Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9exPGcf0qMUebR1Ui8ugyJHZE74.roa
File: 9exPGcf0qMUebR1Ui8ugyJHZE74.roa (raw, json)
Hash identifier: 2y02cdO/j7+L4vaIRAH7TgytcxPqQy1kn45axnzsxCU=
Subject key identifier: F5:EC:4F:19:C7:F4:A8:C5:1E:6D:1D:54:8B:CB:A0:C8:91:D9:13:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F7E2B047243692F5A60CD9B27B432AF9C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9exPGcf0qMUebR1Ui8ugyJHZE74.roa
Signing time: Mon 20 Jul 2026 06:16:16 +0000
ROA not before: Mon 20 Jul 2026 06:16:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 7488
IP address blocks: 151.244.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:2b:04:72:43:69:2f:5a:60:cd:9b:27:b4:32:af:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 20 06:16:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f5ec4f19c7f4a8c51e6d1d548bcba0c891d913be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:13:66:b1:77:a5:0f:58:4e:f1:be:f2:5e:0c:
4b:9a:4b:bf:79:14:e3:4e:33:52:1f:8c:3a:23:c6:
fe:06:90:61:bd:d5:e1:fa:7f:81:7d:23:52:55:f3:
56:93:13:f6:f2:f1:45:76:5c:0b:5c:af:69:41:13:
7a:0e:20:ea:9f:93:fe:89:dd:d4:89:50:d4:a2:d7:
dd:d4:2a:a7:97:ba:ed:49:a4:e7:5c:7a:db:2e:bc:
71:11:33:55:7d:23:b1:ff:cb:1a:03:84:f4:77:9a:
c1:a9:04:23:0e:03:bc:b5:27:39:15:6b:f1:bd:cd:
ce:6d:77:48:9b:30:d4:1f:fe:2a:04:4a:64:06:f0:
f8:7b:60:ff:4b:99:bb:92:ee:b5:0c:bf:4d:10:e9:
24:2e:6b:b8:d3:75:6a:35:be:c1:7d:1a:84:18:05:
04:21:17:c9:61:49:aa:1a:d9:3c:c6:e6:40:16:9a:
f4:af:cd:1f:63:64:bf:50:eb:77:16:a7:0b:db:88:
71:db:e5:d2:93:ac:63:f3:b2:9a:79:0c:38:53:ea:
77:98:19:07:74:fc:be:46:fa:8e:31:aa:58:ee:eb:
19:8c:26:36:e8:17:ed:42:c4:54:03:61:1e:99:72:
b9:d5:6a:39:84:98:62:ab:77:9c:7b:9f:c7:cd:f4:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:EC:4F:19:C7:F4:A8:C5:1E:6D:1D:54:8B:CB:A0:C8:91:D9:13:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9exPGcf0qMUebR1Ui8ugyJHZE74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.135.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:64:ed:98:1b:ac:dd:ef:25:bd:52:3c:8c:b5:a1:a3:f6:15:
94:82:b3:c6:c4:ea:e7:df:59:86:2b:2d:e4:9f:31:51:95:73:
81:de:ff:53:2a:98:57:42:2b:b0:5b:c2:27:85:c2:63:bf:ac:
ca:ab:3c:de:50:49:b4:34:86:b7:9f:cf:2b:86:fe:47:55:ff:
45:55:b6:d1:00:6e:92:48:01:e3:ed:8f:fb:5e:0d:88:6d:4a:
1e:2e:df:b3:d3:dd:2a:20:db:cd:fc:2c:d0:6a:b3:8d:d3:87:
55:d1:7c:19:c6:f2:8b:3d:d4:d8:ff:ab:13:2d:f3:bc:cc:83:
76:69:7b:9d:83:9d:53:76:db:f5:be:f5:17:66:a5:21:87:8e:
52:36:fc:87:db:18:fd:d4:3d:40:50:5a:13:fe:d6:f9:d4:70:
13:70:23:79:e9:e5:bf:24:e9:13:5e:67:e5:c3:55:32:e9:8f:
13:eb:f0:3a:b7:bd:c5:ab:92:35:15:cb:5e:24:6a:48:bf:c9:
e6:a1:ae:64:12:19:4a:7b:aa:4a:4f:c7:44:91:ad:2a:e0:12:
0c:b6:b3:a4:8e:41:d1:b0:81:a9:a9:77:21:09:0d:05:5b:ac:
d3:18:2f:df:ae:27:34:b7:29:59:d3:5b:35:24:67:c7:2e:f9:
9a:3c:be:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9+KwRyQ2kvWmDNmye0Mq+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzIwMDYxNjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWVjNGYxOWM3ZjRhOGM1MWU2ZDFkNTQ4YmNiYTBjODkxZDkxM2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxNmsXelD1hO8b7yXgxLmku/eRTj
TjNSH4w6I8b+BpBhvdXh+n+BfSNSVfNWkxP28vFFdlwLXK9pQRN6DiDqn5P+id3U
iVDUotfd1Cqnl7rtSaTnXHrbLrxxETNVfSOx/8saA4T0d5rBqQQjDgO8tSc5FWvx
vc3ObXdImzDUH/4qBEpkBvD4e2D/S5m7ku61DL9NEOkkLmu403VqNb7BfRqEGAUE
IRfJYUmqGtk8xuZAFpr0r80fY2S/UOt3FqcL24hx2+XSk6xj87KaeQw4U+p3mBkH
dPy+RvqOMapY7usZjCY26BftQsRUA2EemXK51Wo5hJhiq3ece5/HzfREZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPXsTxnH9KjFHm0dVIvLoMiR2RO+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOWV4UEdjZjBxTVVlYlIxVWk4dWd5SkhaRTc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/SHMA0G
CSqGSIb3DQEBCwUAA4IBAQCaZO2YG6zd7yW9UjyMtaGj9hWUgrPGxOrn31mGKy3k
nzFRlXOB3v9TKphXQiuwW8InhcJjv6zKqzzeUEm0NIa3n88rhv5HVf9FVbbRAG6S
SAHj7Y/7Xg2IbUoeLt+z090qINvN/CzQarON04dV0XwZxvKLPdTY/6sTLfO8zIN2
aXudg51Tdtv1vvUXZqUhh45SNvyH2xj91D1AUFoT/tb51HATcCN56eW/JOkTXmfl
w1Uy6Y8T6/A6t73Fq5I1FcteJGpIv8nmoa5kEhlKe6pKT8dEka0q4BIMtrOkjkHR
sIGpqXchCQ0FW6zTGC/fric0tylZ01s1JGfHLvmaPL7e
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:14:58 2026 by rpki-client