Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sonMTgO-zvjkY3S36C9_2XyD0Ac.roa
File: sonMTgO-zvjkY3S36C9_2XyD0Ac.roa (raw, json)
Hash identifier: oxYZT0bAEq+0A0Pny2tVOS3hoyO/smCwlzRTi7Lcnsc=
Subject key identifier: B2:89:CC:4E:03:BE:CE:F8:E4:63:74:B7:E8:2F:7F:D9:7C:83:D0:07
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0E6D02561239D476223B533D0EAC333C1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sonMTgO-zvjkY3S36C9_2XyD0Ac.roa
Signing time: Mon 28 Sep 2026 06:59:55 +0000
ROA not before: Mon 28 Sep 2026 06:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147176
IP address blocks: 151.244.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:d0:25:61:23:9d:47:62:23:b5:33:d0:ea:c3:33:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 28 06:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b289cc4e03becef8e46374b7e82f7fd97c83d007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1a:12:7c:bc:56:9f:b4:f2:6f:6b:75:f1:a0:
b1:f8:5c:16:a0:8f:c8:cd:e2:d0:6e:96:bf:94:3a:
58:b9:66:56:c9:ab:94:7d:69:f6:5a:28:0f:cf:cf:
d9:ac:11:6c:99:45:5a:66:73:33:7b:56:0b:e8:b8:
ba:1f:b8:6a:df:4c:e6:1b:e9:67:34:f9:bb:23:f0:
e5:1a:1b:95:8a:81:f5:38:00:c4:9a:14:a5:28:db:
55:32:aa:67:89:0e:ba:e5:b1:98:0e:cd:42:98:c2:
14:05:7f:6b:2d:ed:cb:cb:bb:5e:e8:18:6f:33:cf:
8c:a6:a2:ea:00:f9:14:df:f4:96:8d:68:24:4c:cc:
28:35:3e:17:9a:5b:f6:ff:44:b7:cf:63:dc:3c:9e:
00:6d:00:27:6f:26:e2:3f:0c:b2:c8:ce:4f:73:4b:
ec:e9:51:8b:4d:63:6e:2b:be:b5:4e:88:10:b2:a2:
1f:19:e8:a9:10:b1:f8:7e:47:ba:c3:17:a5:51:f6:
b9:91:03:34:68:81:f6:f7:ac:e4:03:b4:4d:d1:87:
39:79:35:72:3a:37:68:13:29:f7:7c:17:f4:e9:c2:
74:55:c7:83:6a:36:33:a0:e4:bd:2f:ec:6f:28:fa:
4f:dc:76:12:68:4c:d5:8c:8b:64:53:02:95:c4:c2:
9a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:89:CC:4E:03:BE:CE:F8:E4:63:74:B7:E8:2F:7F:D9:7C:83:D0:07
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sonMTgO-zvjkY3S36C9_2XyD0Ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.248.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:0c:8a:28:c2:59:73:65:9c:f4:56:2d:ba:c3:45:00:ea:cd:
61:ee:70:14:52:ff:c7:5a:03:6d:e5:3d:71:c8:54:e2:a1:bb:
d6:b4:c7:b8:e4:8b:e3:30:48:1f:c1:74:75:17:e3:36:c6:53:
5a:c8:ee:98:ef:12:a8:4c:e7:ea:98:31:bb:c8:c7:76:11:d9:
b8:6b:52:13:43:e6:fe:c7:d7:03:49:ed:19:05:fe:d5:ea:6e:
cd:ee:d1:99:cf:b8:5a:4f:d3:d3:9c:5b:0e:1e:9c:8c:63:2f:
0a:ac:26:82:3f:67:d7:f7:e0:dc:88:54:29:24:01:de:85:4c:
e4:87:8c:1a:09:c0:6c:c2:74:34:d3:86:4f:75:31:33:09:d0:
6b:c5:35:7b:a3:d3:5f:97:84:39:fe:2f:4e:30:00:37:7b:51:
91:f9:80:dc:24:c9:8f:d9:0b:f9:05:e5:5a:f1:6f:0d:19:d1:
63:43:e5:3f:9f:79:ee:1c:a5:11:91:79:c7:c4:80:30:d2:49:
97:d0:18:87:57:0b:49:64:e4:b1:d4:c2:47:49:1c:6e:8f:2f:
af:52:c9:3b:36:af:65:c7:cb:d2:bb:f5:4b:39:94:ba:c4:2d:
92:85:32:40:9c:ec:11:1c:af:1b:76:b4:4f:4b:8b:31:48:61:
e2:54:89:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 04:37:36 2026 by rpki-client