Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lTK5Jui1IUetDrDZBrp4eLM-3M.roa
File: 3lTK5Jui1IUetDrDZBrp4eLM-3M.roa (raw, json)
Hash identifier: bJVVVuM39m24Vvf75vg1hAqxuZr7IiZrINADA7itjr0=
Subject key identifier: DE:54:CA:E4:9B:A2:D4:85:1E:B4:3A:C3:64:1A:E9:E1:E2:CC:FB:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7114CD15C499F43E7CEBDFC990BD9DCB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lTK5Jui1IUetDrDZBrp4eLM-3M.roa
Signing time: Thu 09 Apr 2026 07:11:21 +0000
ROA not before: Thu 09 Apr 2026 07:11:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 151.243.23.0/24 maxlen: 24
151.243.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:14:cd:15:c4:99:f4:3e:7c:eb:df:c9:90:bd:9d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 07:11:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de54cae49ba2d4851eb43ac3641ae9e1e2ccfb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:bc:5b:34:29:3d:03:48:6b:c7:a9:fa:b4:
df:11:2e:32:3c:9e:b3:75:a7:71:a9:4c:38:63:7a:
8f:ae:c0:35:9a:84:d8:ea:ab:cc:59:32:a0:76:45:
7b:4e:14:32:ca:52:c9:21:8e:75:30:43:fb:62:63:
9b:57:b9:e1:0e:3b:c8:eb:d1:0f:44:03:f4:5f:58:
e7:0a:c5:75:1f:be:3e:87:c8:96:ce:b8:45:fa:c1:
65:27:70:f0:af:99:10:5e:cf:fa:50:33:f8:8c:7a:
a0:cb:99:0c:40:e2:e1:72:04:d4:a5:0e:18:25:58:
41:95:e5:f9:92:99:9f:be:eb:51:c6:9c:9e:28:b6:
94:d4:be:fd:46:6e:66:ae:75:19:93:9e:46:36:a6:
6c:7d:97:bb:e7:ef:bf:49:d7:90:dd:d9:ba:49:f4:
8d:b3:e7:9b:c3:bc:3f:d3:c1:57:d4:23:94:82:11:
45:d9:5b:8d:9d:bc:9a:3f:f0:37:3e:88:c3:e9:fb:
bc:e6:66:7b:2a:43:fb:3f:8c:0c:0f:d4:dd:bc:6e:
34:c7:26:34:db:0f:6b:e5:f0:03:4a:76:df:4e:ce:
a7:3f:e4:5e:14:8a:67:81:55:85:3a:60:b7:c7:a0:
37:bc:6d:d8:d3:91:11:8f:88:82:48:55:77:28:80:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:CA:E4:9B:A2:D4:85:1E:B4:3A:C3:64:1A:E9:E1:E2:CC:FB:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3lTK5Jui1IUetDrDZBrp4eLM-3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.23.0/24
151.243.42.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d4:e9:7d:24:ff:7e:df:fb:d2:fc:c3:7b:8e:48:56:2d:bc:
fb:dd:8d:c8:19:70:b4:89:21:f2:ea:0d:eb:60:bc:10:e5:fd:
8f:e3:b4:23:1a:a9:89:2e:ba:78:23:ba:56:c9:fe:00:24:34:
2e:31:b8:62:db:88:9d:2f:9f:cf:ee:d2:4a:5e:24:0a:65:d0:
a0:d8:c1:78:fb:7e:8f:86:5d:33:3e:39:a3:06:e9:ff:27:30:
6a:89:6e:90:70:e0:fc:00:11:45:4b:88:e8:27:ea:72:9a:74:
00:b5:ea:30:b5:83:53:e4:7a:fd:39:82:b4:c2:33:36:3a:b2:
aa:75:63:1e:58:f6:59:96:b1:ae:c8:ce:08:30:60:51:fd:58:
dd:8f:cf:3b:1c:c0:91:94:67:cf:98:14:0b:dd:41:79:d8:ce:
65:b1:47:5b:91:31:c9:65:7a:76:ae:20:18:8f:e4:87:e0:b6:
a1:68:2e:60:90:2b:8d:0e:01:e3:e8:51:fe:30:ed:35:3a:13:
fc:6f:07:5b:2c:05:38:6d:5e:eb:c7:18:46:e6:d4:db:0e:1a:
25:cf:bd:0d:4e:2f:a9:3b:f2:ef:2d:b0:8b:5f:fd:f2:a1:87:
4b:eb:57:06:51:6f:f1:b2:86:9f:af:d3:ad:bd:d5:40:80:ee:
c7:2b:1b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:53 2026 by rpki-client