Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dpMa9Sks_TWhdcHqMJrb6LGLTZ8.roa
File: dpMa9Sks_TWhdcHqMJrb6LGLTZ8.roa (raw, json)
Hash identifier: Phpp23Dwyi14tF5sLSSzCzwJqMoQq6kz5me76W1K/zs=
Subject key identifier: 76:93:1A:F5:29:2C:FD:35:A1:75:C1:EA:30:9A:DB:E8:B1:8B:4D:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C40F3580D33FA0CC97D6C85C5F132BE71
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dpMa9Sks_TWhdcHqMJrb6LGLTZ8.roa
Signing time: Mon 09 Feb 2026 05:50:15 +0000
ROA not before: Mon 09 Feb 2026 05:50:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137235
IP address blocks: 151.243.15.0/24 maxlen: 24
151.243.255.0/24 maxlen: 24
151.244.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:40:f3:58:0d:33:fa:0c:c9:7d:6c:85:c5:f1:32:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 9 05:50:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76931af5292cfd35a175c1ea309adbe8b18b4d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b6:b7:a0:98:db:5f:cd:58:88:c6:84:be:b4:
0a:a2:e6:b5:cd:9f:26:bc:79:c8:6e:77:07:8f:07:
85:2f:30:7b:88:22:82:22:39:b7:f9:a3:59:d3:cd:
26:44:d0:51:67:32:82:b6:6e:f7:6a:86:1b:6b:87:
a0:2e:35:3b:56:b8:07:1e:fb:d2:6a:be:b9:a2:28:
88:9d:25:aa:9e:f4:49:d6:c1:e5:b8:4b:68:77:25:
65:82:8e:b4:cb:d4:1c:c6:80:3a:c1:11:cd:ad:0e:
d7:71:7a:17:ac:1e:2f:4c:c0:26:db:0b:7f:10:ad:
ac:a8:0e:42:c5:79:18:bf:bc:a5:06:ac:50:87:23:
d7:b1:00:33:23:33:e2:b0:d2:65:08:be:a6:83:4a:
5f:1f:ac:d0:c8:b4:9d:49:c3:66:42:f4:de:3c:1f:
c5:09:5d:64:27:7e:61:da:08:ca:15:b8:6d:ef:96:
74:fd:f4:28:d8:8c:2e:4e:9f:ec:c0:d3:16:0e:24:
5e:f4:77:49:7c:1a:30:29:29:a3:88:ee:af:b4:23:
b6:42:20:90:b6:41:a4:a6:50:7f:f0:06:04:10:bd:
37:1b:94:cb:c7:8a:20:31:09:86:64:c1:71:0b:bf:
a8:0c:ba:1c:95:bd:68:7c:41:72:5a:e0:77:51:c5:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:93:1A:F5:29:2C:FD:35:A1:75:C1:EA:30:9A:DB:E8:B1:8B:4D:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dpMa9Sks_TWhdcHqMJrb6LGLTZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.15.0/24
151.243.255.0/24
151.244.247.0/24
Signature Algorithm: sha256WithRSAEncryption
22:3b:38:54:4c:2a:b0:1d:3c:86:b8:7b:b8:ee:a2:a9:7b:0e:
4e:35:77:b0:1d:96:d0:69:15:af:c4:9c:ce:72:a0:df:91:b7:
07:dc:53:3c:1a:5e:ae:49:08:7d:fe:59:fe:67:d9:c5:1d:18:
c6:f8:74:40:6b:20:7b:24:db:a0:a2:06:92:44:77:dd:32:8f:
c3:98:db:1a:1e:5d:9f:16:52:08:74:a3:0c:e1:68:a6:5f:ba:
18:f8:06:25:d3:e9:27:9a:66:6d:0a:36:31:b7:a8:c8:e9:3b:
99:2b:ad:e4:5f:48:bc:42:c2:fb:ba:0a:f5:1b:45:df:00:34:
73:71:36:9a:df:7b:56:ab:cf:58:0c:a1:77:ab:88:e3:46:3e:
be:70:e1:9c:ef:9a:b7:60:ae:cc:96:19:50:6d:37:96:ae:86:
23:7e:2e:04:7d:3b:24:98:ae:53:30:55:78:29:db:16:1d:35:
0f:b1:14:e0:25:4c:e7:1f:69:1e:53:e9:b8:cf:5c:53:a1:44:
ce:0c:df:7f:90:a2:47:ee:69:cd:f7:2f:9d:2b:60:64:2a:58:
fb:2f:5d:41:29:0a:8e:2a:e9:29:66:c5:d9:7c:c8:e3:2b:b1:
f1:f6:f2:db:47:3b:e0:52:a4:91:a8:c9:d6:48:d6:2c:96:bd:
37:54:f2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:38:36 2026 by rpki-client