Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OgrEqXSkEfVZ40_UWWSaVM6lPwg.roa
File: OgrEqXSkEfVZ40_UWWSaVM6lPwg.roa (raw, json)
Hash identifier: S6YUPEdO+Ju1kwyIRXiNvp2Ia/T0B0buBz14UIQcWn0=
Subject key identifier: 3A:0A:C4:A9:74:A4:11:F5:59:E3:4F:D4:59:64:9A:54:CE:A5:3F:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C038A29AA6DF91190A21829EB556D6A18
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OgrEqXSkEfVZ40_UWWSaVM6lPwg.roa
Signing time: Wed 28 Jan 2026 07:38:32 +0000
ROA not before: Wed 28 Jan 2026 07:38:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.95.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.196.0/22 maxlen: 22
151.245.128.0/24 maxlen: 24
151.245.129.0/24 maxlen: 24
151.245.130.0/24 maxlen: 24
151.245.131.0/24 maxlen: 24
151.247.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:03:8a:29:aa:6d:f9:11:90:a2:18:29:eb:55:6d:6a:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 28 07:38:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3a0ac4a974a411f559e34fd459649a54cea53f08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:18:88:f5:cb:a3:de:e2:4c:c0:78:4a:5a:d4:
4c:fd:5a:ed:69:da:15:f4:e5:57:95:00:47:8c:0b:
92:d1:84:a7:0e:6e:f6:33:f9:30:1c:34:92:40:f0:
b1:e3:6c:17:5c:d8:88:a3:51:d5:d4:76:9c:91:8a:
23:f1:cc:14:54:1e:49:13:6a:a1:bf:ee:43:bc:f4:
d5:7a:7a:50:87:ca:ff:d3:1b:f3:11:b2:47:cd:0a:
5f:de:47:04:af:10:66:e8:d2:d8:6b:87:90:d0:9b:
26:87:11:64:a5:27:eb:a3:d3:f1:06:24:e7:23:c4:
6e:ce:bf:cf:62:3e:37:7b:73:07:bd:eb:5f:06:f1:
24:2f:69:c7:5c:02:47:12:4c:ed:9d:29:74:e8:6c:
cc:cb:ac:fb:ec:31:4b:a6:45:89:c2:5e:44:2f:79:
21:9e:9a:60:35:9e:0f:6c:13:22:ac:3e:83:82:10:
75:6f:f1:03:b5:59:b4:6d:b0:e5:ec:25:54:7c:6e:
49:47:93:ba:86:a4:c9:22:4b:36:a8:33:2e:47:d2:
1c:70:33:bc:8d:58:97:da:6b:00:95:b1:73:e8:88:
fd:d9:e9:22:48:11:ec:1c:7e:90:88:bf:9e:a2:2b:
e2:d6:58:af:32:cd:a7:b9:79:1f:a0:33:6f:ad:b6:
3b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0A:C4:A9:74:A4:11:F5:59:E3:4F:D4:59:64:9A:54:CE:A5:3F:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OgrEqXSkEfVZ40_UWWSaVM6lPwg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.93.0-151.242.95.255
151.242.98.0/24
151.242.100.0/24
151.242.107.0/24
151.242.109.0/24
151.242.113.0/24
151.242.115.0/24
151.242.196.0/22
151.245.128.0/22
151.247.24.0/24
Signature Algorithm: sha256WithRSAEncryption
38:70:a3:b2:a0:7d:f2:d4:f0:2e:bd:ea:65:75:dd:2a:46:7a:
1d:ff:00:12:38:05:b4:1d:66:5d:77:20:c5:79:37:85:c2:cc:
09:52:13:df:51:67:6b:f4:82:c0:7e:2e:b9:22:23:93:c7:e6:
71:fa:b6:4a:d6:2e:6b:c7:3a:05:c1:52:1c:bb:62:fd:f6:01:
3b:ab:fc:68:b5:13:3b:a7:2d:3a:75:3f:81:30:70:df:fc:3c:
26:47:75:aa:e9:27:6a:bc:52:ed:5a:2d:5a:f3:3d:3c:ba:5b:
f3:fc:6e:3f:c2:56:1b:84:51:e5:88:c0:a4:e1:04:99:57:b2:
e7:2f:e9:80:78:d2:5b:62:43:f3:2a:57:8e:68:0a:93:27:0c:
8b:85:bc:97:14:60:80:ca:cf:19:fb:5f:9b:c5:50:1e:37:7e:
08:8b:ef:bf:d2:7d:61:8e:72:27:f8:9c:84:7a:1f:f7:a7:f1:
a0:3a:f1:04:dc:c0:b2:56:1c:a1:35:8a:80:1d:73:13:c4:72:
ee:37:9f:d6:5d:d1:a5:8a:d6:ab:a5:24:2b:99:eb:61:cc:e6:
5c:b1:df:89:aa:66:92:9e:39:a1:50:32:31:fa:d3:87:2a:b2:
83:fe:d2:8e:14:b2:74:e8:6a:52:1a:ba:72:f4:2e:24:4b:b4:
24:f8:35:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:25:02 2026 by rpki-client