Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qLlBE9CTjR6-45V2WoWRT4uFgeE.roa
File: qLlBE9CTjR6-45V2WoWRT4uFgeE.roa (raw, json)
Hash identifier: d7Yaf5Y7pDwR9BWCIrMABzl1WaKxGEadRaD05GSRTzc=
Subject key identifier: A8:B9:41:13:D0:93:8D:1E:BE:E3:95:76:5A:85:91:4F:8B:85:81:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C32759B7065E42DB989011F6CD524EAB2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qLlBE9CTjR6-45V2WoWRT4uFgeE.roa
Signing time: Fri 06 Feb 2026 10:18:14 +0000
ROA not before: Fri 06 Feb 2026 10:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215672
IP address blocks: 151.242.10.0/24 maxlen: 24
151.243.25.0/24 maxlen: 24
151.247.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:32:75:9b:70:65:e4:2d:b9:89:01:1f:6c:d5:24:ea:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 6 10:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8b94113d0938d1ebee395765a85914f8b8581e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:f0:fa:04:0c:b2:f6:08:43:7b:44:83:76:
38:7d:db:eb:66:f8:44:88:65:ec:36:72:85:50:6a:
43:91:c6:c8:bf:d8:d2:ad:75:52:56:8a:2b:87:af:
7d:7b:ce:13:27:d7:7a:33:9a:8a:b2:5f:aa:25:bb:
ad:ce:16:32:78:fb:0d:ff:06:af:f3:79:fc:e5:fa:
f7:aa:7d:74:21:7c:73:d6:4b:53:93:79:91:db:00:
b8:11:d6:c0:47:80:88:46:99:12:8c:5e:c6:03:9c:
bc:19:f7:1e:3e:b8:35:05:39:c4:df:1a:b7:b4:a4:
33:e9:50:03:8b:b0:be:5e:d6:7c:8c:fd:f1:1b:50:
9b:5a:93:6e:67:2f:44:49:df:c2:10:ec:8d:3a:96:
e1:aa:ca:c3:01:44:dd:3a:64:a0:b0:20:b8:b7:96:
18:03:90:21:df:75:22:32:0e:34:61:7b:ce:d3:c1:
a4:90:ac:28:5c:b6:de:17:98:3d:88:46:15:ce:2d:
df:50:38:ac:9c:e4:30:95:a1:97:0b:c5:00:ab:1f:
90:3a:82:cc:33:94:de:80:f4:45:63:cd:4f:be:84:
4b:c4:fe:52:39:ed:38:d1:32:74:09:a8:20:cb:1f:
d1:51:cc:63:3d:65:d1:fd:1b:4c:13:12:1f:a5:a6:
12:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:41:13:D0:93:8D:1E:BE:E3:95:76:5A:85:91:4F:8B:85:81:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qLlBE9CTjR6-45V2WoWRT4uFgeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.10.0/24
151.243.25.0/24
151.247.241.0/24
Signature Algorithm: sha256WithRSAEncryption
69:d3:84:b1:3c:10:8e:93:d4:af:9d:c5:11:27:7a:6a:39:ef:
7c:79:34:39:1a:f8:7a:9e:e6:1c:b1:29:3e:32:10:5d:53:91:
7b:f6:ce:5e:50:36:64:08:bf:5e:0d:f8:66:81:75:15:aa:09:
91:bc:75:d4:d4:12:15:84:bc:d9:d2:35:aa:09:6e:24:fb:f1:
4a:f2:7b:7a:0f:35:32:43:60:43:03:79:0f:a6:7d:65:4e:33:
28:78:b0:3e:bd:b2:5c:2a:91:cf:0a:0a:8e:ed:ed:0c:da:94:
62:ee:9e:46:f0:6c:7e:a0:32:cd:d3:21:d1:b1:67:db:cc:05:
98:7e:67:3d:94:0d:48:81:00:0d:f8:58:4e:b8:6a:b5:75:5c:
a1:49:64:8d:4c:c6:2e:bf:56:60:a7:cc:d5:73:ee:e4:c4:04:
9c:72:ce:57:b5:15:0d:e0:86:e7:8b:7c:83:a1:6a:73:ed:c9:
1c:a9:85:5d:a4:79:2f:4f:2b:43:57:37:d0:4d:88:33:dc:d5:
0a:50:2d:b7:b8:53:fd:03:c0:45:7f:56:6c:b0:de:49:2d:7d:
8a:b3:f2:ad:8e:1d:d1:3e:eb:6a:0e:10:eb:d7:9a:ec:0d:81:
d0:60:93:5d:8b:8a:37:b3:dc:1a:3d:d8:6e:4e:90:11:74:61:
eb:48:fb:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:15:59 2026 by rpki-client