Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gUkYC3AZIc_QHwA5_68aXbmWv6I.roa
File: gUkYC3AZIc_QHwA5_68aXbmWv6I.roa (raw, json)
Hash identifier: jASiSc0DgYMlk0976cK7RzQf2ViNsUnOn+YlWX9OwUo=
Subject key identifier: 81:49:18:0B:70:19:21:CF:D0:1F:00:39:FF:AF:1A:5D:B9:96:BF:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07A896EF8ED0F0D1A51ECB8F2D3E9A98C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gUkYC3AZIc_QHwA5_68aXbmWv6I.roa
Signing time: Mon 07 Sep 2026 06:23:42 +0000
ROA not before: Mon 07 Sep 2026 06:23:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7346
IP address blocks: 151.246.183.0/24 maxlen: 24
151.247.113.0/24 maxlen: 24
151.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:89:6e:f8:ed:0f:0d:1a:51:ec:b8:f2:d3:e9:a9:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 7 06:23:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8149180b701921cfd01f0039ffaf1a5db996bfa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:84:9a:55:d0:2f:28:80:11:86:f6:9f:36:
8e:f7:fa:c3:0f:a0:20:57:42:3e:52:11:b8:b3:f3:
aa:d4:90:f7:a2:e3:72:81:67:6b:67:da:9e:94:14:
d6:84:34:dd:8a:21:36:8a:97:34:a4:d1:89:22:e5:
29:3e:a5:9d:d0:c4:73:4a:03:88:d2:08:4b:56:2a:
df:a8:76:71:e8:7a:fb:82:37:cb:13:76:47:68:e1:
ff:26:b1:4e:3c:6c:13:cf:07:f2:4b:ca:29:20:29:
0e:d3:0d:4e:fb:e0:6f:22:30:5a:85:56:58:5d:b0:
48:27:11:0d:9b:82:6b:6a:36:33:c8:7d:43:09:ac:
e7:ef:be:3b:e2:17:9b:dd:1f:9c:00:ef:97:a8:c2:
73:31:c1:ad:9e:90:5a:07:cc:71:93:04:41:4f:52:
21:32:26:9e:1b:e0:1b:38:80:3d:68:eb:0e:a4:95:
bb:02:07:d9:f0:52:66:1e:09:51:ff:1c:02:97:fb:
5f:9c:42:a0:60:54:e7:25:79:2e:9a:3f:e3:6f:ff:
7b:3c:ef:52:cc:52:93:d0:fc:15:e4:8d:44:08:80:
5f:7c:5a:12:da:58:41:5a:e5:7c:6b:9e:b3:51:d3:
9a:f4:88:3c:6a:29:41:1b:d5:af:81:af:f0:63:bd:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:49:18:0B:70:19:21:CF:D0:1F:00:39:FF:AF:1A:5D:B9:96:BF:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gUkYC3AZIc_QHwA5_68aXbmWv6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.183.0/24
151.247.113.0-151.247.114.255
Signature Algorithm: sha256WithRSAEncryption
1c:e4:de:8c:ec:a1:39:cf:6f:66:bd:14:b7:cd:a8:c5:b6:bf:
35:84:7d:7c:49:c0:16:89:c4:04:03:a8:73:5f:f3:2d:d5:3e:
dc:8b:1c:ba:e9:bb:56:e1:1d:2d:fa:ab:bc:5f:8e:e5:c3:02:
c4:fd:ef:8c:57:60:a1:c0:a7:94:83:a0:49:4d:f0:ca:86:b2:
f3:98:ec:e8:b5:52:8d:63:d5:73:08:c7:01:13:b6:53:4e:2d:
43:d6:b6:23:b7:0f:40:50:41:82:11:5a:ed:30:33:75:e5:60:
54:7e:01:0d:13:d1:25:36:0a:7e:8d:e2:8e:e9:35:8e:e9:52:
01:27:e8:b2:18:1e:d3:af:3d:0f:ae:a0:27:bc:2a:04:70:62:
11:d6:ff:f6:33:9a:21:23:37:63:87:20:8b:d1:e8:00:d8:70:
e8:65:f4:4b:37:5c:4f:a5:3f:2f:e9:f2:b5:b6:bb:1b:ee:91:
4e:39:25:fe:3e:91:c8:4e:9c:79:27:c7:f7:e0:ea:72:7d:e1:
7f:9e:db:d7:45:38:49:2f:ea:c1:04:e0:32:27:8d:5f:8b:8f:
46:5b:58:4e:b3:0a:e8:e9:29:24:27:dc:e6:54:fc:c6:ab:54:
73:40:08:45:6d:74:e2:6e:98:87:bf:47:fd:47:9b:cb:ab:d9:
43:9f:85:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:11:06 2026 by rpki-client