Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K74PtWtEn_XFLTMaQ7k1Eq7rDr4.roa
File: K74PtWtEn_XFLTMaQ7k1Eq7rDr4.roa (raw, json)
Hash identifier: JHs17MxV6BiVMwBR7V67StDPGUPv+TAqOaLvUZR+7Yk=
Subject key identifier: 2B:BE:0F:B5:6B:44:9F:F5:C5:2D:33:1A:43:B9:35:12:AE:EB:0E:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B0A3ED7B13606FE0775738AC8C2B2B1F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K74PtWtEn_XFLTMaQ7k1Eq7rDr4.roa
Signing time: Thu 17 Sep 2026 18:32:08 +0000
ROA not before: Thu 17 Sep 2026 18:32:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219268
IP address blocks: 151.241.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:a3:ed:7b:13:60:6f:e0:77:57:38:ac:8c:2b:2b:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 18:32:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bbe0fb56b449ff5c52d331a43b93512aeeb0ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:61:aa:b8:17:f9:f5:5e:a9:5a:ca:a7:47:
3f:f1:25:32:81:0d:53:d8:33:86:b0:1b:3f:f4:cd:
eb:fc:63:11:74:c1:c9:4d:c1:d8:86:14:d1:52:4d:
7e:5c:38:ac:bb:39:e4:bb:c9:78:f2:f4:ec:a5:db:
01:22:16:1f:9b:53:33:06:1a:7b:aa:9d:d0:9e:a8:
d1:36:f7:4d:76:9f:31:91:db:c3:49:cb:d0:98:9b:
b4:02:b5:77:55:f8:58:9e:ea:61:9f:d7:38:af:a1:
b1:9b:f4:c1:2e:6a:e3:81:e3:99:d7:52:f4:52:f1:
2b:53:9e:33:eb:e3:89:5d:37:be:c8:f4:05:6f:35:
25:d3:92:d0:83:ba:80:b0:b8:5a:85:51:f8:d9:ac:
74:8f:cf:3b:a8:da:78:5d:48:92:c2:11:ce:b1:fd:
ee:7f:99:7d:ac:84:fd:33:a1:07:f2:e9:d4:83:66:
d2:30:9a:8f:3e:37:f5:08:39:69:53:a2:a7:f2:23:
56:a1:b1:2a:d6:4d:33:e7:c4:7c:11:b2:aa:a4:ff:
a7:77:57:69:ea:2d:37:ca:00:d5:d3:af:09:f1:17:
2b:82:8f:c8:cc:99:f8:72:ef:d3:ae:a8:a1:d7:be:
b3:cc:32:9a:89:61:95:76:d1:da:2d:27:3c:3e:54:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:BE:0F:B5:6B:44:9F:F5:C5:2D:33:1A:43:B9:35:12:AE:EB:0E:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/K74PtWtEn_XFLTMaQ7k1Eq7rDr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.165.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:82:99:90:78:96:19:60:67:51:16:e8:28:c6:42:d6:85:a9:
b2:75:0e:67:ad:a0:37:14:bb:1c:17:d8:01:01:3d:68:d5:7e:
ba:df:1a:4f:63:38:a2:9f:b2:a1:42:9b:38:f1:e0:0a:40:34:
e9:64:c7:b4:89:ff:92:ec:82:8e:11:56:09:8a:59:52:17:f3:
b1:e2:bb:7c:2c:2c:31:51:71:98:1b:a5:e9:6c:4a:e9:95:77:
8e:d3:a2:d9:51:df:09:fe:aa:fe:27:14:57:ca:44:b6:c1:60:
b7:a7:60:34:33:89:52:ff:3b:a2:ca:da:a6:58:c1:62:75:71:
ad:f2:85:9e:80:33:9e:cf:80:cf:e2:7f:97:8f:88:5d:91:41:
2b:e1:79:6b:93:6e:a4:e2:47:78:a3:78:cf:72:00:ea:bc:ba:
58:1a:f1:d5:63:ee:1f:a6:71:3f:74:b1:ca:ba:48:12:f9:3d:
e7:44:ef:e7:c8:97:45:f9:37:e6:c8:08:df:2e:eb:ee:71:ae:
62:78:a6:fc:85:d3:ba:c6:88:9d:ff:7f:a0:a1:cb:73:e2:8e:
0c:0c:46:b9:be:12:fd:45:a7:6d:ba:e9:b3:8d:54:56:46:07:
2c:3b:1d:e7:49:18:70:e4:d3:3a:fd:a4:77:e3:0a:d8:fd:b3:
56:06:cd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:24:52 2026 by rpki-client