Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pm7uD2EQc4ylxPNKV5MF_4LNzHk.roa
File: Pm7uD2EQc4ylxPNKV5MF_4LNzHk.roa (raw, json)
Hash identifier: Q++54MPRtnbnFGr3sKZSX7h2vDY6SCahbkA/q1UHSXI=
Subject key identifier: 3E:6E:EE:0F:61:10:73:8C:A5:C4:F3:4A:57:93:05:FF:82:CD:CC:79
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E93DA84B7CE0CC16427D135D296BAF2EA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pm7uD2EQc4ylxPNKV5MF_4LNzHk.roa
Signing time: Thu 04 Jun 2026 18:17:11 +0000
ROA not before: Thu 04 Jun 2026 18:17:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64457
IP address blocks: 151.242.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:93:da:84:b7:ce:0c:c1:64:27:d1:35:d2:96:ba:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 4 18:17:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3e6eee0f6110738ca5c4f34a579305ff82cdcc79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2f:bb:85:5c:eb:7f:a6:ae:43:91:2d:8b:3d:
ef:53:38:ea:45:32:3f:3d:48:b6:63:cb:2b:32:56:
82:ae:3a:f7:6f:3f:da:73:7a:ff:10:54:e9:2e:c5:
40:d8:60:da:89:46:79:a1:c9:6d:3e:52:e4:99:54:
98:7c:4c:5b:9c:9f:9b:cc:79:d3:4c:c8:10:39:d1:
f7:3b:bc:a3:93:a4:88:07:91:2d:f9:29:42:9f:ac:
b6:00:6b:09:89:f3:6d:12:e9:c9:70:58:e1:1a:54:
5c:c8:3a:9d:33:8e:66:7f:68:2d:4d:e2:be:40:9e:
82:08:86:24:d8:a3:c6:71:e5:4b:dc:3f:e1:ee:b1:
6d:b2:a7:93:4a:91:08:b6:69:59:80:01:8e:f7:ba:
b5:15:ae:2a:a4:9f:56:a5:9b:93:8d:98:f2:1d:10:
94:c2:5b:7f:6b:c2:08:f2:fb:81:7c:e5:23:bd:be:
64:83:f5:7d:ae:bb:b4:41:99:2a:cd:d3:e3:c6:4f:
ab:c2:83:67:7b:22:05:03:2a:0c:ac:50:cb:cb:9f:
53:96:d7:34:9e:81:b1:9f:d8:4c:67:9f:31:43:dc:
72:30:7b:dc:eb:0c:c9:69:72:b8:1a:13:9e:94:42:
19:06:ac:bb:d9:54:fe:bd:1e:8a:cc:81:22:79:db:
6c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6E:EE:0F:61:10:73:8C:A5:C4:F3:4A:57:93:05:FF:82:CD:CC:79
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Pm7uD2EQc4ylxPNKV5MF_4LNzHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.144.0/24
Signature Algorithm: sha256WithRSAEncryption
51:e5:b4:18:64:97:ef:1d:f5:58:fa:83:73:b4:74:51:b3:33:
07:c9:e8:32:06:79:1f:3a:72:3d:0e:e1:d1:80:78:b4:56:d1:
0f:4a:9b:50:be:b5:0d:02:e2:18:00:9a:f6:00:44:d1:0e:98:
77:6f:f1:46:68:62:7d:e6:6b:23:e5:f4:c8:20:bb:6c:29:f4:
05:59:d1:15:28:23:89:35:b6:f9:b2:b5:14:a2:e0:5e:75:7c:
a1:af:6f:03:8c:53:d0:06:f0:57:e2:36:7a:52:3e:eb:49:f8:
d2:a8:52:2d:40:fc:78:cd:8b:29:8a:6f:8f:1a:f5:82:40:32:
6a:32:3b:ee:d2:8a:0f:00:65:48:f0:92:d6:4f:d5:7e:67:67:
78:c3:99:57:d7:d2:03:4f:fc:98:0e:55:5d:fd:0b:8a:a0:70:
51:e1:90:d1:19:9f:d8:dc:2c:10:2b:08:9f:e7:48:20:75:86:
94:ca:28:d3:97:7c:be:43:7e:41:b2:93:0b:21:8d:18:34:03:
49:7c:b7:88:1f:d0:5d:5a:0c:d8:b4:a4:ee:44:d1:9d:eb:f1:
99:26:09:90:29:56:94:c3:46:29:70:a5:d6:32:79:18:86:de:
1d:0f:6b:be:f2:9e:7b:b0:23:bd:33:7e:49:bb:d9:10:1e:c7:
bd:a5:63:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:16:42 2026 by rpki-client