Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3vOwgNzIlmTH2r1VAuYruYl6ngk.roa
File: 3vOwgNzIlmTH2r1VAuYruYl6ngk.roa (raw, json)
Hash identifier: XJquUYSOIYQEeghh3Glr0bmmXyc+JhB/yiR9pQfTshM=
Subject key identifier: DE:F3:B0:80:DC:C8:96:64:C7:DA:BD:55:02:E6:2B:B9:89:7A:9E:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A9E93846F7D942C4E4DD27EF1D36A369
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3vOwgNzIlmTH2r1VAuYruYl6ngk.roa
Signing time: Wed 16 Sep 2026 11:10:28 +0000
ROA not before: Wed 16 Sep 2026 11:10:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 32043
IP address blocks: 151.242.101.0/24 maxlen: 24
151.246.40.0/24 maxlen: 24
151.246.42.0/24 maxlen: 24
151.246.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:e9:38:46:f7:d9:42:c4:e4:dd:27:ef:1d:36:a3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 11:10:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=def3b080dcc89664c7dabd5502e62bb9897a9e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d7:62:d3:7c:1e:d9:6b:2a:a0:f2:60:5d:94:
cf:fd:6a:3f:09:30:af:e8:ce:dc:2b:b0:f8:e5:c1:
a0:f8:35:61:6f:8b:01:7b:88:27:19:a7:02:e8:c5:
15:74:b7:b1:82:98:2f:11:d4:4c:a3:60:41:f7:75:
78:88:31:80:7e:2c:43:38:a6:b3:8e:cc:ed:4a:b6:
ad:72:bb:20:91:ff:02:fd:25:ca:5d:a2:70:c7:ad:
46:a6:f1:75:3f:76:60:12:cf:b1:af:e7:7b:5b:32:
03:51:e3:12:19:69:ec:d4:d6:af:55:25:88:43:7a:
fa:14:de:62:d8:ca:8e:c0:64:bb:bd:7d:65:3f:ad:
d8:08:9f:c5:37:83:07:7a:24:8c:49:c3:f7:d7:e2:
3d:39:d6:ff:46:21:96:04:0e:7b:57:16:ca:b3:eb:
a7:0e:20:af:82:64:13:b0:09:15:d1:fa:1b:d0:ea:
8e:4a:1f:a2:f5:1b:91:cb:78:27:21:ec:27:d2:c9:
7d:98:c2:f5:5f:82:b6:67:07:7b:fb:a7:37:7d:65:
f6:a3:24:e8:28:41:63:46:ce:85:b2:62:ca:ad:b8:
11:9a:12:90:27:f0:07:d6:92:84:b4:5a:0a:fd:7b:
70:21:37:df:d8:6b:0e:60:9b:25:8a:96:54:6a:f3:
ba:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F3:B0:80:DC:C8:96:64:C7:DA:BD:55:02:E6:2B:B9:89:7A:9E:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3vOwgNzIlmTH2r1VAuYruYl6ngk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.101.0/24
151.246.40.0/24
151.246.42.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:7b:37:81:b7:f9:37:57:3a:63:63:9f:57:ac:2f:41:32:d3:
f1:8a:7d:b2:72:f3:5f:15:12:ba:d1:97:ce:48:63:29:a9:03:
e9:25:f2:24:57:0b:2a:61:7e:08:de:76:75:c3:0d:f0:1e:6a:
3a:99:ee:6b:f5:cd:83:6d:3d:32:a7:d7:ce:84:44:ad:ca:9c:
b3:a8:72:ba:cc:53:50:29:1c:bf:bd:a2:42:6f:9a:f0:8c:65:
0d:0d:b0:65:a9:2e:aa:38:bf:11:a6:e2:7d:27:b4:00:73:8e:
77:5b:ad:37:d2:69:6a:9d:75:8a:34:1f:b6:50:c1:50:13:50:
ca:cb:7e:81:e0:44:1a:87:6d:76:71:b4:30:bc:6a:69:f3:cf:
8f:be:ca:a8:26:f3:51:5c:99:8f:0b:5c:83:4f:f7:ca:95:17:
dd:62:25:48:77:ca:c3:ab:64:43:eb:28:0b:4f:48:bd:49:2c:
c6:23:7b:3d:8c:04:ae:c7:fb:7a:b3:af:c8:29:11:31:27:58:
ea:d2:83:d8:67:3c:24:e0:ec:4f:25:d4:b2:b3:23:2a:ed:a2:
e5:af:9f:09:38:a5:ea:df:16:06:47:a1:1c:6c:14:b7:02:c1:
65:b3:f1:d3:87:c2:4b:99:a9:47:4e:03:c2:d8:40:49:10:cb:
f8:c5:f4:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:59:52 2026 by rpki-client