Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_KDEJDq56ui2AmDcZ6xFvRUmmyM.roa
File: _KDEJDq56ui2AmDcZ6xFvRUmmyM.roa (raw, json)
Hash identifier: 8JG3FeXwmzDuyZVHI6Plxy5HSKQSV9SheFhUxyoDW/c=
Subject key identifier: FC:A0:C4:24:3A:B9:EA:E8:B6:02:60:DC:67:AC:45:BD:15:26:9B:23
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD6B1DA7D3AB3D6681B937F08F9C37D3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_KDEJDq56ui2AmDcZ6xFvRUmmyM.roa
Signing time: Sun 20 Sep 2026 06:05:08 +0000
ROA not before: Sun 20 Sep 2026 06:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.245.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:6b:1d:a7:d3:ab:3d:66:81:b9:37:f0:8f:9c:37:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fca0c4243ab9eae8b60260dc67ac45bd15269b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:be:99:66:5b:25:f6:60:77:d8:66:f8:d3:ce:
67:28:23:7c:db:f5:ea:be:66:11:33:6d:ad:ee:c6:
a7:fa:a4:da:47:19:54:6e:22:7b:8c:90:a6:7f:85:
d7:36:3f:07:c7:e2:bf:cd:df:41:2c:69:62:c8:8d:
80:8d:cb:1c:e1:aa:78:35:37:cb:d2:ca:9e:a0:0d:
6a:36:db:e7:c8:5b:94:52:e0:46:b2:bf:08:83:c7:
e8:ac:49:b4:49:68:5c:e7:ca:6e:d0:52:0a:e0:04:
a4:e9:db:34:17:1f:26:44:27:c7:0f:8a:5b:d2:f0:
a5:70:f2:24:94:9a:30:9d:d7:89:ac:cc:6c:73:d7:
c4:5b:53:3c:bf:d3:64:e0:20:d1:fa:7e:61:f2:4c:
95:a2:b1:4c:9e:d4:b1:6a:d1:31:fd:71:a8:94:33:
55:ec:3c:f9:c7:02:1e:ec:c6:50:fd:6e:ff:da:0a:
e3:eb:d2:4e:11:26:ea:6f:87:0e:54:7c:1e:9a:dd:
8e:b6:c7:95:ca:9d:53:e0:bb:1d:18:fc:af:f1:bc:
3f:b3:49:0c:ac:64:f9:0f:56:03:5d:7d:33:54:7f:
e4:76:f5:a2:fe:1d:20:39:b3:44:a9:64:7f:be:ed:
26:d2:26:74:ff:69:e4:58:d8:47:b9:16:e8:39:d6:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A0:C4:24:3A:B9:EA:E8:B6:02:60:DC:67:AC:45:BD:15:26:9B:23
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_KDEJDq56ui2AmDcZ6xFvRUmmyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.245.90.0/24
Signature Algorithm: sha256WithRSAEncryption
43:8e:c2:ae:7d:71:e1:9d:85:f7:df:6e:26:49:87:22:54:36:
21:9b:aa:7f:85:65:14:61:96:08:52:c6:32:79:ea:e6:54:0f:
e6:79:59:f6:bd:84:c7:28:3b:df:4b:20:8d:8f:d8:e0:dd:d3:
83:a4:ec:da:33:c6:d0:99:e2:44:6b:da:d4:3b:e3:a4:d3:39:
31:a7:5e:42:05:b7:fe:3d:b4:03:ed:a8:d8:ae:19:08:5d:6c:
f7:8d:61:ae:c7:7a:14:e9:aa:d5:33:61:3a:91:02:44:ca:27:
f1:81:10:43:08:f2:ff:e4:58:33:d1:ad:7d:90:46:d7:25:2a:
31:14:00:da:d9:90:0c:1b:27:a9:aa:ee:93:56:72:04:51:ad:
fa:56:e2:56:a4:b7:fd:4e:c0:e4:4a:83:8d:ae:22:4e:ea:b2:
1e:a2:b1:32:91:ba:48:15:02:ed:c6:40:a1:b3:6b:17:f7:fa:
d3:50:71:88:59:c7:2d:d9:66:e3:a3:55:d6:36:40:0c:20:fb:
5d:44:f8:d3:56:a4:38:1e:bc:06:4e:47:db:62:a5:14:67:44:
d8:56:97:78:aa:00:b3:34:fb:70:93:f1:82:72:74:f0:48:59:
cd:9f:23:f9:73:aa:24:c5:7a:68:bb:70:84:9a:f5:df:c3:9d:
3f:af:48:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:49 2026 by rpki-client