Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tdQBDquSxpgHJPa92okW03LuMG4.roa
File: tdQBDquSxpgHJPa92okW03LuMG4.roa (raw, json)
Hash identifier: z2m3nYilQV/nSPcHP8leDdRge5XyQ4ZPkHQFtkNv69s=
Subject key identifier: B5:D4:01:0E:AB:92:C6:98:07:24:F6:BD:DA:89:16:D3:72:EE:30:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0953F4E853CE537D8867A5BF52FC7642A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tdQBDquSxpgHJPa92okW03LuMG4.roa
Signing time: Sat 12 Sep 2026 10:52:28 +0000
ROA not before: Sat 12 Sep 2026 10:52:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219105
IP address blocks: 151.242.9.0/24 maxlen: 24
151.242.35.0/24 maxlen: 24
151.242.52.0/24 maxlen: 24
151.243.16.0/24 maxlen: 24
151.244.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:95:3f:4e:85:3c:e5:37:d8:86:7a:5b:f5:2f:c7:64:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 12 10:52:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d4010eab92c6980724f6bdda8916d372ee306e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:5b:59:01:36:54:d4:bf:6d:29:7a:a1:fa:
23:3a:c7:83:ad:e0:13:bf:fc:fd:0a:32:f3:a0:0f:
a4:c1:64:12:11:cb:74:39:7a:4b:9e:ef:2a:f4:32:
c7:c7:db:11:de:f4:aa:0a:81:70:8a:e8:ae:00:35:
e4:a5:0c:5a:34:7e:24:58:c4:59:ec:44:79:07:ab:
71:c3:44:0f:c4:74:c8:43:13:a8:21:65:78:98:14:
09:50:7a:98:e3:e9:e2:a6:bb:81:b7:48:2c:18:28:
39:4f:1d:96:e6:57:2e:56:26:2a:26:ba:80:4e:e7:
19:67:d9:4a:f8:4f:e7:95:e6:1b:6a:1d:82:1c:07:
7a:d5:0f:72:2c:cf:9a:70:db:b3:b2:4b:4d:1b:e7:
20:49:77:07:08:86:f1:9d:db:52:f6:1d:2c:13:8a:
1d:fc:62:f8:15:1b:f6:f6:b4:9a:76:45:08:7e:51:
0d:c1:83:50:cc:79:17:bb:8d:be:e8:45:b0:bb:6d:
f7:1f:2a:c9:21:7a:b6:5c:ee:d6:dd:d0:db:13:51:
d6:15:bd:0c:d7:61:33:8e:9e:6e:b8:55:04:25:b6:
f8:ee:ab:a0:7c:c9:73:26:54:0d:4e:33:77:22:ed:
74:00:e1:ca:b5:a4:26:13:62:8b:52:61:21:7f:d5:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D4:01:0E:AB:92:C6:98:07:24:F6:BD:DA:89:16:D3:72:EE:30:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tdQBDquSxpgHJPa92okW03LuMG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.9.0/24
151.242.35.0/24
151.242.52.0/24
151.243.16.0/24
151.244.239.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a9:f0:6c:7c:c6:63:40:6f:ba:db:cc:fc:50:8f:dc:3d:36:
8c:7c:03:07:e6:9e:d2:40:e5:6b:ea:31:a7:d2:28:ff:ac:d5:
cc:bf:33:ec:e2:0b:a1:c3:65:2c:ff:2f:21:22:b0:8a:41:f4:
7f:c8:43:66:7e:94:c6:fd:0e:43:b6:4d:6f:b8:d8:1b:e2:d6:
32:ec:c8:f8:de:b5:40:74:4f:2c:cc:c7:cd:8c:cb:7b:e6:a1:
e4:7e:90:b4:ae:5d:34:93:48:36:d4:47:b0:f8:ae:cc:ac:89:
1e:bc:31:9f:e6:01:6c:dd:a1:71:38:c0:96:73:fe:5d:8b:96:
d1:b4:5d:33:66:0d:d1:9e:0e:b1:51:b9:49:29:73:9f:42:3e:
b1:36:24:b9:0c:ac:09:72:c5:fc:72:ab:e3:77:49:08:f0:47:
59:5c:59:7e:86:90:02:12:fa:57:e4:7f:10:ab:e0:5a:6a:ed:
58:7c:e5:c5:b1:33:49:31:b7:01:2f:59:da:bd:b0:e3:be:17:
dd:4a:4e:12:61:2d:10:99:ce:c1:86:66:65:27:16:1a:1c:41:
be:43:dd:91:18:f8:4f:f9:c3:e6:61:75:9e:68:9a:11:8a:87:
1c:4c:ad:b2:2e:22:9d:e0:0a:53:fd:b0:b2:73:13:3f:49:20:
c0:74:e6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 07:24:26 2026 by rpki-client