Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tMyQ2br9E9O0qc9vLEDIQYkgYXI.roa
File: tMyQ2br9E9O0qc9vLEDIQYkgYXI.roa (raw, json)
Hash identifier: ZCplgEFH14RaC41f0N5qwo7IBwFXpNX49ddnIR6fmf0=
Subject key identifier: B4:CC:90:D9:BA:FD:13:D3:B4:A9:CF:6F:2C:40:C8:41:89:20:61:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D82964F07883155220F8CBA18CA67A5B1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tMyQ2br9E9O0qc9vLEDIQYkgYXI.roa
Signing time: Sun 12 Apr 2026 16:46:21 +0000
ROA not before: Sun 12 Apr 2026 16:46:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 151.243.10.0/24 maxlen: 24
151.243.136.0/24 maxlen: 24
151.247.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:82:96:4f:07:88:31:55:22:0f:8c:ba:18:ca:67:a5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 12 16:46:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4cc90d9bafd13d3b4a9cf6f2c40c84189206172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:72:3b:a3:66:83:bb:a3:56:25:20:63:be:3d:
5d:3e:2f:e1:f0:54:94:fd:f6:6a:85:8c:78:ad:18:
51:00:aa:61:f2:78:4a:b5:6f:ee:f1:28:c3:67:c4:
70:02:77:61:d0:3e:4d:ab:52:e1:a7:f3:89:43:33:
b2:bb:fc:fd:a6:39:d7:6d:5f:66:4f:94:1e:2d:5f:
15:5e:36:b5:82:dd:cd:93:3c:d6:fd:48:ee:bf:43:
a0:e9:f9:1d:9a:e1:8a:81:a4:e2:87:93:f5:5f:a5:
d2:4a:55:4e:08:65:32:de:16:e6:35:a9:d1:ac:ac:
75:bc:f2:76:9f:37:4e:02:db:3e:6e:c6:1c:27:3d:
3c:ee:4f:21:af:7c:aa:cf:9d:64:db:6c:89:d6:86:
4c:df:f8:6f:5d:ef:60:47:1f:3c:de:70:71:6f:4e:
82:c4:56:ad:17:26:3a:ac:34:79:74:89:d3:af:eb:
14:1d:9f:09:21:d9:da:c5:ad:bd:f8:00:df:3a:65:
d3:2a:08:d9:41:86:21:16:bb:31:de:cb:01:8b:70:
2b:85:59:5e:38:be:5f:62:22:1e:46:d2:db:07:5f:
2d:76:43:13:92:80:28:65:34:bb:fb:fa:a3:d5:c5:
2e:94:50:c2:ce:bb:15:50:ac:c2:64:40:56:7a:e4:
d1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:CC:90:D9:BA:FD:13:D3:B4:A9:CF:6F:2C:40:C8:41:89:20:61:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tMyQ2br9E9O0qc9vLEDIQYkgYXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.10.0/24
151.243.136.0/24
151.247.36.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bb:68:df:1a:32:b4:c7:8a:8c:1a:5e:de:92:5b:3c:23:0f:
10:41:d8:f7:33:c0:9a:fb:fd:53:56:e4:2b:06:f4:bc:09:62:
87:f9:c6:69:ab:42:34:40:5c:57:fd:71:35:91:10:78:25:72:
5e:23:74:e1:05:4b:1f:7e:d6:05:08:d6:f6:a2:89:ab:8d:69:
f4:a9:3d:d5:b6:a5:3c:cb:60:97:d7:6a:c1:73:b5:f8:3d:64:
e8:6f:bf:47:71:c6:c3:77:ce:fe:1c:b1:cf:45:04:7d:1d:ff:
2f:bc:20:28:8f:e6:b5:83:15:b5:e3:4a:55:18:f1:43:f4:70:
bf:78:8e:9e:69:26:8c:11:5f:8b:c2:01:10:53:e6:0b:fe:cb:
76:f1:3c:bc:4f:39:44:c5:ca:09:76:db:60:9a:41:fe:a5:cc:
8a:73:17:34:36:b5:4d:f8:6f:5a:0b:ad:7f:c1:31:d0:08:a7:
93:51:0e:34:4c:0a:29:98:10:e1:1d:3a:07:36:d7:4d:83:be:
e7:de:6f:11:2f:b5:36:bb:aa:85:45:6b:57:a4:a8:2b:96:0b:
f7:9b:62:69:d7:6e:30:15:b7:7d:10:37:b4:7f:9f:d0:0e:05:
25:20:68:b7:df:04:0b:6d:01:cd:8a:de:a6:1c:d7:86:f5:71:
d2:af:a2:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:56 2026 by rpki-client