Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DAhtMRBTFduv2ACk1cCyzWRWuaQ.roa
File: DAhtMRBTFduv2ACk1cCyzWRWuaQ.roa (raw, json)
Hash identifier: Vd5/+OMe1QwcMn0WHLHIFlUMqXKI/V+3yts9jz6NtUY=
Subject key identifier: 0C:08:6D:31:10:53:15:DB:AF:D8:00:A4:D5:C0:B2:CD:64:56:B9:A4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D921C9BB80FF4381A2CB588838EBE1AA8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DAhtMRBTFduv2ACk1cCyzWRWuaQ.roa
Signing time: Wed 15 Apr 2026 17:07:21 +0000
ROA not before: Wed 15 Apr 2026 17:07:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 151.245.171.0/24 maxlen: 24
151.245.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:1c:9b:b8:0f:f4:38:1a:2c:b5:88:83:8e:be:1a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 15 17:07:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c086d31105315dbafd800a4d5c0b2cd6456b9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:24:1b:bb:42:9b:6f:f5:b5:26:b0:2d:39:
b7:0d:3c:b7:3d:ed:b3:8c:d4:78:98:17:f6:9c:79:
24:90:0b:ac:63:82:a3:49:5d:55:8a:3e:3f:3f:1e:
40:b5:04:d3:7c:87:c7:88:a5:78:fe:65:4b:fa:57:
61:e7:79:a0:04:63:08:f3:2e:62:34:31:cc:ad:a4:
8e:5b:e3:67:7d:5b:32:fe:d1:1d:e8:8a:4f:0a:08:
39:6a:9c:51:30:97:a2:9d:df:0c:9f:ba:8c:b7:8b:
dc:f7:93:88:23:1f:a2:58:62:dd:32:8d:d3:1b:60:
5a:4a:df:4d:ea:fa:4f:58:42:86:ed:24:34:d4:2c:
1c:f7:f3:27:e4:4e:eb:b0:cf:36:56:25:8b:fb:91:
aa:04:6a:5b:be:a3:35:a5:47:22:06:0c:89:3e:29:
23:12:9d:47:b0:95:29:66:2e:d2:3a:96:7e:9c:d2:
fb:24:f7:a3:8c:d2:b1:40:45:19:e2:18:61:75:35:
1a:6c:14:1b:f6:73:50:6b:b2:eb:28:e3:62:81:3a:
ff:07:9a:9b:a3:dd:c9:42:89:57:d6:ed:2c:5f:21:
32:18:73:ee:40:f8:ff:dd:49:ac:1f:19:e3:11:b4:
9d:c9:25:61:5c:fb:91:d9:62:17:f8:d7:b7:42:21:
c9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:08:6D:31:10:53:15:DB:AF:D8:00:A4:D5:C0:B2:CD:64:56:B9:A4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DAhtMRBTFduv2ACk1cCyzWRWuaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.171.0-151.245.172.255
Signature Algorithm: sha256WithRSAEncryption
74:f4:78:f9:02:0d:1f:2f:06:51:60:3f:f4:da:3a:b2:d9:2f:
a5:70:eb:9e:c7:37:a4:b1:28:d9:01:eb:4c:a0:6c:bd:14:12:
a5:5d:46:d9:c6:24:68:ed:4d:d0:8f:a0:d0:bd:da:d7:ce:94:
e3:1f:bc:fd:40:3e:6d:ef:51:71:a8:fe:e6:34:e9:1a:04:bc:
5d:b5:96:63:a8:b6:54:a6:dc:d6:89:bc:f8:54:d6:04:30:4f:
e7:e8:28:db:2f:39:7c:70:3a:b3:58:a5:46:4c:a3:98:5b:21:
3f:88:ed:84:9e:dc:16:b8:4a:49:a4:9f:fd:35:9f:04:e1:67:
92:18:05:a5:d3:28:79:3c:e3:c9:25:5e:8c:f2:89:34:f8:e1:
0a:b4:d2:68:63:77:88:0d:ae:98:d8:97:90:dc:2f:8f:20:af:
ed:0f:a5:97:5b:e0:fd:50:70:db:cb:8f:1f:30:0d:a3:0c:f3:
06:26:70:88:cf:5a:a3:4c:5f:ba:57:e8:0c:15:6f:51:92:0c:
0c:ad:4d:ab:24:02:8c:2b:48:7d:d1:d0:ff:46:0b:d6:1e:3e:
46:7b:18:09:ac:bc:52:26:d9:4d:7a:92:b0:1b:b4:28:9a:b7:
4f:dd:ba:b4:91:d2:53:a4:55:b4:ca:11:d8:b5:1e:d9:0a:26:
42:de:5f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:07 2026 by rpki-client