Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1EOKhARslYkRxlQdyBu2T2jdv0.roa
File: b1EOKhARslYkRxlQdyBu2T2jdv0.roa (raw, json)
Hash identifier: 9PVdDuZDFkf2x2nLl5qw3vwB0ZG/emLN3GNGwWzteWw=
Subject key identifier: 6F:51:0E:2A:10:11:B2:56:24:47:19:50:77:20:6E:D9:3D:A3:76:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8A0C67EC82CC7DEB9A6C03E65FA98EDF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1EOKhARslYkRxlQdyBu2T2jdv0.roa
Signing time: Wed 22 Jul 2026 13:38:16 +0000
ROA not before: Wed 22 Jul 2026 13:38:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60602
IP address blocks: 151.242.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8a:0c:67:ec:82:cc:7d:eb:9a:6c:03:e6:5f:a9:8e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 22 13:38:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6f510e2a1011b2562447195077206ed93da376fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:89:a3:00:fb:9d:aa:94:4c:b0:37:b2:9a:
49:8c:6a:6e:a4:a0:05:d3:0e:a3:c3:7e:ef:4e:da:
41:57:da:32:50:99:50:08:33:e7:84:16:93:c6:bc:
39:01:64:89:af:3f:ad:13:7a:e2:2f:b9:b9:da:a7:
a2:5b:44:47:d4:73:8e:cb:4e:9e:5d:f6:93:93:a8:
fa:59:d3:0e:c4:6a:80:ff:b8:cf:c2:b2:dc:24:0b:
67:c6:cd:44:9e:91:a2:73:61:5a:17:c8:5a:d0:79:
0b:8b:9e:70:27:00:82:27:e1:b3:09:c5:53:30:a7:
52:1a:9d:7c:b4:1d:74:dc:d5:22:58:43:a3:71:75:
4d:50:8b:2b:99:06:61:be:3b:70:ff:0f:2e:12:c0:
08:90:43:6d:ff:f6:f0:76:64:9e:2a:65:27:4f:29:
07:8a:39:77:4a:26:a3:1a:c7:f1:d0:a5:38:f8:e2:
ba:88:29:75:a7:f1:db:75:39:93:8c:d2:f8:a0:30:
6f:27:39:8b:19:7d:7f:0a:ed:ff:80:2a:e4:74:19:
2b:9f:29:3c:cb:e7:67:fa:5d:98:4f:40:17:2d:67:
65:d2:98:b7:8f:f7:f3:52:c0:21:65:95:b1:8e:8f:
03:16:4e:ea:88:d5:ee:f1:74:b0:14:1a:e9:a5:96:
7e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:51:0E:2A:10:11:B2:56:24:47:19:50:77:20:6E:D9:3D:A3:76:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/b1EOKhARslYkRxlQdyBu2T2jdv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.157.0/24
Signature Algorithm: sha256WithRSAEncryption
13:70:e2:40:7e:6f:ef:b3:73:f1:a4:92:7b:d5:2e:59:e4:b5:
f3:10:77:c8:60:7f:3c:2d:25:e0:e2:9a:4c:6b:96:f1:fa:b5:
0b:c2:2e:c0:37:38:a2:29:a6:ac:72:7c:c4:73:27:a7:7c:a3:
d7:c0:d4:8d:0f:af:d5:b6:92:38:82:f0:d7:87:0f:0f:82:4c:
af:dc:ba:e7:34:66:3a:63:5e:39:cc:7a:f2:36:81:f9:a5:1e:
82:59:8d:3c:2e:b9:30:c7:69:e9:8f:3e:60:33:9e:f4:ae:95:
46:b2:97:91:62:c3:83:02:a7:22:d1:1e:25:5b:73:d9:fb:e0:
ac:53:26:9a:5b:d5:1e:85:ee:d8:f7:b6:14:90:94:8c:69:48:
79:ca:5c:ae:40:ba:fe:9e:91:1d:15:56:79:9a:96:44:bb:23:
0c:6a:a7:5e:77:78:cd:8d:de:3f:c2:85:44:c4:8d:c9:8b:9a:
9d:87:89:2c:95:c0:f1:e0:a1:97:02:96:15:f8:ad:6b:66:42:
35:69:e7:82:f0:12:b5:f1:b3:18:ae:ad:bc:42:de:01:a2:b7:
27:d0:38:20:de:c3:cf:d3:7b:f5:29:1b:3b:9e:a3:1b:38:6d:
c5:fe:2b:ba:9c:29:17:7f:00:1b:64:c1:ce:37:14:78:d9:37:
a9:4f:e8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:46 2026 by rpki-client