Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pjN42e0gsuR0zPeHS4dbpCvWBEc.roa
File: pjN42e0gsuR0zPeHS4dbpCvWBEc.roa (raw, json)
Hash identifier: jsXLac6rHWKIveYVNPiDdP3xKaEamcqdcLhtvXsUFTk=
Subject key identifier: A6:33:78:D9:ED:20:B2:E4:74:CC:F7:87:4B:87:5B:A4:2B:D6:04:47
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB041A61FB5E9AE2B44D218FD47FEFE75
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pjN42e0gsuR0zPeHS4dbpCvWBEc.roa
Signing time: Wed 10 Jun 2026 06:39:12 +0000
ROA not before: Wed 10 Jun 2026 06:39:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 151.245.180.0/24 maxlen: 24
151.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:41:a6:1f:b5:e9:ae:2b:44:d2:18:fd:47:fe:fe:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 06:39:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a63378d9ed20b2e474ccf7874b875ba42bd60447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:62:ee:e1:84:2d:d9:4a:4d:a0:67:76:4f:4c:
bb:d5:26:6a:6c:ef:be:cb:b2:97:67:85:01:ab:6c:
52:83:17:20:a8:4a:9f:da:f9:19:a0:09:9c:f9:be:
20:fe:da:d5:bf:f1:51:f6:59:87:f3:ba:e1:9b:c1:
6c:37:44:d5:ea:c4:8a:1e:7d:30:d2:69:07:4a:8d:
99:61:f3:06:5d:69:6c:22:b6:37:9a:b2:f6:75:9f:
ed:10:76:2e:fb:f5:97:2d:9a:0e:c5:82:32:c6:31:
fa:2d:0b:39:8e:31:09:2f:31:af:12:7e:ab:18:3e:
65:77:c6:2b:61:ce:1c:fb:8a:f4:62:8d:9f:db:48:
08:41:5c:84:b4:3b:56:bd:b8:b7:c6:42:94:b3:97:
10:70:c2:0f:10:01:e3:fe:bf:2f:d8:eb:67:87:78:
fd:1d:47:b7:c9:d3:f6:04:42:39:67:7e:3d:5b:34:
c4:6d:b4:3b:3f:a9:0e:e1:4d:34:ac:2d:cb:2e:25:
70:c3:6a:f3:c8:2c:8b:ac:8a:a7:2a:d4:fa:65:36:
3e:3f:a6:59:93:1e:0b:18:25:1a:17:b1:9c:5f:8f:
55:f1:58:d7:06:cf:e9:79:93:e1:35:8c:bb:9a:42:
82:38:79:bc:81:d7:31:88:2b:06:69:ca:fd:e0:d5:
bd:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:33:78:D9:ED:20:B2:E4:74:CC:F7:87:4B:87:5B:A4:2B:D6:04:47
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pjN42e0gsuR0zPeHS4dbpCvWBEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.180.0/24
151.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
74:bd:f1:d8:22:7b:02:1f:9a:c7:16:e9:54:79:27:12:01:1f:
11:12:41:de:78:c1:8e:02:48:11:b8:e1:19:02:31:47:71:d2:
9c:d2:13:38:ef:ed:f4:15:f8:0e:d7:b7:1e:52:3c:ac:f1:c9:
dc:b7:8b:41:32:9b:ab:78:2e:c1:c7:9d:f3:68:0d:56:51:aa:
53:ef:35:64:ad:25:30:e8:00:71:92:6e:50:4f:d3:02:be:7a:
13:94:20:04:f6:40:63:8d:3c:30:0a:ce:ff:f7:54:46:72:55:
92:b9:ee:02:52:3f:83:7f:ad:b0:9f:39:ca:7a:e9:c7:8b:7d:
6f:99:73:ee:4b:0c:67:16:01:a1:27:33:56:8d:d1:06:34:78:
f8:79:e5:22:4e:68:cf:11:4a:b3:c6:60:49:76:33:d0:54:4c:
08:34:88:d0:66:38:e3:46:03:a2:5d:9d:d2:bd:c9:be:80:7e:
63:fa:df:ee:3d:1c:35:71:af:19:5d:ac:61:d2:21:57:e2:45:
5b:62:26:fd:a5:6a:61:99:3b:e1:7f:92:fe:ce:a2:25:c8:60:
3e:0f:b2:64:fa:7a:6f:5b:b2:1b:13:ca:c6:48:80:af:79:f7:
ea:be:88:a4:8b:8c:76:be:53:4b:15:7d:d1:53:30:95:29:03:
b9:54:6e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:38:33 2026 by rpki-client