Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9lvKBLA7cwG47nxldu8thJ0IE.roa
File: OQ9lvKBLA7cwG47nxldu8thJ0IE.roa (raw, json)
Hash identifier: ToHIyiOQHV4LXFrGANm/F90VOd4+OAX70sQwU4EbDwA=
Subject key identifier: 39:0F:65:BC:A0:4B:03:B7:30:1B:8E:E7:C6:57:6E:F2:D8:49:D0:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C3163B62E5656B47F9CF2B14A1F6EC35
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9lvKBLA7cwG47nxldu8thJ0IE.roa
Signing time: Mon 21 Sep 2026 08:30:09 +0000
ROA not before: Mon 21 Sep 2026 08:30:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 22427
IP address blocks: 151.242.154.0/24 maxlen: 24
151.246.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:16:3b:62:e5:65:6b:47:f9:cf:2b:14:a1:f6:ec:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 08:30:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=390f65bca04b03b7301b8ee7c6576ef2d849d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:b0:7a:3a:00:0c:3f:56:8f:4a:fe:bd:42:
c9:45:fa:90:81:90:26:96:8d:54:74:09:e7:fd:78:
26:a5:d3:df:82:d8:48:71:d0:5d:ca:4f:2d:59:9f:
b2:bc:2b:0a:bb:c3:fc:66:ee:f0:6e:9e:03:6b:bd:
10:04:5c:90:b4:8a:9e:cb:f0:19:d1:fb:02:bf:70:
82:ad:2a:6b:cf:9d:3b:45:70:2a:83:66:9c:68:0d:
8d:07:a5:96:3c:73:8a:41:c5:1f:bd:b6:e3:bb:ef:
32:61:39:b4:9a:b3:39:4f:45:1e:f3:a5:7d:b1:6d:
b2:b0:25:20:cf:27:b2:dc:34:79:eb:6b:95:db:98:
84:78:1b:24:1a:d4:f3:78:fe:69:35:c8:ab:9d:57:
bb:a8:54:c1:8d:9a:f9:8a:66:dc:9e:d6:36:e8:6a:
70:df:97:4b:43:6b:cd:67:16:06:9a:83:a7:1e:98:
76:51:30:e8:96:4d:18:7c:48:a6:35:9a:f2:d1:f5:
81:ae:15:d5:d9:40:0e:54:fa:f6:9b:71:1c:6b:fd:
e6:e9:f0:4b:e0:99:a5:3e:05:64:1a:be:80:26:d2:
c6:1a:a6:e8:33:cf:75:28:e2:91:96:08:67:3a:e2:
5a:6f:68:1a:b6:f1:62:9f:51:37:52:8e:91:b1:4d:
cd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:0F:65:BC:A0:4B:03:B7:30:1B:8E:E7:C6:57:6E:F2:D8:49:D0:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OQ9lvKBLA7cwG47nxldu8thJ0IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.154.0/24
151.246.204.0/24
Signature Algorithm: sha256WithRSAEncryption
03:a2:e9:b5:eb:2e:12:c3:61:2f:f3:d1:a3:23:a4:fa:a2:7f:
ed:04:e3:9a:b8:7f:40:9e:a7:04:4f:4f:19:ff:42:c5:ce:77:
3c:51:b3:8d:48:48:0a:c9:14:10:ee:c6:08:6c:fc:1b:b9:23:
6d:78:68:9e:2e:34:32:c0:12:f5:ce:1f:e3:40:ff:dd:f8:95:
5d:f0:1e:24:94:1b:e8:12:30:04:24:ad:ec:74:73:11:16:da:
4d:f4:3d:f2:92:07:3b:ec:7a:55:24:69:c6:a0:8a:17:ca:c0:
c6:2a:e6:7c:b1:97:9c:05:f2:36:e9:94:88:5a:9a:85:ac:59:
45:9f:39:35:ba:d4:e4:64:03:98:76:18:dd:58:5c:40:53:5f:
e0:dd:2c:3a:36:73:68:3f:9a:5c:0d:8c:39:b2:db:83:dd:c5:
7b:02:bc:ec:0d:81:89:93:b2:85:e1:01:8f:ce:65:0b:d4:4f:
77:6f:cb:1f:04:de:86:7c:38:72:b4:81:7e:64:bd:88:30:66:
b3:e7:7d:1b:95:95:0d:4f:d4:3f:0c:48:a0:50:f0:cb:20:d3:
9f:d8:55:52:84:c6:a7:97:68:91:23:92:0e:99:b2:a7:29:81:
b6:0c:85:9a:14:31:fe:1c:e1:ee:4f:26:3a:f0:f9:7b:6b:97:
60:12:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 04:16:09 2026 by rpki-client