Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qFsP2j0bMaJnZUFlMZRyk2p9VOY.roa
File: qFsP2j0bMaJnZUFlMZRyk2p9VOY.roa (raw, json)
Hash identifier: pKfKuw0ScVQtKcQqoMPBSs0JQK3BdYAhJeq7ADA2/I4=
Subject key identifier: A8:5B:0F:DA:3D:1B:31:A2:67:65:41:65:31:94:72:93:6A:7D:54:E6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C3271F5D9586AA3913C04FA5AE6961648
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qFsP2j0bMaJnZUFlMZRyk2p9VOY.roa
Signing time: Fri 06 Feb 2026 10:14:14 +0000
ROA not before: Fri 06 Feb 2026 10:14:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
151.245.108.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:71:f5:d9:58:6a:a3:91:3c:04:fa:5a:e6:96:16:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 6 10:14:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85b0fda3d1b31a267654165319472936a7d54e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:54:d6:b3:7d:6b:00:6c:31:de:e6:20:fe:
fc:e4:b3:7a:0d:91:f3:d2:2f:b9:37:56:8f:0f:66:
59:4d:33:e9:2d:c9:2a:de:e7:6c:9f:b3:61:5a:28:
51:23:b1:65:b1:12:e3:c6:6d:08:64:a1:4a:8b:dd:
aa:a6:a6:23:34:2b:74:8c:d7:b8:a2:79:e0:f4:ed:
9d:e5:7f:0b:e3:d4:e5:98:4c:35:20:80:30:71:b8:
c4:d2:4c:09:79:34:f5:64:30:94:d6:d1:17:e2:78:
3c:d1:72:e6:a8:ce:55:e6:d2:c2:70:5c:4e:e0:8f:
66:b6:4e:24:02:52:f3:d5:55:11:3b:51:9c:96:3c:
20:f5:6b:10:d6:19:1d:e3:ac:cf:5f:3f:66:43:a3:
d0:87:cd:12:5e:98:94:a2:1b:94:5c:8d:18:f9:70:
79:65:27:8b:21:a9:7b:a6:16:a6:4f:3a:85:1d:c3:
9d:00:0d:23:e6:42:47:a3:8f:a3:c7:fa:da:ec:73:
64:fa:fd:27:91:52:a4:26:01:c3:42:86:ee:b6:44:
2c:e7:ec:63:da:b7:3c:86:53:27:47:e7:81:b0:0b:
ed:ce:8e:09:0a:1f:1a:3f:de:1a:6a:09:59:1c:54:
0a:dd:77:4d:4c:7b:9f:89:b5:1a:7a:c8:10:05:65:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5B:0F:DA:3D:1B:31:A2:67:65:41:65:31:94:72:93:6A:7D:54:E6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qFsP2j0bMaJnZUFlMZRyk2p9VOY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.245.108.0/24
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:38:af:7b:80:4c:38:86:12:54:b3:b7:59:5b:0c:61:40:e5:
f4:b4:7f:1b:9a:3e:b1:53:15:8d:f7:bd:7b:f5:67:c8:8f:07:
03:42:ff:5a:0c:e3:45:5a:30:f3:34:ee:e7:28:36:ea:97:bc:
16:86:26:41:f6:01:44:6f:81:1c:86:6f:7d:c6:a5:62:21:f2:
42:58:ef:13:e7:86:1a:3c:30:f3:fa:aa:d4:31:c6:72:06:e9:
18:b7:ed:59:83:3b:d8:49:ad:d8:06:c0:38:80:17:47:f5:09:
c7:c6:11:e2:19:fa:68:dd:d6:19:61:6b:a5:97:ec:0d:3c:0d:
22:98:1e:5c:56:1d:6c:05:8a:06:9c:e5:0c:c1:49:7a:9b:b7:
2f:a2:7a:79:e7:4d:17:c2:8d:cd:d3:54:75:b2:7f:cd:6a:39:
4a:bc:00:0a:56:22:81:d1:28:e7:17:2d:1d:58:70:3a:8e:5e:
7f:8e:b1:4b:0e:3a:52:75:99:fd:bb:db:64:a8:57:fd:25:43:
92:69:69:77:95:a8:74:ac:aa:42:c6:7a:3f:bb:67:d4:93:a4:
ca:e4:44:23:9d:f8:7f:bf:c4:97:dd:74:b2:bc:7c:cf:6d:61:
37:73:21:fd:a5:b9:a4:63:a3:a1:cf:93:0c:b0:ab:e1:b6:24:
63:64:92:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:03 2026 by rpki-client