Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2IjELQU3zgPtT8rm6hcB_XwzKms.roa
File: 2IjELQU3zgPtT8rm6hcB_XwzKms.roa (raw, json)
Hash identifier: d/BKHIFmpGHrqhMXwjzSYbNAffjlAs1G7OcQDXAzFjA=
Subject key identifier: D8:88:C4:2D:05:37:CE:03:ED:4F:CA:E6:EA:17:01:FD:7C:33:2A:6B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E2BB6C219DAB4E931775DCDCC4C87B8CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2IjELQU3zgPtT8rm6hcB_XwzKms.roa
Signing time: Fri 15 May 2026 12:57:37 +0000
ROA not before: Fri 15 May 2026 12:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400506
IP address blocks: 151.243.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:b6:c2:19:da:b4:e9:31:77:5d:cd:cc:4c:87:b8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 15 12:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d888c42d0537ce03ed4fcae6ea1701fd7c332a6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:11:fa:ff:be:53:46:b8:eb:c1:a8:bf:0e:fb:
21:2d:48:74:36:07:79:7a:7c:4c:bc:29:f4:89:e3:
04:86:fa:b4:4b:a2:ec:ba:03:86:b7:e8:bd:67:ad:
b2:c0:25:ba:c1:4c:6b:fc:68:73:4a:25:9c:17:1e:
e3:25:5f:1c:c1:98:43:8f:12:2c:e6:03:51:59:9a:
d7:d2:ab:50:e0:a4:e4:88:d3:5b:80:77:c0:fd:a5:
54:2c:89:db:26:a2:df:9f:61:c5:ab:fc:b8:68:8e:
3f:44:ae:64:79:b5:26:5c:a1:17:d4:76:15:b6:5b:
27:15:c5:bd:5e:0b:3a:80:d6:d5:7e:e1:9e:d5:72:
81:22:a7:5d:b3:a9:4f:17:99:be:8f:45:b8:5d:d4:
bb:42:1f:88:cd:a6:17:76:e4:b1:cf:c3:4d:5c:21:
b5:95:5c:36:50:39:1b:03:9e:81:70:88:eb:6f:e6:
e2:31:84:fe:90:c0:b2:a3:8e:9e:6e:b4:d0:09:78:
49:f9:58:df:c9:8c:75:6f:dc:c6:95:c8:99:98:66:
06:b3:ed:12:36:7d:97:56:75:58:a0:8f:4f:6e:d4:
7b:ad:79:e9:58:89:e7:97:bf:b6:4d:f4:a8:f1:fb:
84:fd:b9:53:94:f3:c7:1c:69:8b:86:2f:f6:79:7c:
ec:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:C4:2D:05:37:CE:03:ED:4F:CA:E6:EA:17:01:FD:7C:33:2A:6B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2IjELQU3zgPtT8rm6hcB_XwzKms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.153.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:11:d3:b9:34:85:97:e2:f7:7f:b7:f4:d6:e8:cb:68:f9:47:
4d:35:98:8f:2a:ba:6a:ed:1d:de:9e:58:23:a2:51:29:a0:df:
94:ce:6e:c0:6d:a6:ba:fd:28:f3:42:83:83:b3:57:d8:89:11:
1a:1a:e4:99:9f:20:d1:d0:a5:31:cc:11:6e:db:a4:13:c2:4b:
62:41:a0:7d:ef:37:14:b2:ad:88:09:fa:48:97:0e:fd:22:db:
87:56:34:40:d5:af:c0:e4:e4:f2:6a:8a:47:53:7c:07:f4:6a:
53:fe:9c:37:97:35:ee:fa:d0:e6:ea:1b:6d:2c:26:bb:69:16:
a2:33:e6:52:25:9f:17:b5:3b:33:57:ff:00:2f:bd:6a:a1:30:
82:c8:de:fe:ad:d8:24:9a:db:2e:14:c4:41:90:60:87:de:8e:
d6:03:60:72:89:c5:f5:b4:21:5e:16:56:50:2b:9f:55:47:e7:
06:bb:45:43:44:e6:75:e3:7e:2f:37:a7:ea:4f:33:9c:ed:5a:
28:ba:3d:ff:a7:6d:6f:9c:61:05:c3:d3:31:8b:5d:32:d2:15:
01:a2:83:30:ef:9c:64:1d:08:3e:6d:90:4f:3c:ce:3a:50:e7:
7a:69:b6:78:d2:8b:d8:03:0f:52:ef:89:9a:b1:ee:30:91:ef:
d8:ef:a9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:45 2026 by rpki-client