Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlTA_6oLnxc2dD4rB38DiHrX6ug.roa
File: qlTA_6oLnxc2dD4rB38DiHrX6ug.roa (raw, json)
Hash identifier: Ftj/CXfxDty9KMrBICcI/k4e47V0Si29x0EAsPl+6fE=
Subject key identifier: AA:54:C0:FF:AA:0B:9F:17:36:74:3E:2B:07:7F:03:88:7A:D7:EA:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DB081C5AFFD1C48F089F0B6BFCB87DA44
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlTA_6oLnxc2dD4rB38DiHrX6ug.roa
Signing time: Tue 21 Apr 2026 14:46:27 +0000
ROA not before: Tue 21 Apr 2026 14:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395374
IP address blocks: 151.243.5.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:81:c5:af:fd:1c:48:f0:89:f0:b6:bf:cb:87:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 21 14:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa54c0ffaa0b9f1736743e2b077f03887ad7eae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:0f:ac:d5:78:c8:05:04:18:df:7d:ce:b7:91:
84:02:7d:7e:0b:a5:ac:7a:63:ce:61:7b:81:0b:6a:
e5:15:fc:32:75:ba:79:6d:80:61:0a:0f:a7:f5:4f:
2c:70:65:1f:0b:59:83:16:c9:d2:bb:5a:a5:3d:69:
90:97:e0:d2:11:8e:5a:25:be:a4:5a:0b:39:48:4d:
bb:88:98:6e:5b:e1:20:65:ed:c2:7e:3c:da:95:e0:
bb:20:83:5d:64:b2:fc:5f:35:fd:d8:48:33:60:5b:
93:2f:64:b0:d9:e8:88:2d:61:0c:05:b9:da:5b:c6:
f3:be:5a:87:db:05:2b:03:51:17:54:ce:7c:49:a3:
fa:53:6e:4b:27:b4:3e:d9:15:1c:89:ed:9f:6a:01:
ed:92:b4:39:c6:2f:c2:54:52:d4:f9:2f:7b:ae:43:
5f:a6:ad:5e:94:d9:84:15:12:1c:b3:4a:ce:c4:e0:
32:5a:af:d1:9a:5e:41:0b:67:59:34:d2:aa:95:1f:
5c:82:01:6b:e8:07:77:42:e8:a6:12:9b:da:18:17:
32:cc:b5:ae:e0:96:83:12:90:74:a7:76:bd:38:cd:
88:63:33:81:8a:e5:1e:9c:f3:8a:63:20:e1:3c:0f:
ef:e4:5c:d0:86:35:dd:0b:17:3a:65:cc:c7:62:6c:
84:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:54:C0:FF:AA:0B:9F:17:36:74:3E:2B:07:7F:03:88:7A:D7:EA:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qlTA_6oLnxc2dD4rB38DiHrX6ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.5.0/24
151.243.158.0/24
Signature Algorithm: sha256WithRSAEncryption
94:08:68:55:9f:f5:54:9c:f7:fa:6e:77:0c:3a:59:a2:85:d6:
8c:5b:5f:48:4c:a8:c2:87:de:9e:7e:df:cf:b9:f8:71:32:ac:
fc:8b:85:1c:bb:ef:92:08:21:ae:b2:44:a6:fe:3d:5c:e2:bc:
6e:1f:66:9e:13:33:fb:86:62:3a:19:f5:11:67:39:73:15:27:
d2:7e:74:c4:3b:5d:29:5d:1f:b5:43:b0:01:eb:08:da:2f:12:
29:cb:a4:bc:91:91:40:04:cb:4c:2a:54:77:b8:9e:73:2e:03:
d0:7c:20:c6:8c:8d:2f:1f:77:cc:73:7a:93:6f:c8:16:df:31:
38:68:64:72:78:c4:f5:d3:14:73:9f:08:e7:75:89:0e:ba:b4:
48:6a:6d:3f:a1:d4:bd:4e:c2:1d:67:84:f3:69:25:49:1c:06:
bc:cd:da:4c:79:55:3b:a3:23:37:bc:e3:4f:61:43:65:ab:4f:
17:83:53:6e:89:5d:45:32:7c:5e:6d:dd:0c:a3:7c:60:66:2c:
1f:76:0f:06:79:d2:44:9b:e4:f6:e9:3f:b7:f3:5f:82:f2:38:
3e:9e:69:5c:1c:2c:b8:20:3a:72:76:a6:a5:7d:f4:71:21:89:
f8:c1:78:b5:5f:07:8a:0b:f0:17:68:b0:a5:28:5d:c6:8a:49:
6d:c4:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 05:47:55 2026 by rpki-client