Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OvfvD2uxDQc6mUXoFSiU871oP8k.roa
File: OvfvD2uxDQc6mUXoFSiU871oP8k.roa (raw, json)
Hash identifier: f9XjD+UYjP34IIntGMfMDMvBd2T6L/Yk3wsibFIcKeo=
Subject key identifier: 3A:F7:EF:0F:6B:B1:0D:07:3A:99:45:E8:15:28:94:F3:BD:68:3F:C9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8821AD02CF7AAFD035659BFC9E794C84
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OvfvD2uxDQc6mUXoFSiU871oP8k.roa
Signing time: Wed 22 Jul 2026 04:42:16 +0000
ROA not before: Wed 22 Jul 2026 04:42:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402343
IP address blocks: 151.244.187.0/24 maxlen: 24
151.244.203.0/24 maxlen: 24
151.246.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:21:ad:02:cf:7a:af:d0:35:65:9b:fc:9e:79:4c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 04:42:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3af7ef0f6bb10d073a9945e8152894f3bd683fc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:40:6b:f1:13:80:45:4c:2b:ef:65:f6:84:00:
a6:28:88:63:c8:9d:81:f6:3b:d7:9f:d5:bd:6d:bd:
99:0e:76:82:ee:1f:3f:e5:50:20:6d:d4:4c:d0:bf:
d4:33:05:f5:c9:36:aa:2f:fa:6b:cd:45:ff:86:68:
ae:27:fb:a1:ff:7c:2a:ca:ce:e5:b1:75:b9:84:25:
30:02:e1:f3:17:d9:8a:b9:0e:92:46:ba:65:00:82:
ae:45:30:19:e8:8a:96:65:47:fd:45:58:c8:6d:59:
86:d1:ce:96:c0:a4:0a:3c:05:4b:e6:6b:90:7e:46:
fc:02:97:c2:26:54:9c:fa:ba:6f:af:15:8e:42:81:
78:ff:eb:bf:f1:c8:42:c9:0e:27:ec:ee:60:03:af:
8a:e2:66:8f:c6:61:95:04:8c:12:5a:13:10:de:c4:
13:75:8c:14:f1:85:28:18:4e:1e:8e:80:fc:23:11:
2a:8c:7a:1a:09:17:5f:4a:df:1c:af:a9:ed:33:39:
03:15:8c:5c:1f:99:ac:0c:86:3c:61:d1:0a:bb:2f:
8f:65:cd:59:08:1f:df:0d:3a:56:92:60:58:53:1a:
d2:6a:e5:80:26:12:92:49:07:79:85:d7:32:6b:a2:
52:2f:7c:3a:32:64:fc:86:7c:3b:f7:2b:cb:f4:16:
1b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:F7:EF:0F:6B:B1:0D:07:3A:99:45:E8:15:28:94:F3:BD:68:3F:C9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/OvfvD2uxDQc6mUXoFSiU871oP8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.187.0/24
151.244.203.0/24
151.246.171.0/24
Signature Algorithm: sha256WithRSAEncryption
86:8a:44:e7:70:91:8e:45:ea:c4:04:59:6b:63:a2:a1:c8:d9:
b8:8a:80:30:13:f8:fe:08:fb:37:4d:ac:f2:16:c3:74:6b:09:
35:3d:1c:d2:c8:e1:cb:e5:31:6b:9b:ba:78:dc:04:c2:c9:43:
f2:9b:d3:fe:57:36:cb:b7:1f:5a:a7:a9:38:d6:86:cc:fc:78:
4a:74:45:33:b3:4d:72:80:9f:a6:7b:7e:aa:8b:3f:8f:da:62:
56:b4:ea:0b:0c:89:70:9f:a7:6f:e0:b3:ac:8e:23:f9:bc:b0:
02:70:b3:ae:ef:56:38:70:f3:9e:d0:d8:a4:ca:96:b5:65:d5:
50:a4:52:ad:93:24:6e:1f:ef:6c:d4:e1:c3:fc:04:9f:50:a9:
2e:20:b9:b7:d1:22:b9:2d:81:26:1c:bc:5d:35:45:99:53:a3:
97:c7:6f:e6:62:e1:14:70:62:fe:a8:36:78:f4:8a:c8:43:4e:
3a:ec:00:c6:b6:7c:34:91:fc:05:97:60:7b:83:23:d2:f2:e3:
9f:64:4b:0c:2a:2d:b2:ad:66:1c:13:1a:91:15:0a:24:19:c6:
3b:d9:6b:14:e4:49:56:46:cd:8c:24:a6:b7:c2:0b:03:b4:fd:
84:51:ff:5b:1a:55:23:b0:0a:28:6e:c7:01:6c:6b:86:4f:f7:
ed:21:df:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:08 2026 by rpki-client