Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v3Ua84yIG4VWxAzIPHzdczfe3TE.roa
File: v3Ua84yIG4VWxAzIPHzdczfe3TE.roa (raw, json)
Hash identifier: 360a30FczrXE1Acnm845Rn+IzU413mpfPuMeV5IPNm0=
Subject key identifier: BF:75:1A:F3:8C:88:1B:85:56:C4:0C:C8:3C:7C:DD:73:37:DE:DD:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6B0301E5CCE83B57E1077F7DFE97E02F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v3Ua84yIG4VWxAzIPHzdczfe3TE.roa
Signing time: Thu 16 Jul 2026 12:59:46 +0000
ROA not before: Thu 16 Jul 2026 12:59:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 151.240.126.0/23 maxlen: 24
151.241.209.0/24 maxlen: 24
151.241.210.0/24 maxlen: 24
151.241.211.0/24 maxlen: 24
151.241.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:03:01:e5:cc:e8:3b:57:e1:07:7f:7d:fe:97:e0:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 12:59:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf751af38c881b8556c40cc83c7cdd7337dedd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:a0:98:b6:f3:fa:81:67:db:4c:36:ba:b7:
70:86:c2:5b:05:72:b0:37:c5:38:1b:8e:99:c9:c3:
a3:5c:59:2d:05:b4:3a:44:f6:c0:25:16:82:23:36:
b2:73:46:14:c0:fb:83:e8:dd:3d:d7:d0:37:75:d7:
01:64:86:99:58:ff:73:48:92:ee:0a:ae:c6:c4:fb:
0e:7c:66:18:8d:55:fe:f4:49:15:6f:75:f8:72:ae:
09:5e:cd:29:7b:68:0d:61:1e:1b:af:eb:8a:5d:57:
e7:d2:0e:a9:c4:ca:a7:da:f1:3f:e4:52:7e:7c:fd:
06:03:73:5c:df:77:83:0d:6e:1a:3f:6c:8b:93:9c:
79:da:b2:2d:4d:e6:c7:6a:0f:ff:e3:8a:72:9d:08:
79:a1:cc:53:7a:97:10:71:00:86:71:72:84:b6:eb:
99:5d:fd:5a:e2:e0:eb:ad:54:30:59:cd:01:20:2d:
a0:c5:00:a8:d4:fe:53:e4:6d:0b:d4:1f:26:f5:e6:
36:b0:ea:c9:c8:b6:64:f7:d6:15:ce:af:4d:33:94:
41:91:90:1c:5a:7f:6c:11:4b:35:27:46:ba:1c:ab:
67:85:d4:c1:7a:cf:7d:58:df:7c:e9:12:b8:1f:49:
f5:88:5e:a9:8b:89:de:5e:4f:f7:f2:89:11:5e:f6:
f7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:75:1A:F3:8C:88:1B:85:56:C4:0C:C8:3C:7C:DD:73:37:DE:DD:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v3Ua84yIG4VWxAzIPHzdczfe3TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.126.0/23
151.241.209.0-151.241.212.255
Signature Algorithm: sha256WithRSAEncryption
6a:33:91:f3:e4:b8:1f:c5:46:e6:fa:73:9d:46:60:74:8f:f9:
3e:0c:4d:b8:c3:45:29:2f:45:40:10:cf:db:06:28:8d:d2:f2:
fe:5b:e2:d3:d7:3f:35:55:a5:61:6a:0c:73:ae:02:5e:08:50:
58:67:95:49:61:cc:bc:89:82:bb:46:8a:f2:e7:22:81:d1:61:
1e:f0:e8:e8:45:09:2c:7b:3b:9e:f8:6d:f2:a6:02:fe:a7:ec:
75:e4:2b:46:95:13:e8:d6:14:78:b2:55:7e:b3:4f:a8:0b:a0:
11:36:a4:ec:51:c0:9a:02:9b:99:1c:2d:68:86:23:83:09:90:
d0:ef:6b:10:e3:5a:7b:b5:9d:5e:09:d8:5e:5e:69:b3:e0:12:
f1:ce:ec:f7:58:a5:d5:0f:cc:ea:5d:f8:4b:a4:a0:f9:f5:88:
2c:21:2e:a2:a9:a2:6a:cd:55:7b:fd:54:d1:63:6a:0c:ed:f3:
6c:87:48:ad:71:9a:15:90:90:b7:bc:7b:20:97:af:93:ed:89:
13:e8:19:2c:80:a2:13:a3:5f:de:1b:36:7f:11:ee:22:9f:30:
95:2e:d0:dc:8c:03:66:e1:bd:f8:f2:b9:b5:2e:f4:bb:4e:5a:
8a:2b:56:25:c4:82:c2:92:c2:86:b9:cc:da:57:a6:54:ac:d0:
39:81:37:75
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:35 2026 by rpki-client