Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aMvlbfEaOcNKkfAG1DkxbPMKEEw.roa
File: aMvlbfEaOcNKkfAG1DkxbPMKEEw.roa (raw, json)
Hash identifier: f5OBTJdPB2KIPKpww9S5BpBHnc4P+WILUlOKiRKamLQ=
Subject key identifier: 68:CB:E5:6D:F1:1A:39:C3:4A:91:F0:06:D4:39:31:6C:F3:0A:10:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4598409CB4BD5F389B34D7D2160F5DF7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aMvlbfEaOcNKkfAG1DkxbPMKEEw.roa
Signing time: Wed 20 May 2026 13:34:26 +0000
ROA not before: Wed 20 May 2026 13:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 151.243.49.0/24 maxlen: 24
151.243.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:98:40:9c:b4:bd:5f:38:9b:34:d7:d2:16:0f:5d:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 13:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68cbe56df11a39c34a91f006d439316cf30a104c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:96:7a:e1:aa:1c:03:35:17:d9:72:71:10:
17:4f:46:c1:79:6a:91:ca:ea:a4:5c:79:16:a7:b5:
2c:7b:3a:56:ec:7d:94:d5:25:42:a6:87:79:9a:13:
82:a1:96:b6:32:1a:fa:c4:11:d6:77:dd:5f:af:69:
a6:84:c4:eb:0d:aa:54:2c:6b:0c:3b:81:29:25:76:
c8:0a:6a:2f:7a:47:fc:cb:1c:34:ae:32:1b:00:5f:
90:5c:36:e7:46:53:7b:c6:cc:da:24:91:5e:5d:77:
47:d1:00:c3:cb:0a:38:bf:84:82:ef:da:36:9c:00:
1b:a7:88:c5:39:e8:ea:f9:7d:9a:61:28:48:ac:54:
96:83:ff:55:23:69:6a:51:f5:f5:52:9e:22:41:c3:
f6:8b:49:ad:fa:e2:72:28:8c:71:f9:b9:44:c8:9a:
2e:1d:83:40:ed:26:42:d7:8c:99:67:eb:bc:c6:d2:
63:4f:bf:d5:cb:4d:5a:ba:8d:e3:ab:16:40:87:f5:
1c:8b:d2:3b:1c:2b:c2:cb:2e:1d:f2:82:44:c6:5b:
78:ab:81:e4:68:5e:ba:32:f9:20:e4:05:ee:f1:c1:
86:fe:17:8a:66:c8:c3:53:17:f0:90:ef:12:13:4f:
ed:a3:aa:f2:da:ec:a6:97:ea:6d:68:2e:d2:0d:cc:
11:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:CB:E5:6D:F1:1A:39:C3:4A:91:F0:06:D4:39:31:6C:F3:0A:10:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aMvlbfEaOcNKkfAG1DkxbPMKEEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.49.0/24
151.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:bb:da:8e:1d:dd:ad:63:15:7e:11:ce:68:5b:91:cf:7d:51:
dd:b0:ec:4b:6e:a6:a3:5a:79:e8:b7:12:3a:37:73:f6:5b:53:
dc:bc:ea:98:40:0c:cf:36:83:56:c8:9b:ad:5b:0c:03:9a:04:
c7:3c:07:c2:2b:8b:9e:5a:df:f1:17:e6:45:7e:56:cb:df:dd:
9c:7c:09:64:36:11:be:d3:b1:fd:5c:22:60:64:c6:b5:e1:38:
e6:eb:1d:3f:06:1b:5b:ac:da:bc:09:f8:5e:1b:3a:20:2a:ab:
2b:02:83:55:54:26:1b:8b:90:c4:d6:2f:ff:44:32:2b:c7:4f:
b0:24:b8:05:24:12:ac:6c:76:8b:eb:a0:63:20:4a:9a:ba:f4:
e2:9a:ad:41:0d:18:af:6b:36:55:f3:d6:a6:f7:84:12:f3:f9:
29:bc:79:6d:9b:ad:b8:fb:0c:95:41:bf:f3:16:0f:0c:ef:29:
f9:0d:19:1d:5b:c4:87:f2:9a:6b:03:4c:8b:6b:40:47:e5:e9:
95:47:84:63:ea:1f:53:e6:7d:a0:da:b8:df:fc:f7:17:75:40:
fc:bb:15:f1:7d:73:20:6f:9c:b0:34:73:7d:f9:3a:74:a5:90:
4f:cb:0b:56:ef:69:50:c3:13:27:8d:e0:76:11:f6:6f:e8:2c:
82:0c:3f:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:56 2026 by rpki-client