Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OXBrILPevxyVqb0tkK_K1wcCldE.roa
File: OXBrILPevxyVqb0tkK_K1wcCldE.roa (raw, json)
Hash identifier: sOEmuUUcEFFWqypgmd4B1KbGZJ0CmC1u0G8kYM1YRt4=
Subject key identifier: 39:70:6B:20:B3:DE:BF:1C:95:A9:BD:2D:90:AF:CA:D7:07:02:95:D1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D2F1C06F5A0F28B5B602A98409378E2BD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OXBrILPevxyVqb0tkK_K1wcCldE.roa
Signing time: Fri 27 Mar 2026 11:44:18 +0000
ROA not before: Fri 27 Mar 2026 11:44:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30058
IP address blocks: 151.241.145.0/24 maxlen: 24
151.241.147.0/24 maxlen: 24
151.244.0.0/24 maxlen: 24
151.246.194.0/24 maxlen: 24
151.247.129.0/24 maxlen: 24
151.247.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:1c:06:f5:a0:f2:8b:5b:60:2a:98:40:93:78:e2:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 27 11:44:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=39706b20b3debf1c95a9bd2d90afcad7070295d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:24:28:be:bd:9c:24:ee:0b:3a:12:28:08:af:
c7:38:d9:b0:e7:a8:16:c7:7a:76:bd:01:29:1a:88:
aa:86:f7:8f:df:9f:b5:4a:90:99:e9:d6:ab:2e:46:
cc:af:91:35:ce:4f:37:c9:db:69:2c:98:6a:c3:82:
20:26:31:a1:d6:bf:dd:97:7b:53:ad:9a:f4:90:3c:
cd:bb:09:78:be:80:03:da:a1:ad:a6:40:a9:0c:df:
eb:6d:e3:88:2d:28:c7:10:08:31:32:3f:2a:b1:32:
f1:89:aa:69:77:1e:ce:9d:74:fa:d0:22:fd:0b:3f:
08:cb:38:7c:d9:dc:7e:b4:f3:28:28:1c:0c:f1:1c:
a2:f2:70:05:85:98:d2:9d:5d:f1:1a:41:37:6d:71:
d8:57:32:4d:c3:73:be:15:94:ea:86:12:e9:97:21:
47:86:cc:ae:9f:3e:d0:0b:6b:be:e3:e0:3c:21:c6:
7f:e6:50:1d:f7:d4:bf:a1:be:56:e8:0d:22:c5:ab:
de:c7:aa:54:a8:ce:f1:1f:5c:5f:b7:30:32:77:04:
32:41:a1:04:55:b0:7b:b1:15:1b:27:6a:4c:fb:9e:
25:ab:cf:f8:38:c0:a8:d5:9c:1a:2a:03:22:fe:e1:
19:20:95:77:43:1f:69:41:98:59:f3:d4:93:13:a0:
c5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:70:6B:20:B3:DE:BF:1C:95:A9:BD:2D:90:AF:CA:D7:07:02:95:D1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OXBrILPevxyVqb0tkK_K1wcCldE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.145.0/24
151.241.147.0/24
151.244.0.0/24
151.246.194.0/24
151.247.129.0/24
151.247.243.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:46:29:c9:7a:44:67:8d:e2:02:d4:2a:5e:93:7f:c2:a1:
ca:de:af:65:d1:be:08:8b:6c:e6:1b:8c:bf:ea:d6:84:aa:29:
d8:19:13:72:48:80:40:ac:f7:96:a9:d8:e1:fa:3d:f6:5d:77:
3f:b2:f2:f8:d4:83:f1:8c:aa:45:a4:2c:a1:ff:1e:c3:2d:4b:
db:22:9c:fd:77:9c:4b:b5:a3:c9:55:93:4b:e3:e7:c0:aa:e6:
52:3c:1d:49:94:d7:09:1d:05:b8:ba:07:ae:6b:10:ff:77:bf:
85:f7:4a:22:8e:0c:ee:65:47:04:10:70:65:bd:94:56:86:84:
5d:de:5d:b9:15:7e:1a:81:ee:2b:88:ce:a2:32:18:60:21:91:
a9:21:e0:0f:51:70:60:df:2b:7e:a4:5a:31:e2:d5:dc:80:03:
13:4b:b4:76:2c:ff:60:52:d6:09:c7:fe:91:ea:c0:75:45:e2:
e3:75:2f:9a:a1:b5:2e:97:7d:5d:2d:0b:73:9b:c9:ff:06:71:
87:26:42:c7:b0:cc:dc:1e:9e:0b:a0:f3:c0:66:a6:93:c1:49:
fa:bb:c4:c0:c0:7a:e8:15:c3:1b:ac:5c:7c:05:c8:6f:d1:af:
27:41:9f:3d:48:88:81:25:e1:3b:9a:cf:56:12:e6:3d:34:a7:
d5:98:7f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:02:31 2026 by rpki-client