Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7NMqp3-JpNGFIZquhPpF237xAVY.roa
File: 7NMqp3-JpNGFIZquhPpF237xAVY.roa (raw, json)
Hash identifier: G5UlSsYl/RLdrRktMgGKbSmVf5RUAtx+T8/Lt+Wig10=
Subject key identifier: EC:D3:2A:A7:7F:89:A4:D1:85:21:9A:AE:84:FA:45:DB:7E:F1:01:56
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F41FAB23FE804D9EB545E5A31A12C7EC9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7NMqp3-JpNGFIZquhPpF237xAVY.roa
Signing time: Wed 08 Jul 2026 13:46:16 +0000
ROA not before: Wed 08 Jul 2026 13:46:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400529
IP address blocks: 151.242.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:fa:b2:3f:e8:04:d9:eb:54:5e:5a:31:a1:2c:7e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 8 13:46:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ecd32aa77f89a4d185219aae84fa45db7ef10156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:93:c3:ba:c2:2b:72:52:c0:61:7d:0a:9a:25:
6a:cf:c9:c2:f3:6a:ad:c8:3e:4c:27:6e:c8:87:e3:
46:cf:88:ed:a1:e6:07:a1:1e:3d:bd:60:c9:57:a3:
cc:c1:e2:a4:c3:6f:ad:e6:05:79:8e:52:72:32:2e:
69:55:6d:9b:69:c8:a5:6a:19:42:79:6d:4e:ec:7b:
38:fa:b3:0a:f0:29:d0:41:5c:d9:b8:eb:0e:48:4a:
0d:a6:9e:ca:ec:92:af:bb:2a:98:5c:ea:1b:70:d3:
8b:df:28:6e:2c:8a:32:58:b3:06:e9:ac:24:74:9c:
4e:ce:29:e7:a1:55:b2:04:8c:fa:b6:14:36:fa:1b:
88:61:ac:38:91:07:29:68:fb:7d:55:d9:30:11:4f:
b0:d5:98:fa:bd:a5:bf:ca:e7:30:76:60:9c:cd:18:
7d:c0:3c:b3:94:28:9f:ec:a7:8c:6e:52:87:29:c6:
a5:7c:28:0f:dc:37:61:79:76:10:16:b4:6f:f0:1a:
62:32:6f:d5:46:7b:67:bb:c7:f3:f5:4e:39:4f:62:
34:03:08:7d:4e:37:fb:d0:05:6c:66:54:bb:7a:58:
b7:07:5a:46:c7:ee:5c:40:0d:40:5d:af:89:a3:cb:
41:9b:66:ec:f5:ee:86:7c:03:71:8c:68:9f:5b:e0:
7d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D3:2A:A7:7F:89:A4:D1:85:21:9A:AE:84:FA:45:DB:7E:F1:01:56
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7NMqp3-JpNGFIZquhPpF237xAVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.81.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:50:74:bc:59:4e:87:da:e6:26:95:65:16:17:56:a2:01:
6e:2f:bd:69:52:07:a8:a4:13:39:36:c7:2c:88:f8:67:59:84:
aa:94:7f:45:6e:5b:b7:ea:fe:50:22:a4:40:d4:48:2a:02:d0:
fe:45:1d:dd:9d:2c:2d:00:72:fd:ae:36:a7:ad:56:93:b7:85:
fc:24:ea:e0:c6:f4:b6:a7:2f:52:1c:89:b6:f5:4f:de:22:6a:
3b:8b:37:a3:02:8b:39:b1:10:da:4a:3d:1c:1a:9e:a5:e0:7c:
ad:57:df:d7:43:4d:cc:fc:5f:cc:dd:47:34:25:c7:a0:8a:ce:
62:3c:44:84:63:b2:ab:8b:ef:b4:5d:e8:d5:90:e7:de:8e:72:
e7:b1:5d:f3:9b:87:12:cc:a9:1c:01:ef:72:7b:96:f4:e8:dd:
b8:07:bc:9f:a6:71:07:77:b2:1e:d1:5a:30:8a:28:27:4c:78:
c7:50:73:3e:cb:1c:23:dd:79:d0:d1:97:87:00:47:13:26:1b:
57:a2:d3:6c:b4:f9:5e:ee:03:5f:fa:00:d0:5a:5f:ee:fa:08:
b4:24:c5:8a:74:15:78:e1:2c:8f:2b:4e:36:c1:1d:ab:34:95:
51:29:e9:90:58:84:0a:23:5a:82:8b:32:69:5f:72:7a:9e:b8:
09:d7:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:15 2026 by rpki-client