Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QMMsa8UYpyoVlFQvxbEf_tFwQCw.roa
File: QMMsa8UYpyoVlFQvxbEf_tFwQCw.roa (raw, json)
Hash identifier: 5IheeLhT+GLka2KbAEQS77JoxR2o/h1nQilurcmPVBw=
Subject key identifier: 40:C3:2C:6B:C5:18:A7:2A:15:94:54:2F:C5:B1:1F:FE:D1:70:40:2C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DDA402762C94C0F6C5DDF044C944FA7D8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QMMsa8UYpyoVlFQvxbEf_tFwQCw.roa
Signing time: Wed 29 Apr 2026 17:18:50 +0000
ROA not before: Wed 29 Apr 2026 17:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210809
IP address blocks: 151.247.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:40:27:62:c9:4c:0f:6c:5d:df:04:4c:94:4f:a7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 29 17:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40c32c6bc518a72a1594542fc5b11ffed170402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:33:f5:50:d6:52:d0:b5:73:2b:17:f1:f0:b2:
52:94:6a:37:70:65:2c:b8:ac:f3:eb:16:5f:2c:65:
1f:e4:61:ae:7e:0f:6a:ec:5c:fd:54:a0:70:05:23:
a5:d8:f4:96:7c:e7:2a:18:c3:ba:f3:d2:49:f5:a8:
cd:f6:08:bf:65:eb:66:ac:67:b4:d3:35:a8:01:82:
34:03:00:bd:6b:0c:c2:c6:3d:c2:57:9b:8d:a2:9f:
e7:76:40:cb:16:9f:ae:bb:91:35:db:7c:19:ea:2b:
2e:b5:1a:f5:26:73:70:52:fe:9e:db:7c:34:ea:99:
7c:45:73:4d:25:54:c2:c3:77:58:d1:f4:6e:7b:30:
a5:14:2c:ba:35:0d:ae:b0:bf:20:b0:27:bb:ec:11:
00:79:5b:d9:47:06:43:f3:1e:93:8a:2c:6d:82:10:
a1:07:cb:88:21:46:33:f4:9e:58:44:45:84:7e:c8:
f4:04:55:77:29:a8:32:5a:e0:aa:af:95:78:f9:28:
7e:97:77:ef:35:75:82:c7:8f:7a:e1:a1:e0:10:9b:
e6:df:0a:bb:41:0d:df:9b:96:7c:41:63:1d:f2:09:
8d:d7:df:3c:69:8c:66:39:a4:ea:0e:f9:47:b5:a4:
48:27:b0:7d:25:2b:48:d2:6f:34:f9:6c:8d:60:f5:
2e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:2C:6B:C5:18:A7:2A:15:94:54:2F:C5:B1:1F:FE:D1:70:40:2C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QMMsa8UYpyoVlFQvxbEf_tFwQCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.207.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a8:af:52:85:7a:c9:4a:4f:e7:d5:db:f6:7e:d9:51:b5:5e:
94:26:de:12:a5:d5:01:be:57:d0:04:ea:63:99:13:4f:5b:6b:
94:08:03:17:93:ba:55:eb:e7:18:d5:a1:ab:ca:65:e1:03:03:
de:89:e2:18:69:d3:22:74:64:9a:71:d3:fa:2b:f7:7a:57:cd:
4f:a3:21:57:28:84:3e:4e:91:b7:35:8d:54:b5:91:56:96:29:
79:d6:c1:83:6d:04:f2:c3:d9:7a:79:a2:f7:f5:96:37:bd:d2:
0b:61:21:6e:40:60:47:37:08:24:e7:ca:a5:86:9d:d9:fb:73:
54:d5:b2:9d:75:35:b4:a8:b8:63:b7:98:db:31:46:94:47:2b:
e7:fb:23:6c:b3:4e:bc:58:a1:79:e7:c0:02:21:84:df:eb:ae:
c0:90:d4:57:b6:84:80:cd:84:f6:e4:ad:26:a3:58:36:f8:8f:
27:87:8c:2c:56:8a:0c:20:21:59:e5:48:52:07:34:d2:7b:be:
92:3c:1b:cc:a7:f9:80:aa:b5:a0:45:65:af:34:4a:55:81:82:
17:db:cb:e7:e7:b5:fe:94:81:5c:cd:eb:4a:7b:3b:2c:eb:19:
36:97:bb:fe:a7:44:7f:4b:63:9a:4e:16:d4:ba:73:fe:8f:f5:
f8:66:bd:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:44:30 2026 by rpki-client