Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vrWqPIRSMU01a2oWtMIF7df7PI.roa
File: 9vrWqPIRSMU01a2oWtMIF7df7PI.roa (raw, json)
Hash identifier: rP+2roi11A6bla3SKzEHiT/U2MqicHBiX+6QCCgVgWw=
Subject key identifier: F6:FA:D6:A8:F2:11:48:C5:34:D5:AD:A8:5A:D3:08:17:B7:5F:EC:F2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D241337EEDFBAD8D39E558FDFDD713649
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vrWqPIRSMU01a2oWtMIF7df7PI.roa
Signing time: Wed 25 Mar 2026 08:18:52 +0000
ROA not before: Wed 25 Mar 2026 08:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59642
IP address blocks: 151.244.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:13:37:ee:df:ba:d8:d3:9e:55:8f:df:dd:71:36:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 25 08:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6fad6a8f21148c534d5ada85ad30817b75fecf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7b:eb:be:f7:e9:0e:8e:07:50:cb:ff:c6:90:
79:e9:f0:32:c9:10:06:a7:80:eb:97:df:94:64:d0:
c3:74:9f:5a:43:df:95:d3:fb:36:2d:41:0e:ac:4d:
72:42:45:18:a4:5f:66:25:3f:50:7f:c6:13:64:a5:
ec:62:02:bf:a6:c2:80:24:aa:74:30:83:6c:8e:76:
04:df:5f:61:7d:8a:ad:a4:73:60:7f:ec:e8:0f:05:
08:8d:d2:51:ee:24:e1:88:6a:d9:87:d3:5a:fa:c5:
90:e5:3e:ee:73:52:d3:3d:83:e4:a0:2a:22:3b:34:
5d:f9:25:04:bf:f2:fd:62:03:5f:a8:8f:c9:fe:20:
f9:51:fc:77:8f:4f:97:55:c3:b4:29:2c:55:5d:aa:
2e:36:93:ec:40:ed:e0:98:fa:60:17:2c:c0:12:b3:
5f:7e:94:92:ef:9b:94:8e:c4:ad:c4:34:de:11:99:
ee:fd:3d:cb:0c:af:3c:a2:db:30:87:ff:f0:12:17:
d4:16:b2:de:9d:78:ca:20:0c:97:9d:19:a0:90:e9:
b7:21:f6:c1:58:0e:f1:36:ab:85:bf:a0:7d:f5:00:
76:76:c0:80:dc:19:6c:d4:cd:8c:a6:aa:39:67:25:
e0:54:05:9c:ba:78:7e:ef:b6:79:cb:27:6c:b5:56:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FA:D6:A8:F2:11:48:C5:34:D5:AD:A8:5A:D3:08:17:B7:5F:EC:F2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vrWqPIRSMU01a2oWtMIF7df7PI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.92.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ed:71:00:8e:84:93:8d:e9:22:b4:3c:4c:1d:35:9b:24:b4:
ed:b5:e5:85:e0:86:bc:04:92:ab:1a:37:5d:cb:b7:d0:39:ed:
d1:86:89:58:57:9b:42:c6:e3:4e:b0:f9:52:7a:7d:ec:ae:60:
04:54:f6:86:16:40:ae:a1:7a:75:a1:d1:f0:b2:35:df:0e:2b:
af:98:28:74:a2:d5:fa:f8:70:33:6c:8a:55:c5:7f:99:07:30:
30:37:11:01:37:4c:b4:0d:86:0d:3f:cc:ca:02:69:9e:aa:34:
66:42:e5:ed:cd:7f:1f:a7:7e:d3:3c:f0:67:b7:d3:b1:39:da:
69:31:59:ef:50:4f:10:f0:ee:79:37:7e:5e:f0:bf:13:4d:21:
be:b5:51:fb:0b:5d:69:39:4a:e0:ac:c9:aa:35:cb:54:7d:e9:
68:45:79:d6:ee:f8:06:eb:c3:7e:ac:83:f9:ed:d7:82:6e:2c:
eb:c8:58:6e:78:c4:99:a6:24:dd:0b:b6:3b:35:b4:80:d2:5b:
2d:db:f6:8e:31:0f:54:3f:21:ec:5f:0c:63:6e:4b:99:1b:d2:
28:cf:ec:c8:51:37:e7:a4:78:57:17:64:72:7c:a1:1a:03:3d:
ee:be:3d:d4:2b:37:73:93:10:2f:30:f7:56:19:c6:03:eb:88:
56:ab:91:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:24 2026 by rpki-client