Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/waXd6-ncYMsMuG4TdPO_dQYshpE.roa
File: waXd6-ncYMsMuG4TdPO_dQYshpE.roa (raw, json)
Hash identifier: mEpWCadON2J0Qx6VlVf3Ft6RVsALfVRAgTDOKU4QkYk=
Subject key identifier: C1:A5:DD:EB:E9:DC:60:CB:0C:B8:6E:13:74:F3:BF:75:06:2C:86:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A033EEE502CF4D7867D2228C22C22EBC57
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/waXd6-ncYMsMuG4TdPO_dQYshpE.roa
Signing time: Mon 24 Aug 2026 13:21:29 +0000
ROA not before: Mon 24 Aug 2026 13:21:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.243.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:ee:e5:02:cf:4d:78:67:d2:22:8c:22:c2:2e:bc:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 13:21:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1a5ddebe9dc60cb0cb86e1374f3bf75062c8691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:71:9c:96:60:21:d1:19:f1:6a:c0:5d:4c:41:
6a:73:ee:80:14:19:85:4c:32:02:2f:cd:d8:f5:b7:
d1:fd:12:18:3f:ed:f7:3b:d7:d2:1c:54:2d:51:26:
71:cd:9a:d5:46:d7:01:0c:26:2e:b1:12:c8:2d:aa:
f7:06:f3:5f:99:82:bd:fc:75:1c:8e:1e:e4:75:d7:
e3:34:7c:2f:cd:b9:7b:64:91:63:b9:1b:5c:86:e7:
fd:5e:68:4d:8d:71:41:97:d8:c3:54:b8:68:7b:cc:
d6:e9:06:a8:77:1b:61:2e:c4:dc:06:bc:9a:3b:9b:
9f:32:f1:37:47:fb:89:c2:03:84:6b:6a:47:50:e2:
0a:e6:d1:2d:28:e5:86:c6:4a:9f:a5:bf:10:88:08:
9f:a0:d3:36:2d:da:1e:5a:50:fe:04:d1:d6:06:d8:
71:72:80:fb:92:1e:d5:26:47:43:42:d1:ed:11:20:
e7:aa:ed:00:f5:96:85:dd:5b:47:65:78:91:ab:47:
5a:77:c4:5f:89:2b:9a:bf:82:2f:28:78:42:0d:14:
5d:f8:f6:68:24:e4:be:ff:f2:5a:26:70:63:ee:76:
3d:34:94:bb:28:18:70:c4:fc:68:46:69:1e:f0:29:
12:92:9c:f3:de:e0:0f:ab:cf:be:20:b5:dc:5d:1c:
1f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:A5:DD:EB:E9:DC:60:CB:0C:B8:6E:13:74:F3:BF:75:06:2C:86:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/waXd6-ncYMsMuG4TdPO_dQYshpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.243.179.0/24
Signature Algorithm: sha256WithRSAEncryption
75:95:98:c4:67:6d:7d:15:76:8b:ba:73:aa:60:ec:91:d9:a3:
a3:37:5e:a9:7c:ba:d3:ab:77:7a:b8:63:38:97:2f:8b:09:50:
69:7c:09:5e:19:55:12:d0:bf:9a:61:69:42:72:04:9f:97:8e:
79:e5:13:5e:63:9f:a0:83:16:16:8e:9b:7b:bf:35:0d:72:0a:
de:cb:49:08:dd:22:24:4d:45:26:72:3f:4a:ad:e2:ac:5c:01:
88:39:4f:b2:6b:6c:35:7d:d6:01:35:33:43:c8:b5:74:aa:ff:
dc:7d:ce:d9:9a:58:e2:86:31:85:30:ea:79:69:1a:62:5d:09:
31:9e:31:23:d0:8d:8b:80:6a:e1:e4:d4:09:66:a3:36:07:27:
62:47:b9:eb:2e:28:90:9d:f3:6b:26:eb:f8:72:d5:63:72:e4:
cc:51:09:91:91:74:df:0e:af:66:c8:58:57:0b:16:66:69:61:
fb:05:74:d3:9b:f1:e9:d8:17:84:24:3d:95:7f:48:d6:17:d4:
de:e0:34:6c:9f:27:53:79:1d:31:d9:d2:e1:f3:ea:78:70:71:
57:0b:29:59:ae:47:d5:d3:c1:63:38:18:a7:d5:d9:8c:84:07:
4f:c8:84:d8:d1:d8:6d:8b:1a:f1:45:38:71:4c:87:12:36:b8:
d3:12:9a:75
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaAz7uUCz014Z9IijCLCLrxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI0MTMyMTI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMWE1ZGRlYmU5ZGM2MGNiMGNiODZlMTM3NGYzYmY3NTA2MmM4NjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHGclmAh0RnxasBdTEFqc+6AFBmF
TDICL83Y9bfR/RIYP+33O9fSHFQtUSZxzZrVRtcBDCYusRLILar3BvNfmYK9/HUc
jh7kddfjNHwvzbl7ZJFjuRtchuf9XmhNjXFBl9jDVLhoe8zW6QaodxthLsTcBrya
O5ufMvE3R/uJwgOEa2pHUOIK5tEtKOWGxkqfpb8QiAifoNM2LdoeWlD+BNHWBthx
coD7kh7VJkdDQtHtESDnqu0A9ZaF3VtHZXiRq0dad8RfiSuav4IvKHhCDRRd+PZo
JOS+//JaJnBj7nY9NJS7KBhwxPxoRmke8CkSkpzz3uAPq8++ILXcXRwf4QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMGl3evp3GDLDLhuE3Tzv3UGLIaRMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd2FYZDYtbmNZTXNNdUc0VGRQT19kUVlzaHBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/GAAwQA
l/OzMA0GCSqGSIb3DQEBCwUAA4IBAQB1lZjEZ219FXaLunOqYOyR2aOjN16pfLrT
q3d6uGM4ly+LCVBpfAleGVUS0L+aYWlCcgSfl4555RNeY5+ggxYWjpt7vzUNcgre
y0kI3SIkTUUmcj9KreKsXAGIOU+ya2w1fdYBNTNDyLV0qv/cfc7ZmljihjGFMOp5
aRpiXQkxnjEj0I2LgGrh5NQJZqM2BydiR7nrLiiQnfNrJuv4ctVjcuTMUQmRkXTf
Dq9myFhXCxZmaWH7BXTTm/Hp2BeEJD2Vf0jWF9Te4DRsnydTeR0x2dLh8+p4cHFX
CylZrkfV08FjOBin1dmMhAdPyITY0dhtixrxRThxTIcSNrjTEpp1
-----END CERTIFICATE-----
Generated at Thu Sep 10 17:49:33 2026 by rpki-client