Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyZrbNjBbpl7mhWOarX9C2EORzw.roa
File: GyZrbNjBbpl7mhWOarX9C2EORzw.roa (raw, json)
Hash identifier: 57jU2+YW2IPrC6NdByMjBzbkwwd9jVliLBJRDJh7MGo=
Subject key identifier: 1B:26:6B:6C:D8:C1:6E:99:7B:9A:15:8E:6A:B5:FD:0B:61:0E:47:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0349DC22B4B7F7789149A3EE6F7C9091A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyZrbNjBbpl7mhWOarX9C2EORzw.roa
Signing time: Mon 24 Aug 2026 16:32:29 +0000
ROA not before: Mon 24 Aug 2026 16:32:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200833
IP address blocks: 151.246.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:9d:c2:2b:4b:7f:77:89:14:9a:3e:e6:f7:c9:09:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 16:32:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b266b6cd8c16e997b9a158e6ab5fd0b610e473c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:06:37:c5:95:3d:5f:ef:12:ca:4b:5c:47:
51:de:4d:74:64:e2:ce:90:9c:8c:21:6e:bf:3f:b2:
17:ff:24:ea:05:b3:28:03:c2:67:aa:99:a7:aa:31:
79:89:7b:48:f0:22:b4:3d:ba:05:9e:6e:c0:ae:c3:
fd:c8:a1:e0:50:0a:86:6c:e6:fa:83:45:8e:01:28:
26:2a:69:07:50:cc:ae:e7:06:7f:1b:ec:fc:4c:b0:
e4:30:d6:bc:ee:e2:fa:0b:03:7c:e0:4e:4b:5d:2c:
64:73:ed:68:b6:dd:fb:ba:a6:a4:ea:79:6a:81:2a:
c3:f7:6b:30:7b:f0:11:6a:a4:97:fc:8e:85:8f:f3:
46:7d:7b:a6:bd:30:61:c6:62:e8:3b:7d:ad:bf:ec:
6f:ea:35:8b:ae:55:d9:88:09:54:4c:aa:77:38:14:
03:9f:d2:c3:f2:99:b7:c7:05:33:5f:54:94:84:5a:
a8:cb:e8:ba:e4:bc:91:cd:47:70:6d:5a:82:80:2f:
00:d0:36:79:cd:db:1a:89:5c:e8:fa:97:cc:74:01:
8e:52:91:62:2d:8d:75:f1:b6:5a:e9:cf:98:93:52:
e3:57:e1:7c:0c:11:73:53:44:4a:5e:42:a1:42:3d:
fb:b4:d2:7a:4a:e5:54:1f:1e:da:5e:ad:7c:80:15:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:26:6B:6C:D8:C1:6E:99:7B:9A:15:8E:6A:B5:FD:0B:61:0E:47:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyZrbNjBbpl7mhWOarX9C2EORzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.175.0/24
Signature Algorithm: sha256WithRSAEncryption
02:60:b4:84:8a:fd:80:08:39:66:b0:cc:06:ec:83:70:9f:1c:
59:26:fb:80:eb:69:11:de:d3:81:3c:32:2e:eb:0c:b8:2d:71:
22:1a:81:29:d4:df:e5:f7:03:54:c8:dd:02:0b:72:95:5f:f2:
31:99:30:bb:a2:b4:7a:db:25:45:ee:af:d6:8b:ee:35:10:82:
b4:71:45:63:ce:da:7b:69:94:a5:f0:df:29:b4:49:ed:56:17:
b5:46:8d:94:87:ee:52:c8:1b:76:11:07:46:8f:ab:86:12:3d:
78:0f:1b:dd:2a:7e:e9:08:18:57:10:78:f6:ba:59:3a:b8:ad:
02:e1:2f:6c:41:9e:5f:39:92:9e:e7:2a:2a:d4:62:34:31:e9:
99:ba:55:c3:b2:d7:44:0a:cd:ad:0c:59:36:45:07:91:8a:e4:
aa:99:6f:92:2f:d7:df:c1:2a:7b:34:b0:13:5a:80:de:b1:ab:
eb:b2:6a:c7:4f:85:95:95:06:86:a5:50:a2:31:72:9c:80:6f:
5f:4c:28:cf:c0:e0:e5:5e:cb:e1:b7:1b:24:17:7e:04:b8:f3:
c8:e9:b3:09:e8:6a:63:dd:5d:a4:ff:d1:9d:7d:00:09:86:c0:
65:eb:0e:c1:7f:dc:f1:c5:59:ed:ea:20:30:8c:1a:f5:d9:f5:
d0:c3:b6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:12:06 2026 by rpki-client