Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjatrOTZILc_D_oZpJzSBCCvNJA.roa
File: qjatrOTZILc_D_oZpJzSBCCvNJA.roa (raw, json)
Hash identifier: kioaOl1eigPmICb5lUYm9BOp+wg07yvAH8d9FQ4UGzs=
Subject key identifier: AA:36:AD:AC:E4:D9:20:B7:3F:0F:FA:19:A4:9C:D2:04:20:AF:34:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E73CEBBE79C7761DF0BF8E0755658FF7E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjatrOTZILc_D_oZpJzSBCCvNJA.roa
Signing time: Fri 29 May 2026 12:56:28 +0000
ROA not before: Fri 29 May 2026 12:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 151.246.159.0/24 maxlen: 24
151.246.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:ce:bb:e7:9c:77:61:df:0b:f8:e0:75:56:58:ff:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 12:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa36adace4d920b73f0ffa19a49cd20420af3490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b0:b0:0e:d8:9c:3d:23:be:f2:eb:eb:90:12:
d8:18:55:9e:90:97:ac:e3:41:d4:2d:ea:20:4f:a3:
73:59:d0:e6:4f:7a:5c:65:91:e1:91:ff:e5:5a:22:
aa:7a:40:26:49:35:3a:25:d2:7d:59:1f:8e:f9:e2:
18:00:01:54:eb:7e:4f:93:bf:8a:07:e1:e4:44:26:
51:dd:29:bb:46:30:8b:dc:73:2b:89:80:88:a2:90:
51:93:e5:76:15:32:c1:65:29:38:a8:3f:d8:d0:0f:
d2:86:75:83:33:d8:16:34:6c:26:18:fb:47:94:69:
6c:e6:49:0e:ab:13:16:8e:e6:bc:a3:c0:02:bb:1f:
5b:c6:25:3c:0b:92:e5:62:e8:23:45:4a:23:09:11:
fb:cb:7c:c6:4b:b3:86:a1:0c:ef:0c:97:b9:9c:e4:
5a:bc:e7:7a:cc:f5:92:f5:65:91:63:13:85:fd:41:
32:83:e9:08:68:42:50:ea:2f:7d:2f:ae:5a:c4:de:
4c:a2:f7:b5:cf:91:55:f6:ce:45:5b:82:d9:22:40:
65:89:3b:c3:c3:ff:75:54:0d:da:2b:f5:fa:0a:cc:
2b:7c:06:e8:5c:cc:8e:39:66:6a:40:7f:84:59:2e:
0b:9a:72:b5:f0:a3:03:22:8c:34:19:c6:98:0c:d8:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:AD:AC:E4:D9:20:B7:3F:0F:FA:19:A4:9C:D2:04:20:AF:34:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qjatrOTZILc_D_oZpJzSBCCvNJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.159.0/24
151.246.241.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:74:01:cf:d4:15:c3:b8:40:15:c8:8f:1f:53:78:86:23:e9:
9b:6f:0e:f4:91:66:f5:7b:61:3c:58:3f:62:25:2e:f4:14:9c:
aa:8c:b4:33:ca:f7:03:18:15:c0:13:1b:dc:ad:95:cf:e4:73:
34:c0:a2:81:95:4e:c5:92:56:31:7a:e8:d9:db:77:8c:ba:b1:
89:ec:36:ee:23:6d:aa:86:c5:bc:e4:c4:ed:51:34:db:04:06:
a2:79:c7:42:f9:88:3d:63:22:d2:3f:b3:17:a8:20:ed:a6:f4:
b6:b5:fe:be:b6:c9:6f:33:86:48:15:19:a9:57:58:e2:6d:3b:
bf:c0:70:77:51:bf:0d:9a:82:7a:c3:8a:fe:df:aa:0f:74:f3:
db:d6:ea:69:5b:54:3e:70:2f:b5:71:64:6f:f9:99:96:dc:c8:
af:74:5d:01:46:d5:0c:c3:2d:d6:cf:06:54:ca:1b:23:e7:7b:
c5:8f:bb:d9:31:53:1d:b9:96:89:20:1e:35:cb:45:0e:16:74:
e3:97:da:c9:6d:32:07:f0:af:70:f7:65:9d:5b:34:28:4c:1b:
9d:a6:b4:dd:73:d4:14:fc:1d:de:f3:56:87:83:14:c3:1b:72:
08:cd:55:74:be:06:ef:c5:67:2c:85:b1:8a:8c:e2:ea:84:00:
6d:cd:e1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:11:18 2026 by rpki-client