Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5dnwKppjbBswNaA-5XcpklGRz4.roa
File: t5dnwKppjbBswNaA-5XcpklGRz4.roa (raw, json)
Hash identifier: W1R3z6XSQ3UoZx/3wvdQ/O+9mh2q9/MnPwQPNtU42+A=
Subject key identifier: B7:97:67:C0:AA:69:8D:B0:6C:C0:D6:80:FB:95:DC:A6:49:46:47:3E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E93E496852F21590D0087772F3132C7E6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5dnwKppjbBswNaA-5XcpklGRz4.roa
Signing time: Thu 04 Jun 2026 18:28:11 +0000
ROA not before: Thu 04 Jun 2026 18:28:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202036
IP address blocks: 151.246.215.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Jun 2026 07:27:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:e4:96:85:2f:21:59:0d:00:87:77:2f:31:32:c7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 18:28:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b79767c0aa698db06cc0d680fb95dca64946473e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d6:33:5d:ad:e9:a9:5b:86:4a:3f:76:18:82:
ce:13:1e:d3:f8:b6:61:3b:7f:f4:b2:be:c0:5f:c4:
bc:51:27:25:53:d5:76:a7:05:22:72:ff:45:0a:d6:
f1:9b:f5:f1:e8:2a:23:b0:6d:a3:1b:ee:50:e3:c7:
72:e1:18:5d:83:58:8b:1a:e0:f4:5a:87:04:1a:81:
bb:72:51:a3:12:c1:a9:52:44:86:48:e8:5d:76:08:
76:52:ac:1c:0b:6c:e9:01:27:84:22:60:dc:ce:99:
ff:d9:be:f6:43:9a:c0:34:8d:ed:a4:42:e0:f3:11:
04:bc:01:5c:80:5b:cf:65:30:e2:eb:3e:62:52:4c:
bc:64:74:fc:8a:e0:b5:11:a4:49:25:f7:37:ee:09:
09:ba:d6:99:a4:5e:5d:cd:0c:b1:0c:5b:6a:42:42:
42:a3:b0:00:04:51:ba:cf:88:32:30:5f:ad:2f:d0:
fe:01:2c:70:20:ee:83:65:87:58:7c:f0:45:5b:4c:
38:e0:f2:9b:6f:31:a5:bb:0b:95:a2:83:06:d3:b5:
41:54:f1:2d:03:f1:e6:cc:0b:d8:73:3a:eb:a4:28:
77:9a:6c:b9:55:ca:ba:11:c1:f2:69:fd:75:da:5a:
67:d3:50:d6:52:d4:34:5c:b9:16:29:b3:69:9f:c6:
4b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:97:67:C0:AA:69:8D:B0:6C:C0:D6:80:FB:95:DC:A6:49:46:47:3E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t5dnwKppjbBswNaA-5XcpklGRz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.215.0/24
151.247.48.0/24
151.247.82.0/24
Signature Algorithm: sha256WithRSAEncryption
34:ae:69:81:5e:15:d5:9c:93:01:57:67:57:84:11:6b:71:27:
11:93:5c:0e:eb:59:07:f3:2d:c9:be:e0:dd:52:33:eb:01:07:
70:b3:b5:e7:95:6a:b0:92:0d:e2:79:90:cc:27:15:f7:25:8d:
3c:01:8f:4d:01:3a:01:7a:93:57:17:88:73:09:c6:3f:94:6a:
0e:f0:cb:68:22:bf:7d:6f:fb:9e:b7:be:0c:2b:fa:42:43:40:
ab:26:e9:1e:e0:b9:21:83:04:55:9f:08:c4:5f:42:b2:b4:51:
01:8d:5d:7c:d0:fe:0f:2a:f6:c6:73:16:d6:c1:d9:d6:cf:e2:
0e:f3:06:29:da:f8:72:14:86:fa:2f:01:f0:b0:0d:20:b1:01:
fe:25:85:75:08:1a:94:b0:f7:d4:15:52:5e:c8:c9:1a:b2:64:
8f:f9:96:b7:0b:44:3b:79:31:57:b6:90:b4:c5:45:ae:61:43:
1c:32:e2:23:cc:65:5a:53:2d:45:cf:81:1e:41:58:5b:1e:93:
ac:26:e2:21:f5:8c:74:bd:3f:4f:e5:56:6f:e3:b0:12:c8:7c:
7d:35:3f:bf:dc:00:d3:66:fb:4e:38:08:e9:78:20:a5:d2:f1:
c3:8e:c2:ad:7f:08:e3:74:df:09:ff:56:bc:41:f5:57:d9:a8:
fb:0b:90:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 12:57:14 2026 by rpki-client