Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXn4ZkuBMdb2sNoKEFdOzPOl0kM.roa
File: pXn4ZkuBMdb2sNoKEFdOzPOl0kM.roa (raw, json)
Hash identifier: tU6fkwyAIpmP8BnxEM2nmcJjsw9hzWgrA7XricYQCZ8=
Subject key identifier: A5:79:F8:66:4B:81:31:D6:F6:B0:DA:0A:10:57:4E:CC:F3:A5:D2:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA62A03AF87AADD60072E8A49ED5BD212
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXn4ZkuBMdb2sNoKEFdOzPOl0kM.roa
Signing time: Mon 08 Jun 2026 07:37:11 +0000
ROA not before: Mon 08 Jun 2026 07:37:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199186
IP address blocks: 37.202.209.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.179.0/24 maxlen: 24
151.244.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:2a:03:af:87:aa:dd:60:07:2e:8a:49:ed:5b:d2:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 07:37:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a579f8664b8131d6f6b0da0a10574eccf3a5d243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:be:81:35:39:6b:c8:e6:ef:4b:d9:0b:fe:
d9:22:be:31:34:59:8d:da:fe:eb:17:1e:50:02:cc:
c2:d4:90:fc:e3:13:56:10:26:95:a7:65:77:49:47:
55:07:fa:e9:3e:a8:32:d1:9a:8a:97:86:87:cd:79:
c2:fd:3d:5d:03:d3:8c:76:04:94:e4:3f:28:78:7c:
6d:20:ff:07:68:cf:92:b0:a4:b5:08:7e:e2:ee:6c:
8a:f7:d0:da:f0:08:f3:fe:a8:7f:e4:5a:d9:4b:95:
e0:13:5f:d2:d4:1d:3a:07:92:89:f2:67:20:e9:a8:
02:cb:60:4a:f0:e6:61:c0:e3:d5:6c:26:e7:0f:bf:
c9:38:44:c6:25:ba:87:ac:82:50:13:99:3b:a7:dd:
4d:bf:2f:59:15:a8:3c:e0:f6:08:35:a5:88:cf:06:
7c:04:3b:1b:73:23:0e:1f:73:85:c6:c8:60:b8:c5:
61:be:9a:3b:9f:ca:c5:fc:79:7b:9f:43:f7:98:17:
68:d5:e6:8f:9a:88:17:f8:1d:ca:a5:c0:2e:7b:a3:
a6:e9:33:0e:84:db:2a:53:b0:9b:a1:32:d3:8b:35:
9d:e5:80:2a:e3:2e:8f:f9:33:f3:71:a7:78:94:f5:
3c:3d:09:43:90:f8:12:db:8c:c6:a1:d2:21:ab:98:
d2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:79:F8:66:4B:81:31:D6:F6:B0:DA:0A:10:57:4E:CC:F3:A5:D2:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pXn4ZkuBMdb2sNoKEFdOzPOl0kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0/24
151.242.59.0/24
151.242.179.0/24
151.244.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:08:3e:46:0f:2e:50:a9:a8:24:c5:ef:a2:00:63:e5:6b:44:
89:19:4e:a8:18:74:18:e0:c3:96:d3:67:92:22:b1:00:41:4f:
fc:31:7f:17:c7:10:62:cf:f2:7e:8e:38:f7:72:81:4f:ad:94:
c6:70:8d:b0:8b:4b:3e:5e:2c:5f:e2:2d:be:eb:98:2b:eb:e2:
c0:36:af:18:16:6a:15:92:b9:c4:07:7b:22:7a:ec:f1:cf:ae:
44:75:89:73:84:f2:2f:d4:b1:c4:9e:8d:9d:42:5a:87:88:12:
da:b7:26:8c:63:bf:87:b4:6f:aa:dc:7b:80:e6:4d:54:c7:6c:
38:95:3c:9d:e9:ac:96:9c:68:2d:fe:1c:29:96:ed:a3:4e:de:
d6:0d:76:88:c6:ee:3b:05:18:ea:d5:08:56:da:fe:9d:8e:b7:
3f:77:aa:82:00:c3:0e:f9:b5:09:24:7a:b7:ed:ab:80:0b:7d:
a1:24:7a:64:1d:c8:29:c6:dc:30:6b:a1:36:39:97:a9:48:6b:
79:b7:9e:8e:c0:4b:e9:75:bd:06:37:5e:05:a7:17:3f:c7:77:
03:8b:ef:45:aa:d8:97:15:27:74:7a:37:36:5a:a3:8a:96:ad:
b8:6c:01:61:0c:00:cb:45:f1:04:07:bd:9a:4a:2f:eb:75:dc:
f8:58:fd:a3
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6mKgOvh6rdYAcuikntW9ISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA4MDczNzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTc5Zjg2NjRiODEzMWQ2ZjZiMGRhMGExMDU3NGVjY2YzYTVkMjQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogi+gTU5a8jm70vZC/7ZIr4xNFmN
2v7rFx5QAszC1JD84xNWECaVp2V3SUdVB/rpPqgy0ZqKl4aHzXnC/T1dA9OMdgSU
5D8oeHxtIP8HaM+SsKS1CH7i7myK99Da8Ajz/qh/5FrZS5XgE1/S1B06B5KJ8mcg
6agCy2BK8OZhwOPVbCbnD7/JOETGJbqHrIJQE5k7p91Nvy9ZFag84PYINaWIzwZ8
BDsbcyMOH3OFxshguMVhvpo7n8rF/Hl7n0P3mBdo1eaPmogX+B3KpcAue6Om6TMO
hNsqU7CboTLTizWd5YAq4y6P+TPzcad4lPU8PQlDkPgS24zGodIhq5jSvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKV5+GZLgTHW9rDaChBXTszzpdJDMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvcFhuNFprdUJNZGIyc05vS0VGZE96UE9sMGtNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJcrRAwQA
l/I7AwQAl/KzAwQAl/QOMA0GCSqGSIb3DQEBCwUAA4IBAQBaCD5GDy5Qqagkxe+i
AGPla0SJGU6oGHQY4MOW02eSIrEAQU/8MX8XxxBiz/J+jjj3coFPrZTGcI2wi0s+
Xixf4i2+65gr6+LANq8YFmoVkrnEB3sieuzxz65EdYlzhPIv1LHEno2dQlqHiBLa
tyaMY7+HtG+q3HuA5k1Ux2w4lTyd6ayWnGgt/hwplu2jTt7WDXaIxu47BRjq1QhW
2v6djrc/d6qCAMMO+bUJJHq37auAC32hJHpkHcgpxtwwa6E2OZepSGt5t56OwEvp
db0GN14Fpxc/x3cDi+9FqtiXFSd0ejc2WqOKlq24bAFhDADLRfEEB72aSi/rddz4
WP2j
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:34 2026 by rpki-client