Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-P2pWV348Qjz5w9l3v4ULC7FKt8.roa
File: 1-P2pWV348Qjz5w9l3v4ULC7FKt8.roa (raw, json)
Hash identifier: +qwbB5SewmfNCCs5eHkxbdIEsZuGeclVV9lgg9+5zcI=
Subject key identifier: F8:FD:A9:59:5D:F8:F1:08:F3:E7:0F:65:DE:FE:14:2C:2E:C5:2A:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F45F2F7312CB3D50B897EA90215581EC5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-P2pWV348Qjz5w9l3v4ULC7FKt8.roa
Signing time: Thu 09 Jul 2026 08:16:18 +0000
ROA not before: Thu 09 Jul 2026 08:16:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269304
IP address blocks: 151.242.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:f2:f7:31:2c:b3:d5:0b:89:7e:a9:02:15:58:1e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 08:16:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8fda9595df8f108f3e70f65defe142c2ec52adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:7f:4e:1f:fe:50:b0:41:98:a8:22:7c:65:
b2:1a:22:cf:42:24:b7:c1:37:0c:ae:49:15:e6:08:
13:2e:79:99:0b:7e:45:69:c1:f1:cc:e2:60:49:8f:
14:d5:ce:29:68:d1:8b:39:f7:c8:fb:4a:26:eb:41:
10:fb:1d:2f:9f:ae:70:ab:5d:83:70:c2:d2:b6:99:
4b:11:95:67:37:79:57:cd:d6:67:c8:82:90:44:5e:
51:87:c4:5f:a3:75:4f:98:b2:6d:69:6e:2c:1f:2c:
19:de:ac:c0:4f:f8:70:7e:54:25:a3:37:cc:a0:8c:
27:a4:df:d4:83:22:d6:2b:2e:10:b3:6a:ac:b6:29:
20:33:3a:bf:bb:d3:18:25:bf:30:7d:cc:ad:dd:43:
28:b8:58:c1:5c:50:28:bf:d3:0a:6b:60:98:5c:5c:
00:b5:58:fe:86:5d:31:bf:d2:34:a2:56:91:1e:8f:
4d:69:bf:08:5d:9a:97:c9:b3:58:df:fd:e8:87:95:
18:29:3f:33:67:eb:80:c8:e9:77:a5:ff:2c:4d:72:
48:ae:0e:5f:16:dc:8f:c7:a9:1c:42:f3:5a:80:e8:
7d:90:a2:55:01:0b:20:2d:80:89:db:55:87:12:0d:
32:d9:24:70:ff:ce:a7:11:49:fd:43:9c:5b:c3:11:
aa:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FD:A9:59:5D:F8:F1:08:F3:E7:0F:65:DE:FE:14:2C:2E:C5:2A:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-P2pWV348Qjz5w9l3v4ULC7FKt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.200.0/24
Signature Algorithm: sha256WithRSAEncryption
05:ea:7f:90:99:23:62:5c:40:29:e9:64:c9:ff:38:33:4f:39:
37:09:c3:ae:1d:73:19:0b:9b:1a:16:78:f4:cb:28:f5:b0:ea:
0a:6f:67:1d:83:d3:4a:80:08:6b:79:8d:6e:1d:85:f8:7c:c9:
37:ec:7b:8d:9f:bd:34:ca:08:29:69:b6:3b:ec:04:b4:b0:c2:
ea:f6:28:06:a1:39:1a:96:0d:e8:12:04:40:94:7d:60:f6:33:
e1:19:ab:4d:44:ec:8d:4f:f8:7c:4a:f4:b6:60:34:f1:ed:91:
60:24:51:89:06:31:da:53:3d:28:65:e6:c8:04:5a:6a:6e:1b:
00:94:fa:be:66:4a:aa:82:1a:46:05:d4:5d:e9:8f:5b:9d:c9:
94:2d:8e:91:05:90:ac:08:36:f6:bd:3e:c5:98:a8:55:6e:7f:
11:d1:75:c6:c7:a4:5c:b5:4f:ed:b3:9b:b7:04:e4:e3:d6:fe:
6c:8a:78:ba:b8:c7:2b:83:85:b0:72:5d:77:82:4c:b9:3b:bc:
da:b9:2b:9e:35:ae:0c:78:fa:ae:0c:b2:e3:19:b9:97:75:0d:
77:55:23:b3:7d:1b:93:3d:20:31:06:38:28:e6:69:e0:52:46:
07:9f:d4:aa:2b:05:77:90:b8:07:df:f8:4c:99:67:8e:2d:76:
d8:02:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:41 2026 by rpki-client