Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KOiB09Lr1b0Xcds4ZjNfRgTYbdQ.roa
File: KOiB09Lr1b0Xcds4ZjNfRgTYbdQ.roa (raw, json)
Hash identifier: Wv7O/kyq6Ak2omZE2qdu4TqNnO2WummoMrFYEwKCNIQ=
Subject key identifier: 28:E8:81:D3:D2:EB:D5:BD:17:71:DB:38:66:33:5F:46:04:D8:6D:D4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D6175DDBF4C331000FDDDE9EA25F2EB69
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KOiB09Lr1b0Xcds4ZjNfRgTYbdQ.roa
Signing time: Mon 06 Apr 2026 06:23:27 +0000
ROA not before: Mon 06 Apr 2026 06:23:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211693
IP address blocks: 151.242.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:75:dd:bf:4c:33:10:00:fd:dd:e9:ea:25:f2:eb:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 6 06:23:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28e881d3d2ebd5bd1771db3866335f4604d86dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:84:c6:3d:7b:0f:aa:5a:44:cd:28:2d:18:12:
be:ef:e6:cb:bd:ed:7f:1a:be:13:67:91:c1:d3:f4:
e6:1d:80:92:ee:d4:e7:08:57:46:7c:f8:24:d6:53:
68:6d:bc:5e:be:89:a7:6d:9b:b1:ca:44:17:80:96:
e5:12:1e:96:0c:58:ea:d1:ae:d7:ef:11:de:68:97:
d2:44:c9:c0:ab:95:49:d3:cc:2c:46:2b:45:db:23:
63:31:98:ca:e2:c8:ce:b1:a8:72:51:76:f9:00:de:
2c:28:dc:5e:e8:d7:ce:53:2c:16:33:3a:3a:29:25:
6c:55:fe:ed:a1:95:65:21:f3:8d:48:83:08:26:fe:
4e:ba:73:81:75:3a:6a:36:d9:33:bb:37:87:75:70:
c7:bb:1c:ce:a7:46:c7:25:89:9a:4a:26:18:7d:f0:
4c:e9:dc:c6:b1:cc:ca:eb:0a:67:db:02:9d:a6:3e:
ff:36:8b:25:83:6c:d5:4c:96:e9:96:de:30:82:14:
b9:f9:be:4f:25:75:17:5e:03:35:aa:4a:98:2e:b1:
5d:57:2f:3d:c2:ec:89:29:32:78:a2:9e:3c:4c:b9:
97:68:81:b5:ea:37:3c:00:78:92:50:2d:5f:d9:67:
2a:d3:ec:7d:39:93:53:f2:03:92:5b:74:d5:50:ea:
0d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E8:81:D3:D2:EB:D5:BD:17:71:DB:38:66:33:5F:46:04:D8:6D:D4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KOiB09Lr1b0Xcds4ZjNfRgTYbdQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:79:49:ee:31:67:5f:0f:1e:d7:f3:0c:2b:aa:17:b2:2e:29:
66:81:64:fa:cd:27:9c:81:c7:9b:0c:ea:55:d6:81:b7:78:f4:
97:d3:d5:ed:2a:1b:80:f0:ca:d8:1a:60:17:50:3e:15:d1:ac:
a3:06:ce:c4:f7:2f:23:43:ef:33:47:19:8d:b6:c1:2d:d2:ac:
d1:af:3a:cd:8f:12:4e:84:c5:c5:e4:a7:a4:d0:bc:fa:89:42:
56:20:b4:62:80:b0:ad:9c:72:5f:cf:1a:17:34:97:2b:d7:71:
fd:af:9e:8f:42:2e:0a:6b:35:55:56:61:09:bf:d0:58:d1:1f:
a2:91:fb:8f:46:24:ff:cb:2c:48:7f:65:e1:b9:9a:d5:31:6b:
bd:8b:7a:2e:1e:5b:5a:43:32:b7:0c:ff:fe:89:c8:9d:7d:5c:
e4:80:a3:e4:d5:d8:10:bf:77:94:dd:d5:90:a1:82:5e:4f:f2:
7a:9a:4a:71:95:8e:b7:97:c9:b2:43:30:5c:de:4a:82:91:86:
d0:4e:e8:c8:be:5d:98:28:6c:cf:85:31:de:04:87:fb:2f:2e:
ab:b3:e9:56:a4:7a:5b:08:89:79:b3:71:1f:8f:36:7b:32:52:
19:84:b3:03:8e:03:e9:de:f0:4d:81:b3:de:73:2b:77:1d:52:
c4:4e:d4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:22 2026 by rpki-client