Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wDqQmBiQAYhP_dTCMlgHgjOqVJ8.roa
File: wDqQmBiQAYhP_dTCMlgHgjOqVJ8.roa (raw, json)
Hash identifier: ZOl9Gfnwavqv1YULkH6AJ/iduDl3judX2PN1H0ro5ik=
Subject key identifier: C0:3A:90:98:18:90:01:88:4F:FD:D4:C2:32:58:07:82:33:AA:54:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E64A796462EAF23F01CCC5C06EF68ABA2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wDqQmBiQAYhP_dTCMlgHgjOqVJ8.roa
Signing time: Tue 26 May 2026 14:19:25 +0000
ROA not before: Tue 26 May 2026 14:19:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 151.245.214.0/23 maxlen: 23
151.246.32.0/21 maxlen: 24
151.247.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:a7:96:46:2e:af:23:f0:1c:cc:5c:06:ef:68:ab:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 26 14:19:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c03a9098189001884ffdd4c23258078233aa549f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:88:d4:2e:c3:49:35:3a:07:1c:c0:b7:85:7f:
e3:76:45:60:cf:e9:24:12:78:8e:cf:b1:5f:79:dd:
b4:5b:d1:01:52:f8:2e:41:32:09:6c:0d:0b:e6:08:
1c:a8:de:a9:fc:15:5f:45:af:42:11:1d:fd:f2:a5:
ff:32:47:d9:53:8d:10:9e:ea:a9:6b:a1:d1:3c:80:
79:e1:ec:2d:5f:63:89:65:99:b0:53:3a:6d:7e:54:
20:a3:76:d7:c4:1c:57:13:a6:88:c8:79:ff:bf:01:
8a:00:db:a9:3c:e4:82:0d:ea:ed:d4:e4:3e:5d:b6:
9b:d3:71:e1:62:59:66:91:37:23:8a:41:d5:dc:05:
41:70:f2:c0:fb:82:bf:0b:95:65:cc:33:8f:5e:64:
e1:ed:80:14:ac:2a:27:af:1e:05:ff:51:df:e2:b8:
7d:a6:9d:9b:28:4b:b0:30:3b:0b:8b:ef:c0:f0:b2:
c3:92:3b:91:8b:0a:d8:11:06:ee:e0:5a:22:b2:a7:
e1:75:e5:74:da:33:02:f9:de:47:11:51:d9:c3:5a:
73:1d:7e:e8:53:a1:4d:c2:45:9c:29:ab:92:3d:10:
fc:b7:cb:b9:c2:9b:c9:5b:f1:cb:2e:17:f5:eb:d9:
6c:6c:84:55:a4:05:a4:53:bc:3f:ad:cf:3b:68:03:
96:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:3A:90:98:18:90:01:88:4F:FD:D4:C2:32:58:07:82:33:AA:54:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wDqQmBiQAYhP_dTCMlgHgjOqVJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.214.0/23
151.246.32.0/21
151.247.41.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1b:57:0e:79:69:6f:5b:bc:82:29:fb:c7:64:59:74:27:17:
7b:76:06:24:dc:37:f3:c5:b9:f4:f4:40:26:e7:3c:e1:60:54:
f0:be:54:11:6d:d0:91:37:40:f3:56:bb:79:ae:5b:7a:0d:bd:
83:dd:d6:93:73:a3:f8:c6:5b:ad:cd:3f:60:fb:2a:e9:3b:0b:
d9:cd:3f:93:7a:16:3d:ed:28:06:c0:fe:ba:aa:6a:91:71:64:
51:9e:f7:5b:2b:76:79:6c:4f:83:34:f7:d1:ea:62:de:1b:78:
4d:25:cc:00:27:34:01:94:c3:3a:dc:44:c2:a1:c9:29:1f:73:
25:1c:61:6a:3c:a4:10:7a:27:df:8b:83:22:50:5e:1b:f9:4b:
4f:97:94:61:8f:9c:62:b0:f9:56:d5:01:43:7a:77:6c:53:42:
fd:dc:c9:1d:5c:48:70:cb:1a:20:e2:cf:67:4f:42:bc:4f:f8:
1f:11:be:cd:31:02:75:cd:c2:12:11:e2:cc:74:94:42:f6:13:
02:98:c2:c0:3c:95:df:b2:b7:36:28:fa:f8:16:26:02:5c:11:
76:07:36:5d:fd:b7:de:3b:65:59:56:cc:e6:25:16:cc:16:f0:
24:05:d5:d8:e4:05:ed:f5:4b:05:6c:5c:a4:9c:b7:05:9c:fe:
4c:0e:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:09:10 2026 by rpki-client