Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c_S7rC2ZONTWSqehecWLqooBMn8.roa
File: c_S7rC2ZONTWSqehecWLqooBMn8.roa (raw, json)
Hash identifier: vQIcdwGVz+twStPDgDpdbdCjq8pe/xsS3ieiGeaYrwY=
Subject key identifier: 73:F4:BB:AC:2D:99:38:D4:D6:4A:A7:A1:79:C5:8B:AA:8A:01:32:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF6E7685E842AE2F7826F8CD685CBF0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c_S7rC2ZONTWSqehecWLqooBMn8.roa
Signing time: Thu 23 Jul 2026 07:53:16 +0000
ROA not before: Thu 23 Jul 2026 07:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60439
IP address blocks: 151.243.28.0/24 maxlen: 24
151.243.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f6:e7:68:5e:84:2a:e2:f7:82:6f:8c:d6:85:cb:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73f4bbac2d9938d4d64aa7a179c58baa8a01327f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:db:3c:81:76:59:30:07:65:2a:31:1f:ef:da:
56:5c:4d:a5:00:d6:cf:9d:c0:3c:55:c3:94:16:d4:
e1:f5:ba:2c:08:ca:17:24:5f:c6:8a:26:74:04:ec:
bf:b4:70:fa:77:5b:ab:d7:af:6e:5e:18:85:f9:c4:
6e:ee:05:76:93:28:7e:c9:d1:8b:fe:bf:8c:91:42:
99:75:e9:a5:8f:83:fc:82:49:e9:dd:bc:7d:b0:f2:
05:fa:eb:94:8d:19:e6:e2:62:56:a4:b5:55:e0:43:
a8:1b:91:27:4f:d7:80:07:f2:df:b2:0f:f8:3a:40:
b7:03:2d:1c:eb:ce:ef:f2:39:8b:2a:87:00:bc:bf:
20:c3:59:a5:21:0e:83:07:ab:a9:b2:25:18:09:ae:
0d:64:3a:9e:a7:4d:4e:7e:ea:f9:27:e2:68:09:63:
2d:b7:35:70:c4:b3:b0:45:36:92:59:e3:a1:77:8d:
9f:21:e7:3b:a5:21:2f:ed:fe:9c:6b:df:22:1c:8c:
c9:f0:03:ff:a0:0d:a5:38:6e:42:e3:5b:33:b5:4c:
c3:bf:a0:a9:aa:c3:f2:d5:fa:e5:2d:eb:3b:81:9c:
5d:b1:7b:ee:28:1a:3a:42:1d:83:ef:98:40:da:9d:
7f:69:8c:89:1a:2b:0c:9e:4d:7d:64:22:bc:ca:49:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F4:BB:AC:2D:99:38:D4:D6:4A:A7:A1:79:C5:8B:AA:8A:01:32:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c_S7rC2ZONTWSqehecWLqooBMn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.28.0/24
151.243.150.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:fa:3c:6b:5a:c9:9c:ba:e0:3e:35:f1:6f:4d:d7:5c:24:fd:
16:02:7d:20:b5:46:af:95:c6:47:12:74:12:e6:f9:48:db:5e:
db:8b:db:bf:64:86:6e:6f:57:cf:8f:84:15:35:8f:e5:3e:d7:
a6:18:87:01:c6:94:94:28:ab:f6:61:91:ce:78:46:a4:54:5f:
b8:3e:03:71:05:79:7b:56:61:b7:ea:e8:a9:91:e7:ef:ad:41:
92:f9:2b:3e:bb:f7:b9:ff:da:5d:d0:53:0c:c8:26:2b:a1:58:
d2:ca:ea:d1:aa:19:02:39:eb:80:2b:6f:29:78:d7:1b:fa:ba:
06:70:b9:32:f7:76:c9:40:6c:fd:5b:f2:a6:99:21:05:97:70:
4a:c1:40:cb:1c:91:65:65:6a:01:ea:37:27:71:08:27:28:4d:
a2:4e:d1:68:4a:65:c1:ac:db:a0:8e:1f:0b:7a:70:16:e0:8e:
31:62:7b:68:17:a5:77:81:0f:7b:a2:b8:77:8f:38:ee:cf:56:
2a:53:ee:4c:46:fb:a3:6a:aa:7e:b6:f1:4e:1d:3c:c3:7a:d9:
a9:23:64:5e:29:08:df:99:5c:8c:76:0c:90:2b:43:04:82:34:
11:52:3d:a2:73:35:52:11:49:9a:23:bc:d5:fa:d8:68:e1:84:
88:e2:2a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:33:08 2026 by rpki-client