Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN2SWuc6u88Dum0j8BicrpzFym8.roa
File: SN2SWuc6u88Dum0j8BicrpzFym8.roa (raw, json)
Hash identifier: i8lQkxFY5AIHtZde+6W5RCvJfZNEwLTBTm+XHkmpuwg=
Subject key identifier: 48:DD:92:5A:E7:3A:BB:CF:03:BA:6D:23:F0:18:9C:AE:9C:C5:CA:6F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A06C9076D2E3369482FF3B558FB732B865
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN2SWuc6u88Dum0j8BicrpzFym8.roa
Signing time: Fri 04 Sep 2026 13:16:41 +0000
ROA not before: Fri 04 Sep 2026 13:16:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7459
IP address blocks: 151.244.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:90:76:d2:e3:36:94:82:ff:3b:55:8f:b7:32:b8:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 4 13:16:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=48dd925ae73abbcf03ba6d23f0189cae9cc5ca6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:97:5f:0e:3e:b2:60:ec:b2:48:86:bb:6c:dd:
59:85:25:4f:c8:a5:2d:ce:a9:16:09:60:5c:1b:7c:
49:5e:9f:32:59:2d:7c:8b:46:2e:cc:6f:24:ec:0f:
68:57:0f:80:5e:c5:c8:f1:f8:bb:0f:16:be:fa:eb:
2b:21:94:12:92:36:18:74:00:af:53:16:44:e0:54:
bb:e3:73:e3:3a:58:7f:3f:a5:ac:1e:52:12:56:4e:
fe:b8:fd:ae:42:6d:43:4d:d4:f9:cb:e2:99:f4:1e:
0b:e3:83:5e:f0:44:c9:14:06:10:20:c9:67:1d:9f:
74:aa:45:59:5d:18:28:45:b0:f3:42:53:04:f0:b1:
54:e2:a3:bf:78:57:3e:d0:43:53:49:08:af:68:26:
52:b3:95:f8:9b:92:b6:a7:f5:23:b3:1b:63:07:84:
3c:bb:06:e0:7a:38:e6:32:52:1e:38:8a:48:6c:f2:
ec:9c:cb:82:63:c0:85:4d:55:90:2f:f6:3c:5a:84:
c9:e3:8b:33:fb:34:12:5e:5f:22:93:7f:e5:03:5d:
af:02:80:3a:57:f7:c8:11:31:7a:2c:ee:f9:b6:2a:
4d:bb:a1:25:00:e3:9e:6a:d2:5d:28:a7:1a:63:16:
d1:18:ec:8b:43:f1:2a:42:76:09:39:98:0c:2a:46:
8e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DD:92:5A:E7:3A:BB:CF:03:BA:6D:23:F0:18:9C:AE:9C:C5:CA:6F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SN2SWuc6u88Dum0j8BicrpzFym8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.61.0/24
Signature Algorithm: sha256WithRSAEncryption
23:3f:32:75:a8:ea:a6:17:cf:7d:fe:ba:3c:08:0e:7c:48:6d:
8e:53:fe:2b:e8:c2:f0:7b:4c:6b:5a:d9:c8:2b:f6:f9:3f:3b:
56:d2:35:94:76:93:29:b4:99:08:21:23:5a:4e:19:11:8b:59:
03:32:13:89:b4:19:02:e4:b9:bb:89:ad:c9:d2:92:dc:16:c2:
a1:d7:45:ad:c0:d5:2c:07:15:27:5f:13:f9:9e:2a:8c:3b:3c:
41:ec:aa:8a:a0:53:e5:e5:ee:3c:10:1b:27:e6:40:f9:8e:e6:
cb:0b:3c:bf:5a:d7:2c:e1:31:08:a6:02:42:a0:a3:c8:15:c6:
0d:27:f2:35:76:55:d1:84:46:24:a2:dd:ba:3a:1b:a1:77:90:
00:cb:4b:bf:dc:8c:8a:bc:be:df:bc:a2:4e:0a:76:8c:a9:6d:
d0:ea:45:27:97:49:60:63:76:ae:ac:8a:bc:4d:db:0d:60:ad:
6d:40:41:7b:41:6e:59:5a:51:23:dd:f4:9d:4c:34:1a:e8:1a:
bd:58:3a:7e:3c:95:ad:86:97:e9:20:4c:8c:26:b5:a1:a1:ca:
9b:fd:f5:b4:25:21:3f:65:72:66:dc:cf:b1:98:13:c8:96:1a:
de:5a:ea:7c:06:42:56:c4:12:04:25:d4:45:24:d8:2a:0b:41:
ec:45:d2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:02:10 2026 by rpki-client