Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oJ3mQm80P9bWrWAA5i8CGkTSVXs.roa
File: oJ3mQm80P9bWrWAA5i8CGkTSVXs.roa (raw, json)
Hash identifier: DUlTrhJ4X2oj2rzlTTcrWwzqUlsnbJnZV8x5RH+XISI=
Subject key identifier: A0:9D:E6:42:6F:34:3F:D6:D6:AD:60:00:E6:2F:02:1A:44:D2:55:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C5B22D10086E4F4E38C35F9E32EAC481F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oJ3mQm80P9bWrWAA5i8CGkTSVXs.roa
Signing time: Sat 14 Feb 2026 07:52:14 +0000
ROA not before: Sat 14 Feb 2026 07:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 151.247.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5b:22:d1:00:86:e4:f4:e3:8c:35:f9:e3:2e:ac:48:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 14 07:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a09de6426f343fd6d6ad6000e62f021a44d2557b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:de:8d:33:cf:3b:a2:cf:6f:13:68:dc:1b:70:
47:a1:85:75:1c:10:3b:4b:88:61:85:0c:49:cb:3d:
0d:34:a2:7e:98:49:56:e9:7f:71:b7:8c:19:9b:63:
f2:07:b3:f9:45:34:57:0a:0b:3a:93:6e:b7:f1:bb:
8c:0d:1c:92:2c:67:c9:56:63:2f:fb:9f:c9:1e:19:
73:db:23:b1:b9:db:c4:63:ac:76:08:71:9b:ab:93:
af:b8:47:bc:97:d7:36:69:1f:20:81:4d:67:dc:0e:
21:84:89:5a:5a:c4:0b:9e:c4:fa:48:62:b6:21:65:
cc:24:bc:6d:a9:b7:de:30:ba:c0:9a:a5:18:5e:27:
45:6b:45:74:5b:7b:eb:c1:37:b8:e6:30:99:8c:22:
9e:7b:27:36:7b:41:be:16:f2:3a:41:e2:ba:3e:fb:
2e:60:63:80:67:0e:4a:df:85:12:1a:34:38:a7:d3:
7a:38:03:2d:0e:fc:57:3c:2f:c3:da:d2:43:9d:ce:
78:70:28:ec:e5:7d:1a:bb:37:68:13:c1:2d:0e:ca:
4d:2a:1c:ca:50:e0:05:b8:fe:f9:76:e5:ba:5b:73:
9b:8d:a2:f8:ef:65:d4:8c:5d:f3:aa:89:57:83:5b:
f2:7e:89:e4:9f:36:e5:bd:94:f5:70:29:69:c9:15:
d7:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:9D:E6:42:6F:34:3F:D6:D6:AD:60:00:E6:2F:02:1A:44:D2:55:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oJ3mQm80P9bWrWAA5i8CGkTSVXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.234.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:8c:b6:c5:3c:d4:bc:42:9d:32:ac:3c:c6:5a:5e:df:42:eb:
2b:54:b0:47:0a:5d:5c:04:ab:3e:86:84:84:43:6f:7b:88:aa:
2b:c3:24:85:ab:ce:47:5f:34:88:ac:64:cc:30:91:b1:51:6d:
69:c5:2e:e5:9e:c3:0a:d6:71:59:54:a2:a9:55:d1:50:5d:58:
84:73:f4:b1:ab:26:37:69:e4:42:d5:d8:bf:9a:68:32:1b:67:
e9:c1:dc:57:0e:16:88:5c:4e:90:a5:31:d4:ad:91:e4:09:ba:
b9:e0:16:b8:c7:70:23:97:a2:a6:6c:dd:49:7b:3c:b5:a0:3f:
bf:d5:41:9b:80:c5:b7:fe:22:c1:69:27:f6:f0:c4:e4:2b:12:
20:ac:5b:4d:77:a0:d7:83:1c:bd:57:90:af:aa:5c:2e:b0:67:
50:45:0d:86:6b:83:7d:48:8d:15:cc:d7:c9:46:22:d5:58:ec:
23:ba:a4:ad:70:df:bf:a4:f6:af:06:45:01:52:7e:38:49:fc:
bf:7b:ee:a5:a3:80:7b:5f:0b:fa:e6:36:6f:13:bb:1b:af:4d:
77:d5:fa:4f:d0:d8:9d:07:ca:c6:70:56:04:fe:18:68:68:3e:
4c:f8:8c:de:49:a0:2c:21:91:6f:7f:33:a1:4c:73:19:93:db:
d9:04:07:b5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxbItEAhuT044w1+eMurEgfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjE0MDc1MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDlkZTY0MjZmMzQzZmQ2ZDZhZDYwMDBlNjJmMDIxYTQ0ZDI1NTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN6NM887os9vE2jcG3BHoYV1HBA7
S4hhhQxJyz0NNKJ+mElW6X9xt4wZm2PyB7P5RTRXCgs6k2638buMDRySLGfJVmMv
+5/JHhlz2yOxudvEY6x2CHGbq5OvuEe8l9c2aR8ggU1n3A4hhIlaWsQLnsT6SGK2
IWXMJLxtqbfeMLrAmqUYXidFa0V0W3vrwTe45jCZjCKeeyc2e0G+FvI6QeK6Pvsu
YGOAZw5K34USGjQ4p9N6OAMtDvxXPC/D2tJDnc54cCjs5X0auzdoE8EtDspNKhzK
UOAFuP75duW6W3ObjaL472XUjF3zqolXg1vyfonknzblvZT1cClpyRXXXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKCd5kJvND/W1q1gAOYvAhpE0lV7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb0ozbVFtODBQOWJXcldBQTVpOENHa1RTVlhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fqMA0G
CSqGSIb3DQEBCwUAA4IBAQCajLbFPNS8Qp0yrDzGWl7fQusrVLBHCl1cBKs+hoSE
Q297iKorwySFq85HXzSIrGTMMJGxUW1pxS7lnsMK1nFZVKKpVdFQXViEc/SxqyY3
aeRC1di/mmgyG2fpwdxXDhaIXE6QpTHUrZHkCbq54Ba4x3Ajl6KmbN1Jezy1oD+/
1UGbgMW3/iLBaSf28MTkKxIgrFtNd6DXgxy9V5CvqlwusGdQRQ2Ga4N9SI0VzNfJ
RiLVWOwjuqStcN+/pPavBkUBUn44Sfy/e+6lo4B7Xwv65jZvE7sbr0131fpP0Nid
B8rGcFYE/hhoaD5M+IzeSaAsIZFvfzOhTHMZk9vZBAe1
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:54:52 2026 by rpki-client