Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQ3mSH30gcZGYaxrvipvpqQ9vwU.roa
File: fQ3mSH30gcZGYaxrvipvpqQ9vwU.roa (raw, json)
Hash identifier: u6Ao0Vc6GGlGNbj9pHKsBfEk2JPhmh09/MfcqNrdXis=
Subject key identifier: 7D:0D:E6:48:7D:F4:81:C6:46:61:AC:6B:BE:2A:6F:A6:A4:3D:BF:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF7D030502B9BAEB44F8511455CDE72
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQ3mSH30gcZGYaxrvipvpqQ9vwU.roa
Signing time: Thu 23 Jul 2026 07:54:15 +0000
ROA not before: Thu 23 Jul 2026 07:54:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214143
IP address blocks: 151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.243.23.0/24 maxlen: 24
151.243.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f7:d0:30:50:2b:9b:ae:b4:4f:85:11:45:5c:de:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:54:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d0de6487df481c64661ac6bbe2a6fa6a43dbf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ee:ee:d1:7f:14:9e:b1:e8:d9:c7:a3:8b:4c:
fe:95:43:e4:7f:10:8a:3d:a3:86:75:bf:de:2d:31:
68:de:95:75:f0:3d:39:f0:7c:f3:2b:da:73:ff:03:
0d:3d:f2:37:44:5c:01:46:4b:0b:38:6b:65:88:bc:
a0:2d:dc:8b:22:e1:58:d9:ce:66:5a:d3:55:4f:cb:
f1:5c:db:0d:5a:39:98:47:0f:01:f6:28:43:36:09:
0a:32:8f:4f:f4:74:90:4c:a4:3f:38:9b:2c:44:f1:
19:a5:ef:f7:f8:2c:dc:44:dd:36:9c:d6:77:07:35:
52:e1:14:d5:da:79:05:f1:45:f3:1a:56:a8:74:bb:
fc:40:13:d4:36:8f:c7:62:31:ab:3f:82:bb:b4:1d:
69:88:ca:c6:76:92:d7:6e:c4:4e:a1:8f:90:19:b8:
64:f2:2d:26:f1:cd:4f:2b:64:c8:f9:ba:8a:c9:7e:
18:41:0e:53:73:d4:45:11:c6:b1:de:8f:a6:8a:97:
87:48:a4:2d:78:69:22:51:bf:72:08:88:cd:99:7c:
04:3c:9b:ed:f7:54:d3:21:c4:92:09:e5:65:82:70:
67:f7:fe:a3:35:1a:be:08:28:15:33:da:de:54:4c:
20:66:98:e6:0e:a0:8b:c2:63:d5:71:88:7d:2a:b0:
60:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0D:E6:48:7D:F4:81:C6:46:61:AC:6B:BE:2A:6F:A6:A4:3D:BF:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fQ3mSH30gcZGYaxrvipvpqQ9vwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.9.0/24
151.241.11.0/24
151.243.23.0/24
151.243.42.0/24
Signature Algorithm: sha256WithRSAEncryption
97:22:69:21:9f:f4:33:8b:51:6f:68:67:59:31:84:4b:27:26:
d9:c9:ae:74:0c:c2:2a:bf:db:b8:75:ad:7a:cb:61:d3:40:97:
fa:21:21:f3:da:01:bc:ef:e7:c3:41:16:39:84:60:56:b5:5f:
6d:4c:02:37:3f:05:1d:57:ae:0d:0e:db:c1:ab:97:60:9e:6f:
24:5f:d1:83:d8:19:f0:c4:84:e3:0a:b2:9b:06:48:08:6f:b0:
9a:f6:39:09:65:aa:75:86:07:56:10:df:6b:ae:04:5e:f5:e3:
5c:27:a3:10:8a:87:23:32:e9:26:66:80:ee:be:c0:39:81:34:
c2:94:12:7e:8f:dd:af:9b:56:ea:92:61:e3:7f:a2:0e:16:74:
95:9a:d3:f6:35:09:59:ae:88:ef:07:c1:04:a5:86:7b:68:73:
41:e4:fa:cf:87:84:e3:f2:66:20:52:32:57:e3:52:ac:10:6c:
73:c6:e6:f1:07:de:3c:68:10:fb:2c:70:28:e9:63:33:4c:20:
73:a2:2d:47:08:a0:94:02:68:33:7b:5e:8e:92:df:78:5a:05:
e6:76:d2:cd:a6:0f:69:3b:65:79:10:a4:a4:ad:d0:37:65:e7:
73:dc:aa:7b:0e:48:87:3e:bb:e2:ea:3a:c3:60:22:79:19:af:
5c:ce:b2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:01 2026 by rpki-client