Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6DN-_JpGqL7oFPpkZF72RZ8oEw.roa
File: k6DN-_JpGqL7oFPpkZF72RZ8oEw.roa (raw, json)
Hash identifier: 3dialHjzT+spx3yykD1Uw1b8RB96z10CwZSpT96s0zI=
Subject key identifier: 93:A0:CD:FB:F2:69:1A:A2:FB:A0:53:E9:91:91:7B:D9:16:7C:A0:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD748D344B11C508C9354CD815D50A5C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6DN-_JpGqL7oFPpkZF72RZ8oEw.roa
Signing time: Sun 20 Sep 2026 06:15:27 +0000
ROA not before: Sun 20 Sep 2026 06:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135402
IP address blocks: 151.242.86.0/24 maxlen: 24
151.243.4.0/24 maxlen: 24
151.243.206.0/24 maxlen: 24
151.243.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:74:8d:34:4b:11:c5:08:c9:35:4c:d8:15:d5:0a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=93a0cdfbf2691aa2fba053e991917bd9167ca04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:2d:8d:b3:5c:10:28:42:ef:bd:02:1e:22:
55:bc:f9:c5:93:0f:81:f9:86:99:0d:ef:63:6e:fd:
b0:3c:8b:0a:ee:b6:84:83:e9:80:a9:48:6b:f5:04:
3f:cf:76:a5:12:bd:4b:15:f6:1b:c6:9f:37:a7:68:
d6:59:39:e2:62:a9:b2:55:c0:a3:e1:bb:9e:7c:5b:
c3:5d:9a:93:f7:99:6a:ff:47:2c:8c:b0:7d:7f:28:
26:99:4f:d9:a1:4a:36:09:07:6b:25:91:6a:a3:8a:
6f:09:5a:3d:92:5e:e6:14:39:9a:98:1a:38:38:47:
1f:ce:f4:f2:bb:8a:fd:f8:20:98:bf:51:12:1e:9e:
21:38:00:ec:a3:b5:16:64:9c:d4:63:35:0c:5c:d2:
27:3a:f5:26:6d:5a:c0:e3:66:7c:b4:ca:90:fe:98:
95:66:50:6b:34:a9:18:7b:de:95:04:d9:60:73:68:
32:27:29:bb:b0:21:d4:79:17:d0:c8:d6:54:b9:e0:
29:57:2d:83:08:b7:9a:38:0e:51:5a:1f:0f:01:ad:
00:5d:5a:01:f6:34:b4:b8:c6:08:81:ec:a5:f5:55:
8c:5f:5c:06:47:33:8b:34:d8:70:bc:e5:ed:87:99:
9a:c1:f0:4b:00:97:94:3b:41:60:1d:7f:c7:8d:c3:
8f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A0:CD:FB:F2:69:1A:A2:FB:A0:53:E9:91:91:7B:D9:16:7C:A0:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/k6DN-_JpGqL7oFPpkZF72RZ8oEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.86.0/24
151.243.4.0/24
151.243.206.0/24
151.243.221.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:ab:d6:a5:c2:82:1c:27:4d:37:d1:21:59:93:7e:26:ed:a7:
f2:7b:92:a1:61:e8:a7:3a:1e:73:54:af:7b:89:17:b1:32:20:
84:b2:cb:8f:dc:29:ad:a1:11:e9:68:04:f2:3d:a8:89:df:ac:
6c:b9:81:78:fe:ce:4b:4d:ee:46:23:9a:38:69:81:b3:8a:2c:
48:da:ba:6e:ad:a4:5d:28:be:0a:a9:72:3b:0b:02:05:cf:0b:
a3:8b:33:67:86:cf:45:f4:3d:08:f3:26:fb:7f:79:bf:15:73:
ff:67:b6:12:fb:6d:69:54:84:4c:8f:7d:80:08:c0:ca:d6:ed:
cb:01:ad:1c:d0:b4:93:a5:27:37:67:b0:fd:7c:8a:a4:87:25:
2c:ba:bb:e4:b2:73:5b:34:0b:4e:49:d1:26:ec:b8:bb:3a:fb:
a0:1a:b2:e7:06:57:3e:6b:07:1b:88:4a:6b:d7:97:0a:67:b0:
31:1a:35:73:33:bf:18:59:73:7a:27:fe:b0:64:d3:7b:b5:74:
28:b4:d2:52:2f:44:ff:fd:0e:f4:9e:25:8b:d8:88:59:96:83:
84:41:3c:6f:54:a0:c3:5a:57:0d:50:8e:8f:f8:2c:05:e4:91:
40:b0:64:58:1b:17:8d:5b:49:2c:76:77:e5:ca:f9:e0:73:b5:
3a:fb:f1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:12:02 2026 by rpki-client