Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1H_jo2IYRdUXTpszFxzpeD6T80.roa
File: P1H_jo2IYRdUXTpszFxzpeD6T80.roa (raw, json)
Hash identifier: 6+Wmht+w4A9suDMCaMFG0J14+tnBi8uShOqzcAtaGjE=
Subject key identifier: 3F:51:FF:8E:8D:88:61:17:54:5D:3A:6C:CC:5C:73:A5:E0:FA:4F:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A033EFD0B31FB017C5A7A900B261965EDD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1H_jo2IYRdUXTpszFxzpeD6T80.roa
Signing time: Mon 24 Aug 2026 13:22:29 +0000
ROA not before: Mon 24 Aug 2026 13:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218908
IP address blocks: 151.242.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:ef:d0:b3:1f:b0:17:c5:a7:a9:00:b2:61:96:5e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 13:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3f51ff8e8d886117545d3a6ccc5c73a5e0fa4fcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:4e:2e:d0:f2:92:a1:8c:ba:63:5d:04:1b:
22:31:75:77:22:8a:5b:04:ba:30:5c:cf:46:f3:65:
5c:ea:30:6b:24:bc:f3:4c:fb:34:9e:07:68:20:59:
c4:fa:d6:47:9d:58:7a:48:d6:fc:ec:b3:f2:99:1b:
e1:ab:3a:68:29:a1:45:41:3b:b5:a6:90:57:e4:72:
77:fe:ce:c8:02:e8:86:21:b2:3b:64:cb:42:67:c0:
f5:34:a4:b7:8f:f6:04:f7:33:02:fc:04:f8:f7:f5:
66:c6:86:c7:fe:c6:5f:41:b7:70:cc:61:3f:05:7b:
f2:c0:7e:73:34:46:a0:24:c2:a7:4a:8e:e1:53:4c:
67:c9:3f:e4:76:34:2f:7e:84:8a:b5:fb:c0:64:c0:
19:49:da:cb:cc:96:dc:f4:ea:d9:f2:96:f8:dc:64:
e5:11:95:1d:ed:86:ff:96:06:69:3a:9c:e1:df:d8:
d6:42:e8:ba:76:6e:c0:01:02:13:c0:65:1c:64:7c:
fb:15:b9:09:e9:fb:30:65:72:ee:9a:2a:f7:51:7c:
a4:5b:2b:6d:f4:52:6e:56:99:27:00:d1:40:e2:c7:
2e:9b:4e:94:2a:0f:e5:47:99:b8:0b:33:ea:db:da:
6c:63:dc:5f:02:45:f9:35:4e:3c:59:a4:a8:06:64:
a4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:51:FF:8E:8D:88:61:17:54:5D:3A:6C:CC:5C:73:A5:E0:FA:4F:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/P1H_jo2IYRdUXTpszFxzpeD6T80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.175.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4d:4b:20:e8:b8:da:a4:b1:90:2b:cc:f1:2d:29:a5:22:3c:
a0:33:d7:6c:c6:d8:bc:ab:68:e3:54:09:76:f3:9c:73:2a:45:
81:c2:2e:1a:4b:91:80:ba:fa:49:41:a8:66:58:e9:a7:b2:74:
f6:a6:5f:fd:5d:ea:42:36:10:d6:9f:4f:fe:1e:a5:ea:45:59:
4c:7b:5b:dd:99:e0:36:b8:9a:6c:a9:40:e3:24:ad:36:c5:a5:
7a:16:0b:41:f2:32:6b:50:48:ba:59:bb:f3:01:96:b3:61:4a:
b7:65:d1:bc:d2:cf:7a:14:22:b0:de:57:6e:b6:02:b8:b9:a1:
69:76:bb:2b:78:18:7b:4b:a6:ad:85:32:ef:9e:08:c5:43:7f:
16:16:1d:08:84:b5:87:9b:20:d7:22:63:92:8e:13:a1:f1:8f:
22:85:fb:7b:cd:37:68:c6:d8:14:5e:1c:e7:bc:69:2d:b5:db:
24:5d:70:d6:a7:87:86:d7:8e:cc:e4:7b:b2:0c:ad:28:76:79:
11:3d:21:8f:72:30:b5:63:e3:9e:52:67:a3:1e:f3:5e:98:66:
39:fc:98:51:ad:17:8e:c2:28:da:78:78:35:93:b7:9b:12:26:
c0:c0:2f:3e:b9:a8:bc:3b:c4:a4:52:01:bc:41:54:2a:d8:6a:
0c:d4:e0:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAz79CzH7AXxaepALJhll7dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI0MTMyMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjUxZmY4ZThkODg2MTE3NTQ1ZDNhNmNjYzVjNzNhNWUwZmE0ZmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslpOLtDykqGMumNdBBsiMXV3Iopb
BLowXM9G82Vc6jBrJLzzTPs0ngdoIFnE+tZHnVh6SNb87LPymRvhqzpoKaFFQTu1
ppBX5HJ3/s7IAuiGIbI7ZMtCZ8D1NKS3j/YE9zMC/AT49/VmxobH/sZfQbdwzGE/
BXvywH5zNEagJMKnSo7hU0xnyT/kdjQvfoSKtfvAZMAZSdrLzJbc9OrZ8pb43GTl
EZUd7Yb/lgZpOpzh39jWQui6dm7AAQITwGUcZHz7FbkJ6fswZXLumir3UXykWytt
9FJuVpknANFA4scum06UKg/lR5m4CzPq29psY9xfAkX5NU48WaSoBmSkZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD9R/46NiGEXVF06bMxcc6Xg+k/NMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUDFIX2pvMklZUmRVWFRwc3pGeHpwZUQ2VDgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/KvMA0G
CSqGSIb3DQEBCwUAA4IBAQCETUsg6LjapLGQK8zxLSmlIjygM9dsxti8q2jjVAl2
85xzKkWBwi4aS5GAuvpJQahmWOmnsnT2pl/9XepCNhDWn0/+HqXqRVlMe1vdmeA2
uJpsqUDjJK02xaV6FgtB8jJrUEi6WbvzAZazYUq3ZdG80s96FCKw3ldutgK4uaFp
drsreBh7S6athTLvngjFQ38WFh0IhLWHmyDXImOSjhOh8Y8ihft7zTdoxtgUXhzn
vGkttdskXXDWp4eG147M5HuyDK0odnkRPSGPcjC1Y+OeUmejHvNemGY5/JhRrReO
wijaeHg1k7ebEibAwC8+uai8O8SkUgG8QVQq2GoM1OCN
-----END CERTIFICATE-----
Generated at Wed Sep 23 05:48:23 2026 by rpki-client