Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/En_lKnXklUsNjUMHv5Pyg3ZufPs.roa
File: En_lKnXklUsNjUMHv5Pyg3ZufPs.roa (raw, json)
Hash identifier: UoKCNKjSL8eSTbMqL1ljWejZmGvXG2T4dvjLL9MRbvU=
Subject key identifier: 12:7F:E5:2A:75:E4:95:4B:0D:8D:43:07:BF:93:F2:83:76:6E:7C:FB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D51EA0EC5872C21458A112EB98210CC96
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/En_lKnXklUsNjUMHv5Pyg3ZufPs.roa
Signing time: Fri 03 Apr 2026 05:56:26 +0000
ROA not before: Fri 03 Apr 2026 05:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216475
IP address blocks: 151.246.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:51:ea:0e:c5:87:2c:21:45:8a:11:2e:b9:82:10:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 3 05:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=127fe52a75e4954b0d8d4307bf93f283766e7cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:01:d1:b0:77:ea:e9:21:96:94:a2:ed:b6:
7f:ac:13:af:8a:f4:d9:e9:f7:a5:ac:51:38:c9:64:
78:57:8a:95:b9:63:05:62:ee:7a:04:f4:00:2a:c2:
6e:99:e4:ef:b6:5e:11:f1:fb:01:2a:8c:e3:0c:dd:
54:52:a7:61:f3:b3:d9:51:d3:97:eb:86:ea:4c:c2:
48:4b:4f:34:a0:32:8b:b0:58:3d:5e:5e:ba:ea:62:
94:bc:91:55:2a:b9:f4:3d:34:44:b6:8d:27:42:ac:
14:71:cc:13:fe:79:1e:e1:04:3d:60:a4:0a:d1:66:
48:97:f4:a7:49:e9:ae:ee:09:be:1b:58:b6:6f:a4:
fd:b1:12:25:aa:5f:76:62:14:fd:1d:73:28:50:61:
7d:3c:04:e4:07:87:7b:fa:83:a5:50:69:80:bf:75:
69:1b:4e:90:23:0e:9c:d9:b5:c6:0b:88:62:83:93:
b3:8a:cf:bf:a4:91:42:67:39:b9:4c:b8:eb:5e:6d:
4c:06:a2:63:49:7d:10:49:56:47:58:99:44:8f:3d:
03:b4:8b:af:13:e9:67:31:e6:49:e6:87:53:3e:1b:
80:f2:61:92:5d:cf:52:a0:49:92:61:b8:78:f2:d3:
56:b2:62:43:bc:e1:ee:1f:24:7f:0c:9a:97:b5:f9:
a6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:7F:E5:2A:75:E4:95:4B:0D:8D:43:07:BF:93:F2:83:76:6E:7C:FB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/En_lKnXklUsNjUMHv5Pyg3ZufPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.195.0/24
Signature Algorithm: sha256WithRSAEncryption
25:16:38:6b:cc:2f:e6:dd:56:ec:33:a2:ec:0b:45:c7:b2:c2:
cb:c1:ad:65:2d:31:db:a6:e0:1d:5a:2b:e6:dc:d6:09:7c:35:
6e:50:90:ec:02:39:c8:3f:2c:e8:bf:db:b2:bb:b7:47:9b:fe:
d0:7c:2c:be:93:c4:48:31:13:9f:2e:ff:09:4e:ec:63:9e:20:
6d:bb:c6:25:29:74:39:02:7f:9e:9f:1c:a0:6e:7a:e3:f6:c5:
e7:db:3a:dd:0f:2c:46:ac:9a:5d:3d:80:8b:ba:3f:51:2f:4a:
a3:e9:40:3e:ac:87:f9:f0:ee:de:a7:9e:f8:92:73:70:71:8b:
c8:dd:a0:68:06:78:35:5e:41:9a:96:10:87:ac:4b:da:fd:58:
77:bd:2d:55:81:77:2c:eb:fd:6d:ca:47:8d:6d:a5:f8:00:be:
0b:f3:8c:68:47:77:02:79:48:e1:26:bb:85:dd:52:5b:be:71:
80:2b:ae:25:0f:75:f4:a7:35:99:eb:cf:cd:e3:54:23:88:08:
2d:8d:60:0b:e0:2a:6b:9a:6d:35:b4:b8:63:a8:a9:09:4b:83:
f4:99:15:50:54:33:62:da:82:d2:57:18:6a:db:b1:e8:72:ce:
43:e0:0a:f8:2e:f7:18:45:84:95:5d:de:82:3e:73:ba:c9:f6:
5c:fd:ec:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1R6g7FhywhRYoRLrmCEMyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDAzMDU1NjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjdmZTUyYTc1ZTQ5NTRiMGQ4ZDQzMDdiZjkzZjI4Mzc2NmU3Y2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuIB0bB36ukhlpSi7bZ/rBOvivTZ
6felrFE4yWR4V4qVuWMFYu56BPQAKsJumeTvtl4R8fsBKozjDN1UUqdh87PZUdOX
64bqTMJIS080oDKLsFg9Xl666mKUvJFVKrn0PTREto0nQqwUccwT/nke4QQ9YKQK
0WZIl/SnSemu7gm+G1i2b6T9sRIlql92YhT9HXMoUGF9PATkB4d7+oOlUGmAv3Vp
G06QIw6c2bXGC4hig5Ozis+/pJFCZzm5TLjrXm1MBqJjSX0QSVZHWJlEjz0DtIuv
E+lnMeZJ5odTPhuA8mGSXc9SoEmSYbh48tNWsmJDvOHuHyR/DJqXtfmmtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJ/5Sp15JVLDY1DB7+T8oN2bnz7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRW5fbEtuWGtsVXNOalVNSHY1UHlnM1p1ZlBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/bDMA0G
CSqGSIb3DQEBCwUAA4IBAQAlFjhrzC/m3VbsM6LsC0XHssLLwa1lLTHbpuAdWivm
3NYJfDVuUJDsAjnIPyzov9uyu7dHm/7QfCy+k8RIMROfLv8JTuxjniBtu8YlKXQ5
An+enxygbnrj9sXn2zrdDyxGrJpdPYCLuj9RL0qj6UA+rIf58O7ep574knNwcYvI
3aBoBng1XkGalhCHrEva/Vh3vS1VgXcs6/1tykeNbaX4AL4L84xoR3cCeUjhJruF
3VJbvnGAK64lD3X0pzWZ68/N41QjiAgtjWAL4Cprmm01tLhjqKkJS4P0mRVQVDNi
2oLSVxhq27Hocs5D4Ar4LvcYRYSVXd6CPnO6yfZc/eyJ
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:28:51 2026 by rpki-client