Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oNYExzxd2ZjSd3rEHRP-cwvC_Kw.roa
File: oNYExzxd2ZjSd3rEHRP-cwvC_Kw.roa (raw, json)
Hash identifier: AQE7ujkc5FpF70e0ij48oLO4tiLpgD8Y5ah312v/0TQ=
Subject key identifier: A0:D6:04:C7:3C:5D:D9:98:D2:77:7A:C4:1D:13:FE:73:0B:C2:FC:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB03FD1BB6B1F8BF8CD061EB873E804E9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oNYExzxd2ZjSd3rEHRP-cwvC_Kw.roa
Signing time: Wed 10 Jun 2026 06:37:12 +0000
ROA not before: Wed 10 Jun 2026 06:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200859
IP address blocks: 151.242.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:3f:d1:bb:6b:1f:8b:f8:cd:06:1e:b8:73:e8:04:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 06:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0d604c73c5dd998d2777ac41d13fe730bc2fcac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:1c:85:e7:2a:5e:3f:6c:80:16:78:c4:8f:
d2:18:05:36:29:e6:12:20:fc:f1:ea:5e:74:ab:b8:
4f:90:ce:c5:9d:e4:c2:5e:66:3c:96:5f:ab:a8:c1:
bc:b3:c1:8a:9c:e8:65:fa:10:7b:cc:be:4f:63:45:
03:ed:10:cc:6b:c2:2f:e7:4f:26:c1:25:0c:58:46:
ad:65:1e:e0:86:4a:3f:e8:fd:f2:ef:d4:6e:29:a5:
59:4f:4b:31:67:df:4d:2a:53:03:21:c7:ad:8c:5a:
85:73:43:6d:3d:03:69:22:14:e4:8e:9a:63:ae:c1:
df:63:31:92:20:6a:65:e5:20:d6:a4:ed:97:af:77:
8b:15:57:f5:b5:6d:89:7b:2e:0d:12:ac:a1:3b:b1:
3c:fe:4c:e8:98:3d:77:cc:4e:9b:0a:22:03:7e:68:
11:69:ef:f0:94:ed:8b:67:91:d8:dc:81:9d:75:e1:
94:0a:29:92:b4:e8:00:c7:0b:44:32:73:f3:77:18:
43:03:e8:62:30:c3:56:cf:a9:12:5d:7f:5f:a0:08:
1d:17:f2:a5:c4:91:aa:13:b1:5e:68:d4:17:75:d1:
10:7a:c5:c7:5a:89:1d:45:f9:d0:60:45:b1:73:31:
37:2e:0a:9a:c1:27:1e:9a:29:0f:70:8e:dd:52:cf:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D6:04:C7:3C:5D:D9:98:D2:77:7A:C4:1D:13:FE:73:0B:C2:FC:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oNYExzxd2ZjSd3rEHRP-cwvC_Kw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.111.0/24
Signature Algorithm: sha256WithRSAEncryption
80:da:bc:2f:73:0e:34:ee:a9:87:13:c8:17:c0:6c:61:0f:8a:
e0:30:7b:6f:bf:38:53:a8:29:6b:1a:ce:52:de:b7:70:4f:35:
20:12:8b:9d:f0:e1:6e:36:c0:d2:ff:69:06:c8:d2:9c:6c:b1:
85:06:52:8f:0a:31:5a:c0:10:b3:7b:86:06:a1:6e:3d:8e:b0:
4d:fd:29:65:cc:89:56:20:ac:ee:31:bc:de:64:d5:bd:64:3d:
bc:85:d6:79:51:6e:73:13:b0:7a:29:6c:47:1b:55:f6:1b:0f:
25:a7:f8:5a:be:01:c1:84:5a:e8:6c:9e:45:01:52:66:09:fc:
dc:c0:fc:4b:e5:5d:f6:d4:dc:b3:a1:09:ce:54:60:58:55:98:
f3:29:ed:1a:c9:69:a7:e7:28:a7:d1:cf:fe:16:79:cd:27:8d:
1a:a7:c8:78:0a:1c:b2:4b:9b:2d:65:10:af:86:e0:0c:4f:ae:
90:f3:b2:70:cb:45:ea:b4:12:3e:35:3d:39:f6:16:3d:51:21:
3b:14:13:a6:99:5f:5f:6f:2e:77:57:99:6e:ab:23:9c:51:8a:
19:d4:e2:1c:8b:c7:20:c5:ae:7a:0f:4b:8f:c7:c4:18:0a:84:
2a:0f:07:69:92:76:65:d5:1e:06:48:f5:42:9a:9b:5d:a0:1f:
bf:a8:20:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6wP9G7ax+L+M0GHrhz6ATpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjEwMDYzNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGQ2MDRjNzNjNWRkOTk4ZDI3NzdhYzQxZDEzZmU3MzBiYzJmY2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD0checqXj9sgBZ4xI/SGAU2KeYS
IPzx6l50q7hPkM7FneTCXmY8ll+rqMG8s8GKnOhl+hB7zL5PY0UD7RDMa8Iv508m
wSUMWEatZR7ghko/6P3y79RuKaVZT0sxZ99NKlMDIcetjFqFc0NtPQNpIhTkjppj
rsHfYzGSIGpl5SDWpO2Xr3eLFVf1tW2Jey4NEqyhO7E8/kzomD13zE6bCiIDfmgR
ae/wlO2LZ5HY3IGddeGUCimStOgAxwtEMnPzdxhDA+hiMMNWz6kSXX9foAgdF/Kl
xJGqE7FeaNQXddEQesXHWokdRfnQYEWxczE3LgqawScemikPcI7dUs+wDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKDWBMc8XdmY0nd6xB0T/nMLwvysMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb05ZRXh6eGQyWmpTZDNyRUhSUC1jd3ZDX0t3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/JvMA0G
CSqGSIb3DQEBCwUAA4IBAQCA2rwvcw407qmHE8gXwGxhD4rgMHtvvzhTqClrGs5S
3rdwTzUgEoud8OFuNsDS/2kGyNKcbLGFBlKPCjFawBCze4YGoW49jrBN/SllzIlW
IKzuMbzeZNW9ZD28hdZ5UW5zE7B6KWxHG1X2Gw8lp/havgHBhFrobJ5FAVJmCfzc
wPxL5V321NyzoQnOVGBYVZjzKe0ayWmn5yin0c/+FnnNJ40ap8h4ChyyS5stZRCv
huAMT66Q87Jwy0XqtBI+NT059hY9USE7FBOmmV9fby53V5luqyOcUYoZ1OIci8cg
xa56D0uPx8QYCoQqDwdpknZl1R4GSPVCmptdoB+/qCBX
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:12 2026 by rpki-client