Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIRgeYUsaMR6kitHaPIjZaZW9WY.roa
File: qIRgeYUsaMR6kitHaPIjZaZW9WY.roa (raw, json)
Hash identifier: YeA7uDx9jlp3W13z4I26mLuNZL81146Ti772rVUmrvY=
Subject key identifier: A8:84:60:79:85:2C:68:C4:7A:92:2B:47:68:F2:23:65:A6:56:F5:66
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D86A4822D1A55EAC78F5E0CD2CE724C8F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIRgeYUsaMR6kitHaPIjZaZW9WY.roa
Signing time: Mon 13 Apr 2026 11:40:21 +0000
ROA not before: Mon 13 Apr 2026 11:40:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:86:a4:82:2d:1a:55:ea:c7:8f:5e:0c:d2:ce:72:4c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 13 11:40:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8846079852c68c47a922b4768f22365a656f566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e2:e2:52:56:67:5f:b9:50:7a:76:df:0c:c4:
b5:d4:d3:e4:d6:ab:6c:7d:94:62:31:51:c9:50:23:
ae:93:6c:ed:06:ca:b8:4f:57:9e:22:6a:f0:c5:85:
6e:1a:bc:46:f9:ec:42:07:a6:90:3f:fb:22:6b:f6:
c2:e7:40:c0:4a:60:48:ee:59:cf:2a:4b:35:31:2f:
ad:d1:65:44:a9:a0:e7:83:15:39:24:d1:f9:24:c3:
93:50:bd:57:28:31:bc:a6:84:f1:db:7b:37:93:6f:
4c:60:18:07:83:cb:30:85:ba:34:08:c1:e0:e1:b4:
ce:12:73:15:2f:a1:ec:d8:11:10:a9:5c:fd:10:d7:
ae:16:35:cf:21:74:8c:a9:39:1d:6a:3f:27:4d:47:
f8:98:f9:65:f1:4b:ec:ae:2a:04:01:4b:09:29:09:
40:7a:d1:7f:8d:0e:d6:d6:0f:43:f6:51:5a:71:b9:
fb:b1:75:ed:39:12:81:43:f4:bc:7e:cb:93:de:fc:
4a:38:38:93:d0:f1:11:ae:bb:5d:1f:98:56:00:08:
3f:67:df:04:2e:e4:d9:ef:bd:dd:b7:bc:ba:60:ef:
15:75:ab:9a:ee:c8:9a:d2:a0:1e:bd:e8:f1:2c:00:
82:52:a7:e4:e1:92:18:f2:79:c7:78:c0:e2:40:d2:
a7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:84:60:79:85:2C:68:C4:7A:92:2B:47:68:F2:23:65:A6:56:F5:66
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qIRgeYUsaMR6kitHaPIjZaZW9WY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:b6:84:ae:ba:7d:05:2a:93:97:43:76:32:a1:4b:3b:03:45:
d7:8b:60:a1:96:d7:3d:24:4e:44:71:43:73:1f:dd:c3:67:83:
07:b0:27:ce:fe:3a:98:4e:3b:ac:d0:dc:a8:44:ee:aa:db:74:
3c:b8:a3:ea:64:e0:13:35:3e:e8:7d:b3:d5:3c:75:cf:64:ee:
96:04:33:64:ce:52:83:a4:30:92:0c:a7:a3:13:50:a9:14:e0:
8b:21:48:f3:21:22:8d:98:0e:cb:d5:b7:bc:d7:5d:ba:74:58:
7c:69:3d:f7:2d:af:2c:6a:fb:75:64:a5:c4:4b:f0:bd:16:f6:
9e:fe:41:ff:67:d0:b5:b2:24:83:cb:78:68:45:d3:53:48:dd:
fd:28:b7:74:c0:1b:ac:9e:97:3a:fb:1a:20:8e:12:ae:04:47:
cc:5b:33:9b:c9:ce:b4:e5:7e:45:70:94:a8:af:51:bd:33:44:
25:3d:fa:32:3c:fd:a6:f6:c6:95:3d:c5:b8:b7:7d:a6:97:54:
2e:19:4a:10:7d:21:d7:11:38:3f:9d:7c:db:2f:b0:3e:fa:a6:
fa:e2:96:ad:68:f6:26:44:46:17:6e:55:b4:88:67:70:c5:db:
77:e7:d6:b4:6e:95:10:a9:94:d6:51:e1:d1:73:36:c9:8e:a1:
5c:4e:c2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:58:35 2026 by rpki-client