Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfrhwtHdRldrJh9G-N-d0R4Jwj0.roa
File: RfrhwtHdRldrJh9G-N-d0R4Jwj0.roa (raw, json)
Hash identifier: psytQGtLGx9I0E2OwxF5jinuWcnSafzROQzw0sa6UzI=
Subject key identifier: 45:FA:E1:C2:D1:DD:46:57:6B:26:1F:46:F8:DF:9D:D1:1E:09:C2:3D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D921E6EC1868B40E4A13E6EE2A9F25EB7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfrhwtHdRldrJh9G-N-d0R4Jwj0.roa
Signing time: Wed 15 Apr 2026 17:09:21 +0000
ROA not before: Wed 15 Apr 2026 17:09:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 151.246.148.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:92:1e:6e:c1:86:8b:40:e4:a1:3e:6e:e2:a9:f2:5e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 15 17:09:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45fae1c2d1dd46576b261f46f8df9dd11e09c23d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:5d:32:17:cb:3c:13:72:97:43:96:6d:2a:
95:ce:30:42:4e:d8:8b:2a:6b:91:3d:5a:88:46:45:
97:9e:c9:2e:b3:a2:62:f5:fe:7e:2a:4a:8f:c4:d3:
3a:80:41:b3:d2:fe:ae:0a:56:2e:c9:67:04:2a:59:
fe:eb:2a:17:ca:89:9e:6b:34:7a:76:ff:9e:fe:8b:
43:14:8e:66:17:13:07:1f:7c:81:aa:a1:5c:48:c0:
d0:28:26:22:4a:d8:cb:a0:01:d1:81:01:89:60:7a:
e1:22:86:ed:24:71:b4:87:bf:51:03:59:11:14:cd:
a8:17:45:21:50:4b:da:3c:05:40:51:a0:80:ef:2a:
5a:ee:a7:34:9c:cd:da:77:71:45:8a:15:14:1c:1b:
98:9f:8e:56:d6:13:19:fa:e3:9e:7e:24:bc:cc:1e:
cb:ed:e9:b0:1d:92:0b:57:1d:c3:95:6c:f0:48:ee:
11:40:6e:6f:71:ce:a8:63:68:65:a2:9c:02:d3:ff:
07:7f:cc:80:da:ed:39:68:8d:ba:fd:c6:8c:a7:60:
4b:0d:af:ee:5b:7b:30:41:ae:49:ee:b6:48:74:bc:
de:f0:4a:d5:97:b9:c6:e3:4d:04:1e:82:21:37:2a:
d2:cb:95:12:c3:a2:b0:a4:a7:e7:fb:45:f2:73:a7:
35:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FA:E1:C2:D1:DD:46:57:6B:26:1F:46:F8:DF:9D:D1:1E:09:C2:3D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RfrhwtHdRldrJh9G-N-d0R4Jwj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.148.0/24
151.247.200.0/24
Signature Algorithm: sha256WithRSAEncryption
97:79:f4:8e:39:4b:f3:f1:74:16:1b:5e:6a:a5:9b:72:9a:c3:
28:46:69:d4:2c:e6:6d:df:ce:f3:4a:2d:46:4c:94:19:80:b2:
e7:c2:a5:c4:d9:3a:42:a6:75:e8:ec:4a:6b:6b:61:03:8d:79:
fc:83:25:a7:75:4e:b2:ac:5d:14:9e:59:8c:11:88:6a:5e:bc:
7d:ed:d2:2e:87:aa:92:18:ab:48:f7:2a:ad:c6:ad:f6:89:8e:
a1:c3:1e:92:4f:e1:40:f8:31:c3:e7:39:0b:19:b3:a8:b5:18:
13:82:be:b1:56:b5:bb:0c:0a:db:7c:2d:9b:54:46:da:d7:8c:
4c:ed:54:00:29:a0:82:ca:25:65:2b:c6:27:d4:fe:2c:15:c3:
13:93:16:1a:09:e5:89:dd:dc:6c:03:39:16:05:a9:43:b6:b3:
73:e4:6a:43:62:cc:ae:d5:a0:bb:fd:cc:fb:cd:6b:fa:12:66:
dd:fb:b8:7b:84:a6:e3:af:95:08:73:00:86:65:31:7b:08:99:
b6:aa:1d:8e:e1:13:6f:05:4e:73:e6:4a:04:c8:30:26:ab:d9:
d3:db:bd:ac:24:da:e8:1f:df:5c:28:42:03:16:18:77:59:c0:
23:3b:f0:8b:38:bc:89:6a:6a:18:0e:d4:04:64:3e:41:9f:ed:
c5:6f:bf:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:38:05 2026 by rpki-client