Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_3mWsTs3KXKKJ5E-TV_WCgDlhQ.roa
File: t_3mWsTs3KXKKJ5E-TV_WCgDlhQ.roa (raw, json)
Hash identifier: RTLcI4sp1RZvACESGZj1vZWAnU8/nkkI/YCGIZuyUBI=
Subject key identifier: B7:FD:E6:5A:C4:EC:DC:A5:CA:28:9E:44:F9:35:7F:58:28:03:96:14
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5049DBAEE62EA738D738BBF6E21D5917
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_3mWsTs3KXKKJ5E-TV_WCgDlhQ.roa
Signing time: Fri 22 May 2026 15:24:38 +0000
ROA not before: Fri 22 May 2026 15:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 151.243.179.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.246.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 17:49:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:49:db:ae:e6:2e:a7:38:d7:38:bb:f6:e2:1d:59:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 15:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7fde65ac4ecdca5ca289e44f9357f5828039614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:99:8b:03:da:07:86:a6:f4:bb:6b:c9:cd:42:
61:04:79:f1:46:fe:f1:79:5b:56:18:29:27:c0:1f:
f1:c2:2e:89:7d:ac:e4:0a:f2:4f:a4:12:8a:80:e4:
19:ed:65:6c:33:20:9a:61:98:39:b1:c4:99:4e:ea:
f5:3b:bd:53:cc:8a:f0:cb:07:58:6e:09:05:ba:79:
52:dc:c7:38:31:62:fe:ee:9f:a8:ec:de:fb:62:80:
b3:d2:85:60:5b:3d:3c:65:bb:27:81:cb:8b:84:dd:
33:82:25:f4:32:9c:b0:b5:11:18:0e:23:16:6f:00:
f4:9b:eb:fc:cb:5f:45:4c:89:3b:ee:96:06:a0:b3:
c7:fd:1d:01:b2:17:e9:ad:b9:d9:e4:64:40:bc:65:
27:7f:b3:05:a1:88:18:cd:f0:38:52:89:b8:2c:f3:
be:c8:2a:70:98:eb:7d:44:03:43:8a:a5:14:f2:86:
89:7b:00:06:da:e3:d2:8d:c0:33:75:63:93:64:7a:
ee:06:f2:7c:75:b7:3e:4d:64:bf:e5:23:f2:b6:34:
97:fc:19:ab:5e:50:d0:90:28:fb:f4:9a:72:0c:05:
be:0e:f6:d3:f0:0f:ab:0f:7e:cc:10:c0:eb:92:b4:
3e:07:65:99:26:af:6b:ff:2a:ff:ab:29:b4:d0:e7:
d2:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:FD:E6:5A:C4:EC:DC:A5:CA:28:9E:44:F9:35:7F:58:28:03:96:14
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t_3mWsTs3KXKKJ5E-TV_WCgDlhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.179.0/24
151.246.184.0/23
Signature Algorithm: sha256WithRSAEncryption
70:1d:e9:0c:0c:a5:e1:d5:49:f2:de:ef:80:83:43:ea:71:53:
0c:9a:da:46:33:d0:51:a5:c2:6a:a1:2b:31:4d:90:85:c4:84:
28:f0:a3:6d:86:97:93:96:b8:4e:11:b8:8e:d2:63:c3:6a:6b:
8d:31:80:f6:b8:88:a8:0c:ab:85:0c:99:07:43:07:5c:08:60:
d6:51:a2:4c:cb:ed:2f:77:69:97:6c:81:cc:ca:17:93:f5:56:
a0:12:21:24:89:07:2d:c9:4c:85:b4:71:34:a6:73:e4:fa:14:
28:79:cf:c1:4a:e2:84:e9:7b:c1:90:6b:ad:0e:df:f9:1a:68:
2f:53:c0:0b:4d:c8:a3:e4:dc:5e:c8:73:0b:36:69:a5:2f:e2:
52:00:93:b1:49:0d:b5:d4:3a:85:61:71:3d:d0:c4:9e:3d:0b:
59:b7:0b:5b:d5:b9:c8:35:b0:5c:4f:a4:49:34:61:a8:d4:3b:
1b:dc:11:21:49:08:f4:f2:fd:32:38:0f:ce:5c:22:fe:91:d4:
50:b0:3f:e2:e0:56:c2:85:07:47:2f:23:ca:1d:90:fe:e0:48:
4d:40:3d:4f:1a:24:d7:75:db:66:11:53:ed:a2:bc:53:08:f5:
eb:31:a8:39:71:65:94:eb:ce:7f:34:b9:c6:f6:26:24:8f:ad:
6d:96:e4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 23:33:27 2026 by rpki-client