Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Toh_qlLaCV7p9RyhB8EBxkvTyHM.roa
File: Toh_qlLaCV7p9RyhB8EBxkvTyHM.roa (raw, json)
Hash identifier: OS2SVLWicwxTr3mn4JKVhTfYqUgCcxJ3V6WBblzmKLI=
Subject key identifier: 4E:88:7F:AA:52:DA:09:5E:E9:F5:1C:A1:07:C1:01:C6:4B:D3:C8:73
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D29253FF42366FFA8B35F6E8FFBDE4307
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Toh_qlLaCV7p9RyhB8EBxkvTyHM.roa
Signing time: Thu 26 Mar 2026 07:56:40 +0000
ROA not before: Thu 26 Mar 2026 07:56:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 37.202.212.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:25:3f:f4:23:66:ff:a8:b3:5f:6e:8f:fb:de:43:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 07:56:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e887faa52da095ee9f51ca107c101c64bd3c873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9d:39:c5:7f:60:6d:d2:c7:a3:74:6e:00:5e:
8b:c6:6e:e6:7c:a1:fc:c9:de:69:76:f8:ac:29:7c:
e7:46:bb:9a:a0:38:c0:88:e7:3b:b0:dd:ae:df:98:
31:4c:f8:82:d9:10:c4:bf:a9:cb:77:46:a1:4f:19:
4c:4d:35:4b:3b:5d:37:04:63:69:13:25:15:72:26:
5e:30:33:84:02:09:58:57:c0:ee:6b:34:16:c5:5d:
89:79:70:c6:1a:4a:07:af:ff:0d:27:9d:ec:73:8c:
6b:5e:69:db:b8:d0:ab:47:7d:f9:db:be:0f:b6:81:
7c:fa:0e:0d:4e:15:cd:be:68:ed:b0:00:57:ff:c5:
73:16:64:3e:b3:c5:6e:50:87:53:49:c5:51:59:f0:
41:37:5b:7e:7a:bd:b9:e9:5d:c5:c2:7a:02:93:da:
41:54:d9:c4:4e:f9:a8:d0:33:10:95:be:9b:20:e6:
0a:93:9a:72:94:28:e4:bf:f7:03:cc:ec:78:7f:de:
d0:94:e6:90:81:bd:a3:d7:3a:e3:df:27:08:72:f3:
6b:0f:be:a9:1b:84:6f:c6:06:05:87:5b:33:12:78:
b6:65:06:a4:95:12:b2:96:fd:05:9e:fd:00:e6:0d:
18:c7:26:30:e4:9a:f5:34:7c:6b:40:37:1c:41:30:
38:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:88:7F:AA:52:DA:09:5E:E9:F5:1C:A1:07:C1:01:C6:4B:D3:C8:73
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Toh_qlLaCV7p9RyhB8EBxkvTyHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.212.0/24
151.240.147.0/24
151.244.48.0/24
Signature Algorithm: sha256WithRSAEncryption
61:78:7f:23:87:f6:58:c3:51:12:05:80:6c:42:a7:7e:e5:14:
cf:b2:5c:03:a2:8f:68:67:d1:79:25:dd:58:bd:cf:fe:17:05:
91:83:79:cd:8e:3f:04:e7:ba:0b:5a:e5:4e:7c:fb:f8:13:58:
80:87:74:8b:96:1d:b4:db:76:b1:ad:2d:2a:66:11:e9:c5:63:
f0:dc:f8:f8:0d:00:e2:dd:17:8b:1b:bd:6a:78:53:c4:da:01:
be:ee:69:f6:88:da:2b:88:e8:8e:b8:8a:66:76:0c:4d:f7:ac:
d3:2c:8d:ef:b6:61:ad:cf:db:59:ab:bb:b9:75:35:63:b1:81:
b8:1d:bb:66:a7:00:2c:1e:d3:17:42:78:d2:db:f9:41:e7:9d:
5b:bf:43:b1:e3:81:aa:31:d2:c0:fb:38:91:f1:6c:7d:a7:01:
7f:d2:60:b1:cd:9a:c8:53:2c:ae:5e:38:b9:a8:9e:e2:e7:dd:
7d:0a:29:42:2d:80:0c:54:7c:ea:d8:fa:fb:8e:c2:91:93:0f:
9d:73:0e:af:96:fd:3a:de:ba:4e:8f:17:d2:64:35:a0:7c:91:
b0:01:1c:3f:30:90:b6:bc:a9:72:87:37:27:51:e5:bb:8c:f0:
65:26:f2:7d:cf:c6:7e:67:3b:a1:a4:17:73:a8:65:38:e3:9c:
f8:30:5e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:00:08 2026 by rpki-client