Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cWDkp8isQsv2P95JuhjBSddWUEo.roa
File: cWDkp8isQsv2P95JuhjBSddWUEo.roa (raw, json)
Hash identifier: l//yfS8P15DIXVTrarz8OchUlyCEPqcwXNBXbruQQ9M=
Subject key identifier: 71:60:E4:A7:C8:AC:42:CB:F6:3F:DE:49:BA:18:C1:49:D7:56:50:4A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DBAB5C5EBD695BECDC0E8C6ACE4AD11B9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cWDkp8isQsv2P95JuhjBSddWUEo.roa
Signing time: Thu 23 Apr 2026 14:19:27 +0000
ROA not before: Thu 23 Apr 2026 14:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207019
IP address blocks: 151.246.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:b5:c5:eb:d6:95:be:cd:c0:e8:c6:ac:e4:ad:11:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 14:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7160e4a7c8ac42cbf63fde49ba18c149d756504a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:47:ae:19:f0:d5:2c:75:8c:2a:3d:07:b6:89:
b7:f1:c6:56:c3:60:1a:de:1d:1b:10:92:c9:86:82:
ed:d3:d4:4b:79:30:21:44:ab:50:4f:61:69:d3:03:
be:b6:ad:e5:de:34:82:1e:31:9f:cd:fa:61:ca:51:
6f:ef:d0:cf:0b:fb:b0:a3:0a:61:e3:82:e1:99:a2:
a1:20:7c:30:8c:aa:3d:29:a1:5c:e3:91:98:ab:76:
65:2a:6f:10:05:73:e4:e6:3f:1d:0c:d6:bd:4b:7d:
4b:b2:03:2a:a1:51:b4:56:c7:b1:58:dc:82:45:5a:
2f:f7:06:78:0b:d9:1f:35:73:37:30:eb:9f:b1:16:
30:36:3a:f0:c2:0b:53:9e:25:bd:81:83:ef:d5:a6:
52:34:1f:4a:6f:a2:5d:65:21:e7:94:6d:b7:bb:41:
d6:04:d7:f4:dd:86:ac:c4:b4:fc:d0:2c:98:39:be:
f9:e2:a4:ea:ee:0e:93:0c:c4:55:6f:62:26:ea:84:
e3:70:f3:f0:97:41:33:fa:c4:20:af:19:19:6e:f7:
dc:69:d6:b0:96:d5:7e:93:96:81:f2:8e:d5:c9:d5:
0a:88:33:95:98:53:23:4c:35:e8:80:06:d0:3d:6a:
01:61:07:7f:34:58:45:25:5a:52:48:ba:8c:48:fe:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:60:E4:A7:C8:AC:42:CB:F6:3F:DE:49:BA:18:C1:49:D7:56:50:4A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cWDkp8isQsv2P95JuhjBSddWUEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.152.0/24
Signature Algorithm: sha256WithRSAEncryption
40:79:e5:8e:b3:d0:78:de:ba:9d:97:6a:56:08:de:1c:23:53:
96:8e:a2:5d:fd:95:90:9c:00:52:84:33:34:0f:5f:27:a9:1c:
1a:f4:f2:fb:b2:65:5e:02:fe:95:40:8c:60:2b:04:5c:a7:cb:
9a:a2:b8:4e:d1:f0:c0:41:45:ef:f6:af:85:c1:0a:8a:b1:6f:
44:dc:33:b6:62:96:b3:08:f2:8f:57:7e:80:a2:9b:32:c1:ea:
96:6a:54:d2:fd:9a:47:60:02:02:a7:c1:ff:ec:b2:cb:da:7b:
fe:29:57:c1:be:d8:8e:32:8b:c8:1c:53:40:49:28:18:d9:5c:
e0:b4:d2:f7:c3:64:80:42:1b:cd:40:ec:a5:eb:e9:cf:e1:15:
01:ac:6b:25:14:ec:85:35:c6:73:44:b6:3b:cc:ef:36:24:1d:
35:b6:bb:0c:ef:52:25:9d:a8:a6:e1:7e:dd:18:8e:6c:46:f8:
18:3e:63:f8:1f:90:aa:8e:c2:25:1e:00:29:6c:c4:d7:aa:13:
43:b7:43:5d:42:cc:07:15:90:85:1f:f0:fe:05:92:41:d7:33:
d1:54:9f:40:39:38:4e:99:54:4b:d3:95:4b:11:27:d6:6a:7a:
1c:cc:81:07:d8:a4:1b:66:9e:e1:7f:1a:a8:f8:bd:21:e1:ed:
61:84:34:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:13:35 2026 by rpki-client