZGU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsezuL+kBZeS8nSNWDfm/eIdLbMBW
Ps0/Ig38/MTnZGr6uLXD7m4DstCm5x5WLTVQV9iZkF66H9bjpNnbW2FaorSudgsV
B9LJ+9bAj31g7X+6bl11G39VFjMy6jJyEDXxoC+aNbiYuYZqYvF4DLpECRKKgR9v
3Vz5m+78lUsDukSNfUSrHDdMl0RXPqmPyb9Q9cMoum8wuEsi8yuGFg/VIxNXUCER
JbeDYDMdQXZ2ktixH2U6JPVmVi58bL7lj7+QUB0hGfVO8GeoypLTk2qEo4sYImK3
an7TtMqj3cVo5nj3Cfjc9NEpX09HrgY3Z+i3x8GPpZDBH854IfXbtAqa8QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKboBAgPkl5q48blCbAWIwuYNc3lMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcHVnRUNBLVNYbXJqeHVVSnNCWWpDNWcxemVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/KwAwQA
l/KyAwQAl/K4AwQAl/K7MA0GCSqGSIb3DQEBCwUAA4IBAQBvt3DUJG9SSXD9spuZ
C2YFw7VRjUPDhW9Kd5yioGMMvXjFS/AtN6v56DEbfAbVd8k6k+tGdE2VmHq/enu/
HIipfSexfgDkAV1hj90tG9pj1mKPqodJMkSUMTNfm7NFPxy2ntpX+OcDbR6IhN0j
b6UvtgZ/Zqtn6MUKHP65UXb2iHk76ZmSteUGiFvg4P6CcAbfilNqnwE96xUxIypD
9yZ0i3Go7NYpjgbSBvnZidTj/wOBzKOJA+j91ITBp+ea4euSVNlr5HEOucm6d1J8
ifJC5pdUwfrYGyBqiZjWT4kM9fGddeqaFJymeZo2ty36BQMBmaV/fRBtMFyPwyTt
7CRF
-----END CERTIFICATE-----
Generated at Mon Oct 19 03:08:25 2026 by rpki-client