Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/p0oEcMg8sG6gT08Fcxw4r9QhamI.roa
File: p0oEcMg8sG6gT08Fcxw4r9QhamI.roa (raw, json)
Hash identifier: z6uLeIBaxCEHOYTKTX4AQu+ufdq2lBhvDUsLTsxGNkQ=
Subject key identifier: A7:4A:04:70:C8:3C:B0:6E:A0:4F:4F:05:73:1C:38:AF:D4:21:6A:62
Certificate issuer: /CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Certificate serial: 019C420A8CBCC010E9CE12D98801C9A3C0F5
Authority key identifier: 59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/p0oEcMg8sG6gT08Fcxw4r9QhamI.roa
Signing time: Mon 09 Feb 2026 10:55:13 +0000
ROA not before: Mon 09 Feb 2026 10:55:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 151.88.22.0/24 maxlen: 24
151.88.40.0/24 maxlen: 24
151.88.41.0/24 maxlen: 24
151.88.109.0/24 maxlen: 24
151.88.176.0/24 maxlen: 24
151.91.35.0/24 maxlen: 24
151.91.38.0/24 maxlen: 24
151.92.2.0/24 maxlen: 24
151.92.4.0/24 maxlen: 24
151.92.12.0/24 maxlen: 24
151.92.83.0/24 maxlen: 24
151.92.154.0/24 maxlen: 24
151.92.155.0/24 maxlen: 24
151.92.158.0/24 maxlen: 24
151.92.166.0/24 maxlen: 24
151.92.198.0/24 maxlen: 24
194.104.188.0/24 maxlen: 24
194.104.189.0/24 maxlen: 24
194.104.190.0/24 maxlen: 24
194.104.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.mft
rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:0a:8c:bc:c0:10:e9:ce:12:d9:88:01:c9:a3:c0:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5949b31ebb6e4cbbd0cc770cc6f4d50f78f0eb7b
Validity
Not Before: Feb 9 10:55:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a74a0470c83cb06ea04f4f05731c38afd4216a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:c7:62:46:2b:ec:5a:2c:c5:ca:b3:63:7e:d0:
70:6d:4f:2e:59:21:42:2c:fa:91:3f:19:df:ac:6e:
a4:e9:3b:af:e1:4f:69:4e:ff:ec:96:df:29:d4:3b:
e7:25:6f:a7:49:d1:4e:1c:d9:d9:36:18:63:56:ae:
ed:be:5f:e6:bb:93:e4:b8:79:0a:36:c4:76:86:0e:
0a:c8:ba:09:17:23:9d:e0:48:b7:bb:c0:65:24:6f:
39:41:0a:72:da:e0:2a:eb:4b:3e:70:b9:b2:eb:6b:
db:4c:39:ef:b7:c8:e4:f7:ad:8b:0f:95:92:ee:c6:
5d:51:0d:9b:82:78:a6:5f:8f:79:9e:7f:38:a8:e0:
1d:c3:83:0d:4f:f9:ba:37:58:01:f1:48:18:1c:99:
af:70:87:be:24:cb:69:8c:01:da:9c:6d:7e:7e:25:
f4:89:51:86:10:4e:0a:27:c6:ea:32:20:f6:6c:c0:
3a:24:44:7e:88:c9:0b:32:58:72:89:d6:bd:3e:c7:
11:fd:68:81:c6:e5:81:38:e1:9a:97:ff:b0:fc:67:
f2:c1:91:5c:02:3c:97:14:48:c4:4d:5e:be:c4:a4:
2a:8f:44:59:22:01:4b:d1:45:93:c6:33:f5:82:b3:
5b:01:2b:f9:9c:db:84:9f:84:d4:0e:13:f4:53:cc:
7c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:4A:04:70:C8:3C:B0:6E:A0:4F:4F:05:73:1C:38:AF:D4:21:6A:62
X509v3 Authority Key Identifier:
keyid:59:49:B3:1E:BB:6E:4C:BB:D0:CC:77:0C:C6:F4:D5:0F:78:F0:EB:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WUmzHrtuTLvQzHcMxvTVD3jw63s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/p0oEcMg8sG6gT08Fcxw4r9QhamI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/de5add-ac68-4fb1-8419-3180ae4274f3/1/WUmzHrtuTLvQzHcMxvTVD3jw63s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.88.22.0/24
151.88.40.0/23
151.88.109.0/24
151.88.176.0/24
151.91.35.0/24
151.91.38.0/24
151.92.2.0/24
151.92.4.0/24
151.92.12.0/24
151.92.83.0/24
151.92.154.0/23
151.92.158.0/24
151.92.166.0/24
151.92.198.0/24
194.104.188.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:12:75:f9:1b:72:ea:3e:84:ee:8a:2a:e3:01:93:6f:e6:93:
c1:8d:a9:95:00:3c:5e:a6:dc:cf:33:12:98:4f:0d:1c:9d:3c:
b9:d7:64:34:36:41:b6:b2:c5:aa:1f:7e:40:c3:fb:a6:cc:0b:
f1:b5:63:c0:bb:79:a0:03:97:5e:2d:12:6d:a6:58:79:60:a5:
4c:37:eb:5b:d5:22:f5:61:de:4e:91:66:ee:cc:cd:bb:32:1a:
2e:07:96:99:72:96:4b:d7:b6:89:dd:01:8e:c8:b5:07:f1:3a:
9c:ce:a9:8b:11:c5:ff:26:67:07:d3:46:52:51:7d:e4:b8:0f:
57:5f:8d:c3:cc:5f:cc:f6:bc:56:fa:55:d9:2a:83:b2:a2:5d:
a8:ed:25:6e:99:c8:62:2b:9a:5f:41:6a:bb:83:c6:9f:fa:49:
0f:a0:88:f0:6f:47:f0:e8:cb:1b:d0:58:29:42:44:33:19:34:
8f:9c:3e:13:3e:37:24:00:57:ad:51:24:4f:82:c6:e3:39:f1:
71:90:19:ab:2e:8f:9d:28:7e:97:f1:78:75:9b:53:c5:cf:5f:
6f:6b:73:09:13:a1:cb:f3:a0:3e:e8:b1:d5:e2:f1:12:f6:b5:
59:33:68:81:a5:5d:6f:4f:35:e3:a4:09:62:50:8f:fb:ae:83:
a4:c1:66:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:41:52 2026 by rpki-client