Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A3MSDUGT8dLolu6H3aK9JYfNsW4.roa
File: A3MSDUGT8dLolu6H3aK9JYfNsW4.roa (raw, json)
Hash identifier: v9eXSo63fscjJsYaqmYrmUytOmIpqoL3pYitWl4X2UQ=
Subject key identifier: 03:73:12:0D:41:93:F1:D2:E8:96:EE:87:DD:A2:BD:25:87:CD:B1:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1597B4C0DA8AB6CCA68B0AF04A31A7C9C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A3MSDUGT8dLolu6H3aK9JYfNsW4.roa
Signing time: Tue 20 Oct 2026 13:23:34 +0000
ROA not before: Tue 20 Oct 2026 13:23:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 151.243.149.0/24 maxlen: 24
151.246.142.0/24 maxlen: 24
151.247.224.0/24 maxlen: 24
151.247.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:59:7b:4c:0d:a8:ab:6c:ca:68:b0:af:04:a3:1a:7c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 20 13:23:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0373120d4193f1d2e896ee87dda2bd2587cdb16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:fe:e9:09:ba:e7:36:ad:5e:42:5e:63:4e:7f:
5c:7e:6b:06:a7:45:59:5d:4c:6f:ef:49:1b:a6:16:
1c:c6:7d:ea:97:08:48:e0:7b:a1:8d:7b:3b:e3:0e:
6d:5b:94:51:6b:8b:7a:1f:e3:57:69:d3:37:90:c6:
e0:1e:19:20:cb:dc:f2:58:02:66:d4:9a:a0:a8:a9:
42:fd:5c:05:26:4a:7c:6a:a7:ed:27:55:03:c3:8e:
15:a9:9e:60:c2:92:43:08:25:40:31:8b:49:ca:86:
a8:aa:24:9d:5e:28:60:45:69:83:fc:d1:97:37:b3:
2f:fb:30:2d:9a:fd:29:28:d4:de:e2:e6:79:b6:59:
d4:e7:9f:a2:d8:c3:1e:e3:da:07:cd:d7:14:13:b8:
10:09:76:a6:a8:81:5e:37:ba:08:a3:84:0a:be:1f:
6c:13:70:35:07:2b:b2:7b:9f:0b:16:93:40:c9:b5:
78:cd:91:26:fa:b2:d7:3f:fd:df:24:25:7f:4d:9c:
14:f5:88:b4:38:71:89:e3:f3:49:aa:24:91:17:c2:
b7:60:6d:f8:36:e3:3d:04:c7:05:cd:4c:c2:10:2e:
89:fb:f6:06:89:83:4c:38:ec:0d:69:f7:e6:65:6a:
ae:8b:f2:c2:e1:3e:44:8f:0a:51:10:02:58:0d:86:
00:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:73:12:0D:41:93:F1:D2:E8:96:EE:87:DD:A2:BD:25:87:CD:B1:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/A3MSDUGT8dLolu6H3aK9JYfNsW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.149.0/24
151.246.142.0/24
151.247.224.0/24
151.247.230.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ba:c7:f4:6e:e9:82:55:73:6a:22:0b:95:d0:bb:4c:f3:96:
ce:77:42:8c:77:0f:3c:71:c9:ce:e0:16:f1:77:2a:b2:8d:6e:
00:08:78:93:88:d8:de:d2:f8:b6:17:c9:59:d1:58:b8:32:a5:
80:99:e4:9b:c2:eb:30:60:cd:3d:55:23:16:f0:e8:db:57:2a:
3e:b6:f0:cb:43:d1:b0:50:a0:8f:54:5c:c4:0b:85:a8:77:76:
7c:64:5d:ea:72:3a:93:75:a7:14:f1:99:75:5c:0d:68:e3:00:
4a:8e:5d:2f:57:37:ac:f9:09:22:f8:71:21:9f:87:0b:20:77:
22:f6:af:d4:11:69:05:36:3d:ae:2f:e2:c6:a0:48:60:f7:2a:
e3:1a:0c:6d:0e:ff:c4:9a:9c:ec:33:32:27:06:4b:7c:c5:f1:
35:82:d5:3b:cb:92:46:b9:75:7a:bb:a4:97:87:68:5d:0b:e2:
1d:2f:a8:36:7e:9a:f0:0b:97:eb:3a:9b:ad:94:9f:74:a1:36:
8a:5d:dd:61:3e:08:12:44:0e:e5:56:8d:67:13:4b:be:5a:9b:
8c:59:31:c7:06:a5:44:57:b8:4c:5b:34:ae:6a:71:d9:2f:e6:
58:35:54:ae:81:45:08:cd:8d:1c:79:c4:3b:da:b4:f0:71:b1:
0c:55:0d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:24 2026 by rpki-client