Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1PdBFIuSO4vMM7hux6odU2su_zo.roa
File: 1PdBFIuSO4vMM7hux6odU2su_zo.roa (raw, json)
Hash identifier: V3mB0WgtOWleE496ypIDPUGcDBfkSfKReNGBKOVjGBI=
Subject key identifier: D4:F7:41:14:8B:92:3B:8B:CC:33:B8:6E:C7:AA:1D:53:6B:2E:FF:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA0988926A616CACB96155890EC9CB1C4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1PdBFIuSO4vMM7hux6odU2su_zo.roa
Signing time: Sun 07 Jun 2026 05:40:11 +0000
ROA not before: Sun 07 Jun 2026 05:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142382
IP address blocks: 151.244.229.0/24 maxlen: 24
151.244.230.0/24 maxlen: 24
151.244.238.0/24 maxlen: 24
151.244.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:98:89:26:a6:16:ca:cb:96:15:58:90:ec:9c:b1:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 05:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f741148b923b8bcc33b86ec7aa1d536b2eff3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:af:8b:1a:77:97:96:05:fb:4d:1c:c3:10:30:
1d:45:ae:0b:67:8a:80:d9:9e:fc:68:67:12:ab:4b:
a9:ab:c4:4a:a5:a0:d3:4e:1c:5f:65:8e:56:62:a1:
78:57:5f:93:04:e7:82:fa:7d:c5:21:90:ed:6a:24:
eb:f7:f3:77:19:c5:30:d3:e2:30:88:00:7b:66:96:
0a:a4:2f:a9:7a:75:50:c0:00:ca:df:a3:09:e5:ff:
19:ac:04:42:4e:2e:60:a1:11:4e:ab:62:9a:05:6b:
24:e5:69:0f:82:53:0b:51:b5:85:1a:86:ed:29:7a:
70:f2:f5:d5:6e:25:62:db:74:36:08:a4:20:c8:60:
b7:06:10:9c:21:7f:c5:58:40:d7:cf:ab:2c:c7:d6:
0a:17:07:9f:01:99:75:ce:78:8a:db:b2:9c:6d:90:
b6:8b:6c:42:9f:35:c2:05:ef:20:73:86:9f:73:dd:
13:dc:47:e2:e6:1c:f0:7c:cd:c8:f3:be:81:90:2b:
76:90:69:5c:c3:31:ad:06:66:a9:d3:77:51:cf:1e:
1f:e0:2b:a5:33:1f:fb:1d:d9:fc:a8:fa:45:2d:ad:
a7:b7:7a:a7:cf:de:86:2c:74:9a:c4:29:ef:8d:7e:
b0:b0:a0:e9:b8:2d:bd:80:5c:54:e1:20:04:b8:b4:
bc:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F7:41:14:8B:92:3B:8B:CC:33:B8:6E:C7:AA:1D:53:6B:2E:FF:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1PdBFIuSO4vMM7hux6odU2su_zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.229.0-151.244.230.255
151.244.238.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:d0:d5:89:3c:b4:53:60:c9:88:3e:1a:36:20:8e:5b:0a:8f:
b3:2b:91:8b:08:0e:e9:2f:be:4e:f1:95:b1:c5:c4:4e:f3:2e:
d9:33:a5:5b:c9:70:6f:14:c2:6d:ab:e2:f5:b0:fc:38:89:4e:
a7:2c:0c:a5:a9:12:4c:b5:59:36:94:4d:46:70:a3:df:96:c6:
b2:df:cb:ff:c5:34:f3:25:cb:d1:30:27:a0:45:8f:8c:cd:8a:
49:50:9b:99:e3:69:cb:b2:9b:1a:95:a1:eb:5c:21:2d:22:0f:
8d:f7:15:23:d0:ed:a5:77:be:0c:06:7f:70:76:c7:82:65:44:
bc:8e:cc:1f:c4:da:93:e0:96:34:2f:2d:e6:bd:90:07:be:32:
fe:d2:79:97:e4:9e:af:fe:48:3b:52:91:4c:50:c4:ed:55:47:
f9:c3:97:fa:1e:ac:79:d6:1c:17:b9:c1:82:ca:29:b5:3d:c7:
95:1b:2e:ed:d5:22:07:17:cc:e2:6c:94:82:aa:c5:09:dc:44:
1c:62:55:bf:37:d9:38:7a:9b:73:bd:01:cf:c8:65:c2:83:ad:
b1:cb:99:03:73:6c:99:40:8b:ec:d7:c7:bc:e5:af:fe:aa:23:
a3:24:cf:10:62:2f:db:63:5b:d7:73:f5:0e:c2:3a:25:05:a3:
92:5c:9d:fa
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:56 2026 by rpki-client