Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o1jEOhP_pJ01YydmPXzSPdorxME.roa
File: o1jEOhP_pJ01YydmPXzSPdorxME.roa (raw, json)
Hash identifier: 1ooNFcW42HV/GGFNjMaLkwUVOFWPxgj3faRUcxWEV0k=
Subject key identifier: A3:58:C4:3A:13:FF:A4:9D:35:63:27:66:3D:7C:D2:3D:DA:2B:C4:C1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C03867ED50867FEC30C54B929EB93FF01
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o1jEOhP_pJ01YydmPXzSPdorxME.roa
Signing time: Wed 28 Jan 2026 07:34:31 +0000
ROA not before: Wed 28 Jan 2026 07:34:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 151.243.116.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:03:86:7e:d5:08:67:fe:c3:0c:54:b9:29:eb:93:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 28 07:34:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a358c43a13ffa49d356327663d7cd23dda2bc4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:72:41:d1:ac:f7:00:75:19:3c:2d:a0:91:
10:19:37:cd:60:8a:0a:79:f6:60:ef:84:9f:30:30:
99:8a:94:ea:ab:4c:d4:8b:c9:22:48:54:ae:4f:97:
7d:bb:be:16:33:58:b5:09:2a:28:2c:73:ab:36:ef:
d5:4c:03:ec:8c:9b:0f:ef:49:8c:02:b6:cc:87:63:
cb:0c:d6:e2:6b:15:dc:b8:f5:1d:b1:f4:78:b0:49:
58:9c:59:19:48:2d:74:1b:7a:05:07:f4:5c:ef:16:
66:27:51:70:c9:99:7d:c2:52:58:54:39:fc:5b:83:
d5:fe:d9:3e:31:80:8e:80:81:8e:45:e3:6b:58:22:
40:ec:5c:d7:c1:67:a8:f0:9d:c3:f9:d1:77:da:8d:
cc:d5:e0:2d:7b:5f:42:06:a6:a8:d7:97:11:b2:8f:
bd:30:13:e1:d5:18:48:f5:35:74:eb:e1:4b:b4:02:
9d:ac:8f:43:46:d6:86:11:12:25:02:7d:77:84:5a:
b2:e1:2b:08:bd:4d:10:a8:31:1f:0b:af:e7:28:4e:
e7:f1:96:9b:e8:d9:a3:30:ca:0f:25:6a:88:b9:1b:
ad:2c:31:f4:e7:0b:a1:fa:9a:aa:aa:4b:81:ab:29:
57:d7:4c:63:c8:73:df:44:c8:65:cd:ee:84:9c:83:
a5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:58:C4:3A:13:FF:A4:9D:35:63:27:66:3D:7C:D2:3D:DA:2B:C4:C1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/o1jEOhP_pJ01YydmPXzSPdorxME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.116.0/24
151.245.127.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e2:fc:e5:80:b7:5b:c6:39:b3:06:c0:4b:c9:84:2e:98:e5:
bc:a6:bf:9b:3e:2e:83:37:ef:82:2f:61:ff:04:ad:3b:0e:68:
5e:6c:de:77:44:28:a6:ae:95:b2:fb:ec:ee:fd:13:31:91:32:
01:be:7a:28:cf:6d:0a:c3:65:b0:3d:70:df:f2:f8:93:af:17:
b5:e2:a3:52:9f:a9:a7:20:d8:bc:00:bd:25:83:f5:19:67:01:
f2:e7:b4:33:89:f8:21:b2:1c:54:64:c4:a9:2a:2c:a8:2b:2d:
ed:c9:62:4e:68:6f:ab:b0:6d:3e:d6:83:7b:4f:e4:26:3a:6e:
c6:27:b9:fc:08:7f:b3:ea:be:94:b9:55:3b:33:70:6b:67:80:
7f:6c:65:bd:c6:8b:b2:44:dd:8f:af:ec:c3:c6:e6:48:1a:ea:
6f:34:39:00:0a:e7:39:a7:63:a5:cc:82:29:ef:f1:46:5e:dd:
b1:ad:3f:e5:7a:01:35:2e:1a:50:49:f1:42:02:3f:d5:29:7c:
07:5c:2b:6c:cc:7c:9e:09:41:9a:68:2b:f2:e1:4a:3d:15:41:
0d:bc:7d:61:d3:e0:b8:ba:35:c2:06:37:4d:85:76:83:e3:1e:
16:a7:89:f0:72:19:c4:19:23:f8:f4:86:a3:04:6d:60:8d:c7:
b0:29:f7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:58 2026 by rpki-client