Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/os1i8KxpKcAmyaSGxmm8HmcwhiE.roa
File: os1i8KxpKcAmyaSGxmm8HmcwhiE.roa (raw, json)
Hash identifier: SsS1hkb8irkc1MEz81uYHMxb/b9+v/nEbk325FAcBIE=
Subject key identifier: A2:CD:62:F0:AC:69:29:C0:26:C9:A4:86:C6:69:BC:1E:67:30:86:21
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D773614367A574B3D1E0EB74DD04855D1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/os1i8KxpKcAmyaSGxmm8HmcwhiE.roa
Signing time: Fri 10 Apr 2026 11:45:26 +0000
ROA not before: Fri 10 Apr 2026 11:45:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 151.242.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:77:36:14:36:7a:57:4b:3d:1e:0e:b7:4d:d0:48:55:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 10 11:45:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a2cd62f0ac6929c026c9a486c669bc1e67308621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fb:62:a1:a9:af:25:f2:3f:a5:9e:e9:80:1f:
ac:3b:bc:35:15:10:02:0b:b7:5d:26:70:dd:92:87:
c8:43:30:a6:a6:cc:a6:4f:be:da:eb:56:1a:06:a7:
8f:e9:7f:59:a2:25:b7:7f:f9:ac:b6:3b:8c:16:9b:
13:d1:33:ae:a9:e6:7a:50:ce:95:b5:1b:09:56:50:
78:31:1a:6b:88:2a:1a:d2:4d:5c:7d:99:0a:47:e0:
96:1d:0c:8e:52:82:bc:c7:0c:07:a7:81:1b:8b:42:
54:02:0d:29:60:26:7a:37:1c:f8:b6:61:44:fb:c2:
d4:f2:05:30:61:ee:8c:5a:5e:9f:d6:ba:d4:b5:fc:
00:86:ea:16:16:b7:83:23:0c:62:75:f4:cf:20:e5:
e5:ae:41:55:94:b1:e8:68:52:da:08:af:bc:b8:25:
1c:81:77:03:bf:d1:75:3c:dd:9d:70:66:f1:27:dc:
41:0e:ea:0d:48:75:82:5c:4b:d9:5d:24:51:af:89:
56:a1:10:3d:41:13:f4:f2:f9:ea:33:ad:a0:bb:91:
5d:c1:ad:1d:36:3e:00:de:7a:e9:63:be:67:3b:16:
f0:d9:ca:d0:91:93:01:ed:b6:f3:d2:c2:bc:1f:d1:
99:ab:90:b9:59:c1:b9:16:c2:09:87:75:a8:c4:bb:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:CD:62:F0:AC:69:29:C0:26:C9:A4:86:C6:69:BC:1E:67:30:86:21
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/os1i8KxpKcAmyaSGxmm8HmcwhiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:05:70:42:05:21:0d:24:a3:e7:49:ef:e3:d0:83:79:ed:24:
52:36:5f:b9:54:ed:36:69:ac:ca:0c:08:c5:a9:c0:24:8f:10:
37:26:98:5e:f0:dc:36:52:f3:21:f7:3d:23:b5:b6:c9:8f:55:
ad:6f:23:ed:19:23:56:f2:08:88:a8:8d:4c:f0:8b:37:6a:b8:
c7:ed:4a:36:09:23:6c:4a:63:9e:7e:64:67:f5:23:c4:e9:00:
ad:46:83:86:85:b3:a0:66:8e:a3:2a:1f:3f:f2:67:bf:80:c6:
8f:fc:fa:aa:a4:60:ca:af:ab:b9:d8:cb:b5:0e:aa:f9:f9:13:
60:f9:27:8b:e8:72:f2:d9:7c:8a:ac:6c:64:2a:90:c8:c8:5d:
da:6f:5b:6d:e6:8c:f8:46:44:bd:29:64:12:21:4d:14:8d:f5:
a3:cf:cb:10:a9:61:ac:c8:ef:d7:fb:50:b1:f9:f0:44:61:2d:
8c:a5:be:1a:52:81:89:88:34:1a:b4:65:e0:a6:7e:4d:0e:b1:
d9:be:72:4a:ea:e3:59:c3:d7:7a:3e:09:e8:3d:f9:45:28:04:
ec:9f:8a:4a:42:4a:8a:9d:bb:74:2f:55:38:d0:24:1f:84:12:
d7:94:42:85:58:5d:c5:b5:96:b9:8b:8b:83:9b:6c:2d:29:73:
2a:5e:d5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:07:33 2026 by rpki-client