Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-m_CRqUzaLJQpqYvYhXBl3Q7jgk.roa
File: 1-m_CRqUzaLJQpqYvYhXBl3Q7jgk.roa (raw, json)
Hash identifier: RGEInx79GGQyK3ifbVrmhIGzY81eGtt3cFpLRS1Aknw=
Subject key identifier: FA:6F:C2:46:A5:33:68:B2:50:A6:A6:2F:62:15:C1:97:74:3B:8E:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5039621141C307B2CA81F7B85BD34A16
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-m_CRqUzaLJQpqYvYhXBl3Q7jgk.roa
Signing time: Fri 22 May 2026 15:06:38 +0000
ROA not before: Fri 22 May 2026 15:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152666
IP address blocks: 151.242.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:50:39:62:11:41:c3:07:b2:ca:81:f7:b8:5b:d3:4a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 15:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fa6fc246a53368b250a6a62f6215c197743b8e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:02:9a:8a:82:55:98:64:72:76:ab:7f:b0:
91:84:14:2f:b7:61:3a:48:76:96:4c:43:a1:ff:3b:
6d:7d:3b:4c:ce:55:5e:22:f6:c1:b8:f6:e3:94:90:
18:4e:ef:15:fa:4f:f9:35:64:20:e1:9d:b1:cc:b0:
63:cc:73:8a:7c:2b:b5:c9:ff:c3:18:27:57:2f:9d:
35:ad:1f:d3:4f:cb:20:80:27:44:45:6f:06:08:f2:
8c:2a:5e:4e:e7:ce:87:7f:f8:a8:84:e1:b6:28:21:
6a:ac:20:6a:7e:e0:86:b1:15:b6:a3:89:66:80:05:
2f:2d:1c:6c:52:92:b9:3e:03:23:ea:6f:ac:d9:21:
9e:20:98:b0:e0:1b:30:b4:92:7e:31:43:ee:68:9e:
ba:ff:a4:22:77:18:2b:d0:89:35:b2:ff:5a:95:ee:
d0:8c:f9:49:5e:4c:7a:b7:a6:66:9c:d9:1a:d8:7f:
82:06:72:c7:56:11:c2:a4:af:6b:0d:ca:3f:79:a4:
bf:55:39:d2:8a:7c:c4:3d:da:60:5b:76:b0:af:1c:
32:de:bb:eb:a4:80:66:01:1a:30:6e:38:ee:65:05:
7a:e6:70:2b:c4:d7:3f:ff:f3:c4:f9:ec:c3:76:68:
0f:0c:da:2c:ef:21:2f:d4:8e:06:7c:79:7c:92:4e:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:6F:C2:46:A5:33:68:B2:50:A6:A6:2F:62:15:C1:97:74:3B:8E:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-m_CRqUzaLJQpqYvYhXBl3Q7jgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.122.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b1:62:68:82:8f:c3:2d:e7:0b:2e:67:52:b3:a4:08:8d:05:
43:f7:56:8c:85:8f:42:e9:f3:f9:71:a6:08:1a:51:3c:7d:6d:
2e:d3:ad:c8:7e:f9:35:ed:de:14:94:26:66:87:3e:46:85:be:
ad:fb:d6:18:12:42:50:92:8b:a2:ac:3e:c6:35:f8:5a:68:9c:
57:bb:e8:d3:8f:ba:08:fe:51:e0:79:69:96:d4:ae:45:22:d6:
91:03:17:9c:2d:8c:78:fe:72:1b:3d:bb:e8:08:ff:4f:30:5c:
2f:0e:18:af:97:d1:16:4d:bb:85:3a:3a:32:6c:18:00:64:55:
cd:d1:cf:f5:8f:f6:15:52:46:df:c0:c6:a9:5c:99:1e:d7:02:
f1:09:d4:b4:d0:a8:54:3b:4b:ef:79:05:c4:f5:86:39:61:bd:
b8:97:98:60:71:2b:5d:d5:5a:56:22:7c:ee:55:d5:b1:fa:4e:
1a:5d:b8:08:54:e4:40:32:a9:90:c1:3c:79:a4:1e:d2:51:24:
58:13:44:40:91:98:d5:13:7d:de:bb:e4:75:3b:0f:53:33:82:
71:a1:ab:a0:51:7c:8f:78:b0:ab:45:37:a3:be:73:02:90:77:
fa:8e:9d:89:fd:b3:05:09:f6:ea:27:f4:7e:57:85:ea:82:7f:
bc:9b:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:53 2026 by rpki-client