Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RcOAsW0OVJuIpEPYqgs7PPabLbI.roa
File: RcOAsW0OVJuIpEPYqgs7PPabLbI.roa (raw, json)
Hash identifier: n9gQacXiC5D6kdjaDjBjrkbVM17R/qTKXZJ/O0ztZ68=
Subject key identifier: 45:C3:80:B1:6D:0E:54:9B:88:A4:43:D8:AA:0B:3B:3C:F6:9B:2D:B2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A9062AF22E7574C13D45F59252FBD891
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RcOAsW0OVJuIpEPYqgs7PPabLbI.roa
Signing time: Wed 16 Sep 2026 07:02:28 +0000
ROA not before: Wed 16 Sep 2026 07:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218700
IP address blocks: 151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:06:2a:f2:2e:75:74:c1:3d:45:f5:92:52:fb:d8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45c380b16d0e549b88a443d8aa0b3b3cf69b2db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c8:d5:ea:7f:9a:d8:a6:63:3e:0f:66:93:80:
63:9a:3b:c7:18:f3:e9:e7:0b:bc:7e:92:ec:b7:df:
bd:fc:bf:b6:7a:c5:5b:ab:77:ae:30:1c:b6:a9:e5:
f0:9f:f5:44:e5:44:af:bf:a8:c9:43:ed:fc:f6:3e:
47:da:59:73:04:b9:16:ba:22:15:03:b0:03:47:c0:
c2:47:23:24:df:c2:fa:37:3d:e5:1d:83:cb:04:3b:
68:b2:a8:4c:d4:e5:2a:76:be:61:3d:bb:c5:65:3d:
ab:31:39:31:88:21:c5:5c:3b:3f:f6:8a:e3:29:8f:
9a:70:a4:dd:fd:de:af:03:ff:31:02:82:9a:c1:3c:
b2:24:74:32:90:79:50:c4:f0:b6:59:32:78:f4:3a:
8e:39:97:70:4d:18:6e:b0:6d:07:66:90:5b:1c:cc:
d2:57:d9:75:ba:70:ce:88:24:0e:d7:fd:86:64:84:
35:51:9d:d8:48:25:61:a4:be:5b:b3:af:74:fc:f0:
1e:0a:e8:a8:4b:33:64:d9:fc:eb:ae:8c:86:61:e4:
fb:e2:c4:ff:1e:bb:c1:06:aa:74:48:47:12:03:30:
76:e4:19:31:5c:ea:b1:98:9e:f9:b8:ff:af:5f:1f:
f6:bb:0d:84:c3:15:37:a2:19:c9:bf:02:e4:f8:0f:
25:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C3:80:B1:6D:0E:54:9B:88:A4:43:D8:AA:0B:3B:3C:F6:9B:2D:B2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RcOAsW0OVJuIpEPYqgs7PPabLbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.245.0-151.240.247.255
Signature Algorithm: sha256WithRSAEncryption
56:9a:40:65:90:6e:87:b8:07:c5:c5:c6:37:2f:b7:92:c0:2a:
1e:87:de:b3:0d:d0:7d:7a:93:15:af:46:1f:53:24:8c:a2:39:
7d:3c:a9:0c:5a:ba:57:86:fe:20:34:e7:a3:04:44:72:12:4d:
75:e8:cb:68:26:31:11:ec:fd:52:79:11:e0:42:f6:7c:2b:92:
9f:8e:e1:ba:ac:65:7d:01:5b:23:40:9e:d1:1d:36:b4:86:89:
d7:ef:8e:36:28:34:a9:68:b4:51:c7:5b:45:8e:47:e2:d7:84:
83:1e:2d:1d:de:d6:11:7c:0a:15:e7:1b:de:69:19:ed:48:32:
63:38:2a:be:99:cb:88:c0:57:0c:1b:b8:d6:29:6a:81:4d:90:
dc:64:bc:87:35:b2:36:dc:98:45:05:cd:b5:83:c2:82:95:13:
fb:bc:e1:75:c0:aa:16:0f:79:60:e4:9b:f8:3b:2a:79:76:cb:
12:92:94:c8:b6:f9:78:7c:55:cb:f4:bc:f5:00:70:c1:7f:c6:
93:17:34:d7:7c:60:f0:42:39:f8:1f:62:08:ec:8d:1b:de:4d:
a0:d5:f7:c3:bf:49:d0:15:7f:3f:86:51:95:e0:c2:1c:23:e4:
25:99:54:c4:d2:e6:2c:cb:24:e1:a1:fa:02:d2:76:64:2a:f3:
cf:63:5d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:00:20 2026 by rpki-client