Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OuVBpehDiz11Mm1iojvCvqxXsTE.roa
File: OuVBpehDiz11Mm1iojvCvqxXsTE.roa (raw, json)
Hash identifier: sSTCwbBt8yBVPolU8wqq2Tgi+wg2wKZ2Fqq1YEqyOho=
Subject key identifier: 3A:E5:41:A5:E8:43:8B:3D:75:32:6D:62:A2:3B:C2:BE:AC:57:B1:31
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB7B2DDD95AF5DD6D2BFE0158B339120D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OuVBpehDiz11Mm1iojvCvqxXsTE.roa
Signing time: Thu 11 Jun 2026 17:20:13 +0000
ROA not before: Thu 11 Jun 2026 17:20:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205886
IP address blocks: 151.245.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:b2:dd:d9:5a:f5:dd:6d:2b:fe:01:58:b3:39:12:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 11 17:20:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ae541a5e8438b3d75326d62a23bc2beac57b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:88:56:e6:ba:cb:e8:94:58:36:96:9a:58:
d0:6e:c4:d8:ab:ad:a4:32:35:b7:c3:f2:c8:30:45:
6a:bd:68:12:df:18:0e:06:56:fe:e8:d2:4e:1c:75:
c1:eb:59:40:cc:e6:32:42:f3:ea:f0:9e:9a:c9:6b:
45:18:e9:ee:40:9b:4f:62:e9:9f:a1:45:fd:8c:d4:
b4:e0:91:8a:7b:5e:49:75:54:45:e1:10:96:2c:e3:
0f:ca:ff:24:65:90:85:65:b9:b4:7f:6c:42:0f:9c:
4f:ec:d3:fa:07:28:00:54:ac:3b:66:f7:0e:9b:9e:
43:18:16:2a:76:d2:73:33:c1:26:fc:af:e8:6e:87:
0c:42:2f:1f:8f:ed:b7:1b:25:23:55:be:37:5a:62:
fb:94:00:97:9b:5e:c3:18:89:78:06:c5:eb:89:1f:
8d:c1:73:c3:24:71:c4:1b:01:7c:3b:e5:20:88:61:
0b:aa:29:82:0a:10:5c:22:79:59:f8:9e:b6:d6:a5:
a5:5d:08:27:50:38:50:80:95:de:35:8f:5d:1f:df:
61:28:da:af:e8:a1:6b:76:98:b8:12:4f:f5:c5:9c:
db:df:77:5b:bf:8d:95:c3:91:af:48:9e:09:b7:cd:
c6:4c:7f:d3:be:f9:7b:5d:4e:26:58:47:d8:97:62:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E5:41:A5:E8:43:8B:3D:75:32:6D:62:A2:3B:C2:BE:AC:57:B1:31
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OuVBpehDiz11Mm1iojvCvqxXsTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.0.0/17
Signature Algorithm: sha256WithRSAEncryption
55:b6:a7:ce:14:5c:05:79:94:3e:e5:f2:b8:88:9c:0f:9d:35:
18:60:91:57:9a:01:0c:34:d4:2f:65:29:fe:6d:fe:b6:34:4d:
26:b3:ea:23:c9:7b:3d:33:e9:12:f6:88:c2:29:45:b6:27:95:
66:cc:9e:53:78:d3:69:d9:38:fa:21:a1:5d:78:b8:38:a2:09:
fb:4d:b2:70:5f:5e:17:66:81:c0:dd:7d:7a:20:00:35:67:40:
f5:09:7a:75:59:fd:0e:dd:14:aa:81:5a:60:4a:b4:4f:08:12:
e2:ef:43:6d:42:d5:db:aa:be:a2:ec:17:5d:c3:04:60:f2:ee:
aa:06:f0:0f:f5:b5:a5:5b:4d:57:ed:b9:f9:fb:26:ba:99:b7:
ab:34:6d:ab:33:54:c9:bf:b3:d7:be:f8:bc:28:5f:e9:d2:39:
23:ed:b3:91:1f:ab:e9:ed:92:92:70:32:f9:3b:ca:02:ea:06:
2c:c6:20:4d:57:1e:91:da:3f:2e:71:e7:be:9b:46:e6:8b:08:
48:9f:6c:f5:c0:2d:17:cf:6a:2b:79:14:aa:b0:65:26:10:54:
e1:37:de:11:34:7d:44:ea:3b:81:10:b0:13:b2:27:5b:ad:9b:
a1:35:d1:cf:d3:86:d3:c0:09:26:fe:33:cf:97:c1:87:57:76:
8f:22:e4:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:29:48 2026 by rpki-client