Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CKk1ox4CTROw3tYfRbVTPWs54ZI.roa
File: CKk1ox4CTROw3tYfRbVTPWs54ZI.roa (raw, json)
Hash identifier: xu4IHsSehg/319vNTM05iuLrqsdAJMpebh3T76VkQP0=
Subject key identifier: 08:A9:35:A3:1E:02:4D:13:B0:DE:D6:1F:45:B5:53:3D:6B:39:E1:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E97C06FE1B4C5EAF5A196F1B3EE640D9A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CKk1ox4CTROw3tYfRbVTPWs54ZI.roa
Signing time: Fri 05 Jun 2026 12:27:11 +0000
ROA not before: Fri 05 Jun 2026 12:27:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198420
IP address blocks: 151.245.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:c0:6f:e1:b4:c5:ea:f5:a1:96:f1:b3:ee:64:0d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 12:27:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08a935a31e024d13b0ded61f45b5533d6b39e192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:61:55:10:ec:1c:1a:ea:df:47:b3:bd:36:7c:
64:a8:09:15:d2:d9:6e:e2:ab:37:6b:29:ae:4a:5d:
01:82:03:04:93:bb:a1:17:49:8e:01:f6:b2:44:e6:
47:16:1a:c6:94:7a:48:21:4b:8d:72:26:b4:df:48:
3f:84:f4:5e:5c:41:1d:0a:ac:04:58:6b:0f:0f:ce:
fa:2b:4d:f8:af:a1:40:15:02:34:17:cb:28:8b:76:
ad:a1:40:40:bf:43:d1:f3:6f:e1:9d:2d:d4:7e:41:
d6:b2:ab:ef:db:30:c6:c6:be:c7:a7:b4:27:40:55:
24:61:9a:43:22:f5:40:bb:62:85:58:ae:9a:e1:f1:
16:f5:de:db:a6:76:d9:9c:b3:bb:b8:45:9a:da:d6:
a5:a8:1f:7e:47:05:73:e2:ff:8a:5e:03:44:38:49:
26:3d:c3:b6:36:44:54:14:94:8d:80:15:64:c2:55:
af:0e:a6:e7:60:76:51:5e:4d:8f:04:1f:8c:d2:e7:
36:43:13:66:e3:b4:4c:dc:08:a7:ce:cd:2c:8d:34:
48:9f:af:55:0d:67:d7:bc:2d:d6:9b:72:fe:65:88:
5a:1e:22:78:c0:da:07:fc:0a:b6:cf:e5:71:af:23:
de:7a:48:3d:da:28:de:59:08:eb:ff:02:e8:bc:ed:
13:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A9:35:A3:1E:02:4D:13:B0:DE:D6:1F:45:B5:53:3D:6B:39:E1:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CKk1ox4CTROw3tYfRbVTPWs54ZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.192.0/24
Signature Algorithm: sha256WithRSAEncryption
79:03:13:f2:23:dc:12:ab:79:2a:2e:49:9b:fe:b5:38:df:4f:
a0:66:7f:4b:23:e4:c1:d6:8e:65:ba:36:84:5e:4a:73:a3:43:
3b:7c:52:87:fd:4a:e7:d4:5d:c5:af:b4:88:c3:3f:d7:01:53:
a0:50:11:73:65:4a:df:cd:17:dd:3a:49:a9:70:fa:bb:f1:3c:
9f:0d:54:ee:e4:dd:dd:98:54:b2:18:3b:0e:89:17:23:87:a2:
c5:ba:be:b3:8b:02:1d:97:c8:5e:15:c8:c7:32:cf:bb:c8:ff:
e1:87:b4:d8:f4:d4:f6:d1:62:8d:d4:f0:69:ac:57:d4:95:ed:
16:96:57:50:97:38:35:0c:8d:95:de:c8:7c:90:17:be:b2:1d:
39:e4:d4:5f:a4:07:4b:0a:58:fc:1d:c5:40:28:72:1f:af:13:
25:3a:18:d3:bc:ac:65:e0:e8:1f:d5:84:23:bf:75:a0:5e:91:
d6:97:31:2d:64:b3:ab:e4:db:46:70:92:55:fe:56:81:f4:44:
1f:91:7f:a3:5d:69:7d:56:e1:62:4f:6f:c2:d1:dc:78:82:b6:
91:4d:ee:50:63:c9:5e:77:b5:bf:b1:17:53:bc:26:23:0f:3e:
78:ef:8b:aa:df:39:0e:21:64:bd:bf:8c:10:56:72:e4:8f:5f:
34:8f:d1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:19:00 2026 by rpki-client