Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S_Xas4PoOcOg10gVDmjJz7_1HNw.roa
File: S_Xas4PoOcOg10gVDmjJz7_1HNw.roa (raw, json)
Hash identifier: HSnxZ7VF0w5e/1zdrk39y4S7XszQrSC59Y25xvUNMxA=
Subject key identifier: 4B:F5:DA:B3:83:E8:39:C3:A0:D7:48:15:0E:68:C9:CF:BF:F5:1C:DC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF8BB7420BDDDAFDE16533D230CFE4B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S_Xas4PoOcOg10gVDmjJz7_1HNw.roa
Signing time: Thu 23 Jul 2026 07:55:16 +0000
ROA not before: Thu 23 Jul 2026 07:55:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 151.242.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f8:bb:74:20:bd:dd:af:de:16:53:3d:23:0c:fe:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:55:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bf5dab383e839c3a0d748150e68c9cfbff51cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:23:5e:44:ba:c8:78:b4:21:90:14:f2:ff:b0:
dc:8a:05:be:b8:68:9c:16:5b:c4:f3:cf:44:4d:e4:
df:cf:cc:22:ab:b1:1a:50:71:d6:a9:8b:67:b8:f3:
f5:15:53:9b:5f:84:4a:54:b3:b9:c8:f2:67:7e:a0:
a7:42:7b:00:c0:9d:56:02:a5:43:9c:4a:74:7a:a5:
4c:d2:3f:73:f7:42:f2:f3:05:07:3f:51:fe:0e:fc:
ab:e5:92:6b:f4:f2:1b:c9:bc:0c:64:e7:88:3e:09:
b0:ad:42:6b:68:7f:18:47:66:5a:18:32:0b:95:bd:
6a:93:e3:f3:11:f3:ad:21:aa:47:72:b2:f9:76:f7:
8e:7d:f3:ec:39:e1:7b:7b:83:c3:7a:32:fb:79:ba:
c6:7c:1c:49:f6:53:08:2e:ff:31:03:0a:b8:2b:50:
e8:64:be:01:27:06:39:7d:2d:fd:c5:91:d0:8f:a5:
85:68:e2:93:8e:0a:8c:af:98:6d:0a:7b:49:99:33:
01:9f:72:55:9d:bf:5f:6a:a2:30:48:2b:bf:e9:ca:
80:b0:9a:bf:c9:9f:02:09:9a:72:1c:ed:57:62:cc:
d9:51:48:f6:c1:0a:25:07:c0:0c:d7:f3:86:12:73:
b0:77:39:1e:82:e4:34:0b:b4:40:fe:49:e7:6b:1d:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F5:DA:B3:83:E8:39:C3:A0:D7:48:15:0E:68:C9:CF:BF:F5:1C:DC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S_Xas4PoOcOg10gVDmjJz7_1HNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:8b:a8:d7:96:f4:ac:05:1b:1e:92:23:d5:2b:42:45:32:0f:
06:3f:ce:81:dd:30:08:69:c2:2a:e6:51:48:57:85:90:ba:48:
56:45:8d:30:25:32:c6:f0:c5:41:86:49:e8:e9:e4:3a:77:43:
19:b4:18:54:46:89:25:3e:fb:02:4f:a8:cd:2f:77:36:2e:14:
51:51:94:51:d1:f0:9b:15:f0:fb:53:d7:24:7b:97:5f:f5:87:
de:bf:df:2b:60:81:71:a8:08:f4:7c:f4:55:5a:b0:fb:2c:aa:
6b:04:8a:e6:50:56:09:ae:ce:7d:a3:11:f5:d8:55:2e:c7:99:
25:c2:2e:ee:3d:4e:00:ed:91:1a:f1:b2:c6:f7:5f:a8:03:31:
f7:7d:80:1a:57:a5:4a:ed:8e:e7:1a:96:86:c8:95:90:7e:3c:
95:d6:ae:d6:03:21:92:3f:8d:4f:bb:91:e4:0d:e8:21:02:ae:
67:f1:86:ed:69:c9:eb:d3:1b:7a:f0:ba:d3:73:1d:86:5e:97:
eb:bc:4f:63:cc:7e:ee:c9:3c:d7:80:72:f8:d6:fb:0c:3c:9c:
5c:11:8e:61:26:16:19:86:f1:ac:e5:c6:55:ff:92:2e:c4:75:
95:6e:a6:44:e1:ae:87:29:84:d3:cf:f1:b9:9e:d9:0b:0c:ff:
22:39:ef:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:45 2026 by rpki-client