Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QKKZeAkrGsDFwJADMnvEfxwmE7g.roa
File: QKKZeAkrGsDFwJADMnvEfxwmE7g.roa (raw, json)
Hash identifier: F9NFoj05TTYCuI/CWjPUVAjdwnER1msg6QwcJD0I0f0=
Subject key identifier: 40:A2:99:78:09:2B:1A:C0:C5:C0:90:03:32:7B:C4:7F:1C:26:13:B8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E2B60B3CE52775E0F30E5CC43F5C2AC65
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QKKZeAkrGsDFwJADMnvEfxwmE7g.roa
Signing time: Fri 15 May 2026 11:23:38 +0000
ROA not before: Fri 15 May 2026 11:23:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:60:b3:ce:52:77:5e:0f:30:e5:cc:43:f5:c2:ac:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 15 11:23:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a29978092b1ac0c5c09003327bc47f1c2613b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f5:fc:fb:3b:47:be:ce:a1:fe:75:2b:2d:21:
10:cf:59:23:0f:2a:69:dc:eb:c7:14:fe:ca:59:90:
0d:e7:f3:c8:84:80:a9:a9:9a:4d:f2:ca:5a:dc:b5:
46:72:94:b8:14:73:cf:af:d6:cf:f5:57:1c:af:9f:
d0:2f:b1:a4:b6:71:51:59:32:52:4b:43:c9:58:79:
1a:62:1a:4d:49:62:41:b4:c5:4d:c1:ae:22:90:d6:
c2:ec:2f:37:08:7b:c8:3c:5a:96:43:d6:bf:3f:9d:
ad:3f:d6:89:62:89:8f:ba:d7:ea:00:d2:e7:dd:6d:
c3:88:10:d8:a8:3c:af:b9:78:97:fe:15:8c:10:fe:
ae:0f:d3:5a:1d:15:09:5a:0a:09:6a:ed:b0:4b:54:
10:6d:b6:4e:45:f3:84:aa:13:51:10:be:4e:e5:6d:
5a:b9:90:86:30:a1:3d:9e:f0:5e:23:74:c1:99:54:
5e:15:81:e1:29:e6:26:8c:ce:92:ed:54:cc:9b:b9:
88:d5:ca:a6:00:87:3f:96:50:16:ec:b7:76:b5:28:
22:58:d0:91:93:59:2b:97:ee:cf:a2:68:44:3b:6d:
7e:56:52:d7:29:0f:eb:60:06:35:b9:08:a2:1e:57:
a0:76:38:26:e0:99:b3:f8:cf:5a:14:3a:14:a1:71:
c5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A2:99:78:09:2B:1A:C0:C5:C0:90:03:32:7B:C4:7F:1C:26:13:B8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QKKZeAkrGsDFwJADMnvEfxwmE7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:76:99:30:a1:46:18:73:a6:02:7b:70:c8:2d:92:16:63:d8:
4e:43:1e:fd:06:38:17:9e:5d:e6:e9:8c:7a:79:f9:a3:8c:2b:
c1:03:1e:31:65:3c:df:79:ae:c8:36:ad:9c:e2:fd:cf:01:7a:
71:5e:ee:00:dc:51:81:9a:df:b8:36:54:2d:2f:c8:0f:e9:13:
c0:44:5d:3a:62:ed:aa:08:0d:50:16:cc:17:b8:08:4b:5b:1e:
f9:88:75:21:59:8a:34:8f:d0:f2:37:e0:0f:d9:f1:d9:d6:e9:
f8:f8:aa:ed:01:ac:ad:e2:8e:c2:05:c0:b0:47:d9:6b:75:53:
4c:c4:55:69:9b:35:54:9a:c8:0a:b2:70:d0:b1:0a:64:1c:30:
60:5e:5c:75:cb:dc:3d:62:b3:ce:57:4a:fc:2a:40:25:0f:26:
51:9e:53:15:6e:f8:01:6f:07:62:79:69:80:54:fd:c6:c2:22:
4f:f0:3b:fc:2b:98:76:95:ce:85:75:07:28:22:28:db:41:0c:
68:57:9e:46:8f:98:49:08:b0:6e:73:f5:68:d8:70:b7:e9:10:
a5:4a:9c:63:a9:f4:24:71:37:df:b1:7f:e0:08:51:f1:f5:79:
8f:33:c1:a2:89:5d:29:de:dc:ee:38:14:ca:e2:c2:b4:af:5a:
91:b0:5c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:00:38 2026 by rpki-client