Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wqPkWkBbjfI7dfA8wJU7b7pAHM0.roa
File: wqPkWkBbjfI7dfA8wJU7b7pAHM0.roa (raw, json)
Hash identifier: qq1/YNm6brn/Jx+MmLkUNDC0GlOotI+sROAe8rO/c/8=
Subject key identifier: C2:A3:E4:5A:40:5B:8D:F2:3B:75:F0:3C:C0:95:3B:6F:BA:40:1C:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CB7AC5042862E24B88E7634E23794FBC0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wqPkWkBbjfI7dfA8wJU7b7pAHM0.roa
Signing time: Wed 04 Mar 2026 07:07:29 +0000
ROA not before: Wed 04 Mar 2026 07:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 151.244.194.0/24 maxlen: 24
151.244.195.0/24 maxlen: 24
151.246.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:ac:50:42:86:2e:24:b8:8e:76:34:e2:37:94:fb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 4 07:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2a3e45a405b8df23b75f03cc0953b6fba401ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:88:71:14:38:5a:36:fb:cd:dc:c6:87:35:b1:
39:49:be:00:a3:e0:3b:c8:72:02:62:c4:5b:1c:9c:
a1:44:a8:a3:01:bc:3d:5f:7c:3b:15:8e:64:eb:a9:
91:14:21:3d:cd:33:c3:bf:b8:6e:52:20:20:be:c6:
a7:d3:e3:4e:9a:8e:c5:55:1b:d8:82:a9:6c:33:f1:
f4:db:09:0c:47:b0:3d:4a:7f:2d:d8:ca:52:c0:d2:
4e:39:6d:df:63:82:66:4f:e0:62:42:32:f9:b0:91:
61:ca:08:dd:e3:95:ad:a2:c4:42:dd:e6:ce:51:38:
c4:3b:fc:fa:5c:6a:03:21:c2:17:62:23:a8:d1:da:
07:67:3d:3b:ca:17:70:94:7e:d2:bd:96:fa:dc:d6:
b1:e6:ab:ad:8e:26:e9:94:f1:90:2b:1d:79:e0:7f:
83:8a:2d:f4:b8:44:df:6c:eb:3b:5a:99:ce:b3:a5:
0c:a4:86:93:a0:ea:0d:ba:58:c7:b8:4c:f3:1a:d8:
1f:e3:b7:5a:76:84:8e:f3:d7:9f:d6:27:9a:85:84:
e8:7b:52:df:1c:64:f9:25:e8:8f:6c:77:93:b9:12:
46:b4:86:c7:bf:90:cf:f9:09:94:62:38:7d:61:70:
0d:df:04:1e:e3:8a:34:14:29:40:44:db:2c:5d:26:
98:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:E4:5A:40:5B:8D:F2:3B:75:F0:3C:C0:95:3B:6F:BA:40:1C:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wqPkWkBbjfI7dfA8wJU7b7pAHM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.194.0/23
151.246.191.0/24
Signature Algorithm: sha256WithRSAEncryption
17:42:9c:40:c9:55:30:45:91:37:90:4f:01:9f:b5:f5:c7:c6:
b6:e0:fb:50:5a:08:cc:9d:d0:dd:1b:34:88:7c:1a:04:8e:b1:
ef:87:c3:d0:6a:67:da:be:0a:c3:ae:38:d0:85:ba:92:fa:44:
4f:6f:3f:92:98:e5:f5:41:f2:1e:41:06:97:ff:06:eb:da:40:
04:9e:8c:2b:5b:25:94:40:df:63:c4:0a:b5:d8:bd:3b:50:8c:
0d:24:b8:90:a8:e5:7a:fa:58:dc:b5:aa:c8:e6:54:e6:46:5e:
bc:47:fc:4d:bf:8e:a7:82:bc:04:4c:35:0b:54:7f:46:db:fd:
ac:15:92:eb:4e:64:12:eb:f5:c4:74:02:08:38:58:b4:16:4f:
9e:f2:dd:ab:71:85:eb:35:76:dd:12:90:94:67:e4:e7:a9:67:
fb:fa:36:81:92:1e:09:e4:44:37:94:96:e0:1b:48:4a:44:ff:
89:5c:b4:7e:84:00:5c:2d:33:a5:b6:bd:0c:b4:af:bb:9d:a9:
23:49:a7:a8:35:a3:28:1f:96:61:54:dc:1d:1e:43:71:78:3e:
31:dd:79:45:e2:ec:f4:17:1f:2c:04:b0:67:71:5a:65:22:cc:
a6:0a:fd:da:4c:79:de:0e:b4:ed:63:1a:0a:75:17:4c:8f:d4:
94:7e:81:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:33 2026 by rpki-client