Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tgiykvsrbX8whej_5qAoPKwDrZM.roa
File: tgiykvsrbX8whej_5qAoPKwDrZM.roa (raw, json)
Hash identifier: 0TO5B7yTpRbCZsk+kIhz+F4KEaIBlzgM/HdJrpDmxZA=
Subject key identifier: B6:08:B2:92:FB:2B:6D:7F:30:85:E8:FF:E6:A0:28:3C:AC:03:AD:93
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D86A3993570F3CBBABB0F8F34822FC850
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tgiykvsrbX8whej_5qAoPKwDrZM.roa
Signing time: Mon 13 Apr 2026 11:39:21 +0000
ROA not before: Mon 13 Apr 2026 11:39:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395470
IP address blocks: 151.242.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:a3:99:35:70:f3:cb:ba:bb:0f:8f:34:82:2f:c8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 13 11:39:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b608b292fb2b6d7f3085e8ffe6a0283cac03ad93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:e7:6c:af:c9:8d:7e:56:37:31:f0:18:81:
82:f8:74:af:0a:2b:b6:3f:68:f1:ce:39:6b:26:48:
77:26:aa:74:3e:61:2f:8e:53:7a:cf:50:4b:81:d1:
ea:1a:68:dd:a7:7d:02:f2:b8:85:54:d0:cc:b8:c4:
0e:03:f3:e3:4f:ad:df:bf:e5:af:8c:f5:9e:e6:f2:
0c:ed:ca:56:82:46:ff:5e:4d:4e:6e:fc:77:12:21:
a2:76:30:e7:0f:57:66:05:15:33:18:40:cc:49:5d:
af:22:d1:65:fc:f9:3c:39:46:75:1c:3c:95:79:74:
a7:aa:39:ec:46:d1:1a:bc:4c:b8:7c:66:1a:6d:bb:
ba:71:b3:2c:4e:19:4f:85:d3:f2:1b:aa:31:01:fa:
2a:bf:40:b2:53:bd:26:17:72:c8:fd:d3:6f:7c:0c:
55:42:14:2d:f6:99:0f:31:1e:e0:71:5a:d6:67:76:
06:2d:bb:2b:1b:7a:ed:a3:8a:42:ac:25:72:ee:9a:
e7:37:f0:ad:eb:8a:de:34:4f:7f:64:b6:c5:88:10:
9c:7d:18:b9:05:5c:c8:de:2f:68:9d:a7:14:43:03:
bd:3a:3f:4e:4b:03:a5:69:93:04:c6:a5:2b:2f:e2:
7c:1d:8c:85:f2:a1:cc:a3:bd:23:f2:72:06:c8:30:
f7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:08:B2:92:FB:2B:6D:7F:30:85:E8:FF:E6:A0:28:3C:AC:03:AD:93
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tgiykvsrbX8whej_5qAoPKwDrZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.148.0/24
Signature Algorithm: sha256WithRSAEncryption
03:05:fd:fb:25:92:ba:2b:b5:45:f8:53:67:c6:a3:43:d7:34:
6d:0a:9f:1f:c8:58:21:a8:f1:53:47:08:8c:51:37:97:03:28:
3e:c3:c4:af:73:21:d1:2c:f7:f6:2f:b2:24:cc:de:05:88:27:
6c:30:8a:cb:bf:b4:28:2a:e8:3c:01:59:25:5b:da:dc:70:6c:
be:bd:98:62:63:92:47:a3:9d:c0:0d:f7:7b:c2:c8:83:a5:77:
20:1f:7a:45:b9:ee:c4:10:94:83:62:f1:2f:59:72:90:2c:61:
fd:42:a6:71:f8:00:8e:f0:be:cb:21:16:45:6e:77:0c:e5:d1:
f3:33:35:61:23:b4:7e:88:c4:f8:78:b2:67:88:7a:d0:aa:84:
5c:e5:ad:91:fd:3c:c6:cf:57:71:fa:6a:6e:52:34:21:92:b8:
5e:21:c7:93:1c:20:0b:23:25:3e:ed:2b:a4:c7:fb:71:30:4b:
f5:d2:39:b7:ee:7f:b9:3c:0a:56:f7:cd:ed:0f:ba:37:66:5f:
0f:9a:74:d8:88:4d:73:55:48:20:1f:94:ad:bb:a3:74:f0:6c:
3d:46:58:5b:b3:67:eb:ce:5c:bf:c2:2d:bf:2c:d2:9b:7a:25:
2e:2f:d5:a7:ed:94:cf:49:3e:c9:28:39:8c:f0:76:ad:3c:76:
77:c3:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:12:28 2026 by rpki-client