Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d1frONhSejjZjUE5iNa1J4RBNkU.roa
File: d1frONhSejjZjUE5iNa1J4RBNkU.roa (raw, json)
Hash identifier: kGKy8aOVaF6iL4wNHrRY0mVAn4ZS4O2A66pI/0WI/P4=
Subject key identifier: 77:57:EB:38:D8:52:7A:38:D9:8D:41:39:88:D6:B5:27:84:41:36:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DE21C7B62DDDCAA5BBBB53E666F105D24
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d1frONhSejjZjUE5iNa1J4RBNkU.roa
Signing time: Fri 01 May 2026 05:56:50 +0000
ROA not before: Fri 01 May 2026 05:56:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 151.242.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:1c:7b:62:dd:dc:aa:5b:bb:b5:3e:66:6f:10:5d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 1 05:56:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7757eb38d8527a38d98d413988d6b52784413645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7f:1b:77:15:ac:01:fa:09:20:e4:42:33:df:
68:3f:16:1f:77:bb:4d:9f:98:1a:67:cd:a9:5b:b0:
dc:ec:32:e7:81:f0:54:fd:ed:8b:43:a2:ed:a7:2a:
08:18:68:9d:68:98:55:fc:aa:ac:28:47:ee:29:e8:
1e:50:54:e8:de:bb:e0:fe:23:6e:e4:36:57:4c:3b:
3b:49:f2:49:df:05:49:52:d7:5c:f0:11:ce:73:e9:
b1:bf:cf:7a:66:28:e3:58:19:16:ac:ab:d0:68:b3:
19:5b:c0:5c:21:34:2b:dd:36:4f:3d:55:83:56:6e:
69:a1:bf:6c:45:82:86:f0:32:19:3b:66:53:9d:88:
14:73:b1:b8:c5:f8:f6:15:2e:b9:c5:82:98:35:f5:
82:3d:46:60:87:d8:eb:89:a9:a3:03:72:05:d3:0e:
c1:5b:cb:3a:e5:0c:dc:93:2f:0f:78:61:ec:07:3d:
82:1e:2f:b1:b6:06:67:62:bb:9d:76:91:b3:af:a5:
dc:3b:45:f0:e0:f1:9d:cb:bd:77:23:6d:41:84:62:
97:7e:da:7a:9e:bf:3b:2c:d9:1d:94:f7:15:c1:7a:
83:5f:a7:b6:f1:39:ec:8e:0a:9d:ca:19:45:d4:8b:
d1:b6:72:7c:d0:b7:9e:79:e9:0b:81:54:8a:e5:11:
b4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:57:EB:38:D8:52:7A:38:D9:8D:41:39:88:D6:B5:27:84:41:36:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d1frONhSejjZjUE5iNa1J4RBNkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.66.0/23
Signature Algorithm: sha256WithRSAEncryption
08:b3:34:0d:e2:cf:cd:5a:e7:01:ab:d4:fc:70:02:7d:bd:de:
a0:61:8d:78:c6:fe:b5:aa:83:29:49:02:93:a3:f7:20:77:b1:
be:71:9f:ad:fd:5b:ce:ee:64:f9:60:ae:20:36:0c:a7:bc:39:
21:fe:5b:73:a2:97:f0:b9:5a:89:23:4e:1d:03:42:91:13:bd:
15:57:22:44:51:58:71:d0:7d:f9:ac:67:a9:b7:75:13:7f:79:
d2:71:ac:79:fd:2c:c3:64:24:26:bb:b8:5f:2b:e8:fc:7e:ff:
70:05:d1:d9:8e:9e:91:54:c3:97:b0:75:8c:fc:a0:55:d2:55:
8d:e9:e0:e4:dd:ac:d8:f0:3d:b2:f8:48:47:3a:31:bf:45:c4:
f5:ce:36:4c:03:5c:6e:41:88:90:c6:3f:3d:97:8c:a5:83:20:
9e:87:3f:5b:bb:54:16:d5:9f:06:ef:24:06:9e:5a:26:13:e3:
43:49:1c:3a:28:6b:58:84:50:82:34:fb:a2:f4:67:2b:8d:ed:
68:62:68:e7:6b:40:4b:04:c6:0f:1d:93:39:5e:26:59:1d:9a:
32:f4:a6:34:e3:21:da:d9:db:f4:91:43:15:96:4e:d7:cb:6e:
11:2c:ec:55:5a:a6:02:b2:22:89:4a:bf:bc:fd:6b:fb:19:79:
3f:0e:6d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:04 2026 by rpki-client