Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0BA9xxnCD_4LJZZTwd74f3AQ5TE.roa
File: 0BA9xxnCD_4LJZZTwd74f3AQ5TE.roa (raw, json)
Hash identifier: txet9DyV9d4cUrkw15tRXqrtD4GQMOIZ4rIDMxUFKN0=
Subject key identifier: D0:10:3D:C7:19:C2:0F:FE:0B:25:96:53:C1:DE:F8:7F:70:10:E5:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D978977D2596D0A262264CDCB31E4FDB8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0BA9xxnCD_4LJZZTwd74f3AQ5TE.roa
Signing time: Thu 16 Apr 2026 18:24:21 +0000
ROA not before: Thu 16 Apr 2026 18:24:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216089
IP address blocks: 151.246.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:89:77:d2:59:6d:0a:26:22:64:cd:cb:31:e4:fd:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 16 18:24:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d0103dc719c20ffe0b259653c1def87f7010e531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:dc:ea:a1:4d:f7:4d:56:8a:3f:eb:22:df:15:
b1:a5:70:5c:0b:53:5e:12:5f:b9:1d:da:0a:be:8d:
cc:4a:5a:53:92:c2:5e:b4:05:7d:ec:fc:cd:e4:f0:
51:46:68:7a:74:40:d7:ae:64:38:f3:26:82:51:83:
0d:d4:6c:ac:57:b4:ae:2a:1f:bc:55:bc:eb:fc:cc:
c0:6b:5e:10:63:d6:0e:42:47:62:83:e2:a4:67:e3:
07:58:7e:39:ff:f6:6f:2b:a2:6b:10:b7:59:77:5f:
97:50:41:48:2a:5e:1b:c1:17:25:e8:de:32:1c:d7:
c2:5a:7d:ea:24:0c:4e:d3:0a:5c:f3:9b:41:b1:1c:
ab:67:19:b6:70:6e:27:77:64:b5:14:71:74:43:e9:
99:ab:73:ef:21:e2:ec:ce:9b:a4:36:0c:60:5c:d1:
a3:cd:34:3b:e4:cc:af:bc:d5:4a:b3:e7:2c:60:8f:
39:e9:87:74:bb:a7:5d:80:52:3e:8d:92:63:47:8e:
b3:12:e7:2a:d2:68:79:8a:87:87:c7:58:04:fd:6f:
46:31:e4:a8:30:97:28:65:88:af:40:48:57:36:55:
79:37:93:d8:1e:3d:d5:22:04:1a:cd:a4:b7:14:c2:
52:26:a8:d6:7c:91:44:85:01:a7:59:f9:48:07:29:
6d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:10:3D:C7:19:C2:0F:FE:0B:25:96:53:C1:DE:F8:7F:70:10:E5:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0BA9xxnCD_4LJZZTwd74f3AQ5TE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:92:e0:84:5d:e0:b7:d7:31:a4:1a:a3:4b:db:3b:a8:93:4f:
dd:7b:42:fc:b9:52:c5:c0:9b:41:a2:40:4a:ec:d8:72:6d:b3:
e0:a5:1d:7c:00:08:dd:2f:0c:5a:b2:02:ad:29:70:bd:cb:0c:
86:65:8b:47:79:f1:48:3e:9b:61:c1:6c:1a:11:57:23:17:17:
86:d2:7b:09:57:54:32:8f:fe:96:b0:2f:c4:a2:63:72:4d:75:
27:4c:fb:18:9f:fe:5b:01:34:b3:66:7e:30:3a:b9:42:70:24:
3d:c0:c7:24:60:e5:58:d3:d6:a2:cc:7c:ac:29:cf:41:0c:6f:
d7:6c:f1:6c:f5:be:86:c3:f4:f8:2b:75:16:c6:c7:e5:30:e8:
34:a5:d1:ad:32:f6:12:a8:43:6c:bc:6f:f2:d6:43:b5:89:ca:
56:ba:2e:f9:fd:79:82:17:52:26:49:ca:ad:96:ab:e0:ee:ea:
68:a9:68:ac:44:98:53:17:32:ed:e2:f4:58:4c:cd:d0:4d:cd:
50:3e:71:9d:b0:86:e2:31:ef:40:7c:62:31:37:16:ba:14:d9:
b5:60:4c:95:9f:0f:9f:a0:13:3d:cf:ab:2b:1b:3f:3d:da:0b:
29:de:21:e9:c7:76:d4:bc:25:dd:17:4f:04:07:af:79:b0:34:
e7:28:ce:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:50:50 2026 by rpki-client