Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/23HP4Q_UYErq94mvhPJkpvoH-Vc.roa
File: 23HP4Q_UYErq94mvhPJkpvoH-Vc.roa (raw, json)
Hash identifier: Hv33Cp9CfagUcTolFIURnAtQWTDfgZY3g4nbrcER2uk=
Subject key identifier: DB:71:CF:E1:0F:D4:60:4A:EA:F7:89:AF:84:F2:64:A6:FA:07:F9:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E17E97DA41E09F352EC4EB39679854B9C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/23HP4Q_UYErq94mvhPJkpvoH-Vc.roa
Signing time: Mon 11 May 2026 16:40:38 +0000
ROA not before: Mon 11 May 2026 16:40:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209104
IP address blocks: 151.240.154.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:e9:7d:a4:1e:09:f3:52:ec:4e:b3:96:79:85:4b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 16:40:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db71cfe10fd4604aeaf789af84f264a6fa07f957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c2:b5:5b:54:8e:b1:5e:83:b4:f7:22:e0:d3:
c6:2f:fc:98:5f:7b:fc:06:6f:ec:ed:b5:ce:48:f9:
ac:fe:83:e2:78:70:67:cf:69:f6:48:47:88:bd:f6:
90:ba:cc:87:59:1b:31:99:d9:08:f1:8a:7b:5f:f0:
1a:ed:63:8a:8f:cf:86:0e:39:ed:6e:b3:fb:e6:c1:
3e:d2:3a:99:6c:56:52:ff:ab:99:1b:60:80:65:b3:
4d:76:1d:c9:72:2e:75:d0:40:5e:58:46:46:88:41:
e8:be:bc:0a:06:8a:47:93:d4:4f:bd:fa:4f:ad:26:
0f:61:3d:79:4c:b7:45:6e:8d:5b:b0:1f:ff:81:f7:
13:45:5c:c3:46:ae:7f:46:5b:53:f7:8f:2b:89:da:
69:32:df:a4:3e:06:6a:e7:6d:4f:1e:02:56:9e:6d:
92:68:24:4d:53:f8:16:d0:b5:8a:c0:7a:de:6f:7e:
72:74:35:bf:49:68:ec:8f:4e:67:8f:22:da:80:e7:
c3:6a:50:c1:65:96:9a:a3:5f:d8:2e:01:90:8a:ff:
0d:d5:f2:ef:d2:e6:c6:51:b1:ea:6f:f3:3a:68:52:
da:59:8f:df:97:51:25:46:9f:e3:b9:8d:34:32:d7:
78:de:75:05:69:f8:c3:e3:bc:a0:f8:ab:2b:4f:2d:
a5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:71:CF:E1:0F:D4:60:4A:EA:F7:89:AF:84:F2:64:A6:FA:07:F9:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/23HP4Q_UYErq94mvhPJkpvoH-Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.154.0/24
151.243.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:65:34:05:e5:25:fa:7d:36:f3:bf:69:c8:ff:9e:4d:75:8e:
47:92:ea:8b:6a:b0:ba:4d:f0:91:a5:32:37:cf:40:d5:09:c2:
7a:4d:21:1b:2c:a8:f1:86:bf:f6:07:ec:ab:dc:e1:2e:04:22:
83:5c:70:d4:cc:27:62:f7:1a:85:45:23:8e:6b:b3:49:73:3f:
2f:83:75:e7:c0:98:85:d9:80:2f:62:9d:3b:ea:70:3e:a7:32:
ed:01:62:86:81:4b:1e:f8:30:88:74:60:10:70:87:c2:79:3e:
5b:12:6b:3f:e8:a6:85:c9:2b:26:79:48:57:0f:4e:12:86:2c:
2d:df:cd:63:7f:20:71:8d:68:bc:f4:9b:74:f2:31:d2:ff:de:
af:4d:90:34:b0:c7:d0:e5:d8:c0:36:18:5e:b0:07:a2:da:7b:
8d:07:0c:09:be:5c:8f:fd:cd:d0:88:da:84:41:77:f4:0b:12:
40:89:ca:13:40:8e:ac:7e:e3:8b:55:4a:f9:48:1b:04:d0:58:
35:06:9a:19:c0:63:2e:d3:81:a6:db:29:dc:4d:5a:25:62:0b:
d5:3d:67:88:9c:9e:a5:42:e6:6c:a9:32:6e:b1:7d:20:79:74:
b7:0f:26:38:a0:31:a1:f3:71:af:7c:67:4c:8f:85:8b:94:a1:
89:fa:b0:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:51:30 2026 by rpki-client