Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmNIlzyVc_nay4YLFWM2V1JY5oQ.roa
File: gmNIlzyVc_nay4YLFWM2V1JY5oQ.roa (raw, json)
Hash identifier: WsAVFXIG34KtzXrij8hbUcNbZZLP19713KcH0LVGxhY=
Subject key identifier: 82:63:48:97:3C:95:73:F9:DA:CB:86:0B:15:63:36:57:52:58:E6:84
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D854406DA92A1265ECF9880C68ABB1A1F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmNIlzyVc_nay4YLFWM2V1JY5oQ.roa
Signing time: Mon 13 Apr 2026 05:15:21 +0000
ROA not before: Mon 13 Apr 2026 05:15:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199149
IP address blocks: 151.246.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:85:44:06:da:92:a1:26:5e:cf:98:80:c6:8a:bb:1a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 13 05:15:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=826348973c9573f9dacb860b156336575258e684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a6:50:8b:ca:f8:44:0f:69:ee:2f:a0:6f:3d:
b7:d1:01:04:dc:be:04:09:d7:26:59:49:02:f0:df:
00:1c:41:63:56:14:1c:ba:02:b3:2d:6b:58:ab:1c:
9e:19:0f:9c:81:b2:8a:d5:a5:f3:4e:09:09:da:42:
cc:95:d5:1f:14:88:2c:45:43:c8:dd:80:11:6b:2b:
6b:5c:df:e2:d5:04:d9:98:58:38:0b:71:95:a9:1f:
52:84:85:1f:bc:f6:f8:0d:e6:30:d6:7d:d5:f6:94:
23:a4:d5:e6:ee:bb:a4:b2:fe:fd:56:69:ed:4e:c3:
af:51:be:1a:3e:73:f9:1f:ec:fd:29:81:6f:59:80:
62:f2:14:93:a2:16:cd:8e:9d:23:5b:1f:f4:5c:67:
ad:a5:49:cc:3d:1e:bf:b6:d4:2b:ed:07:db:ca:e3:
8e:ee:e7:77:7a:ce:19:1d:db:4f:d2:b6:a2:06:24:
00:97:36:79:15:06:4f:8a:bf:02:5b:87:c9:e1:29:
ac:e5:5f:9a:b9:ea:9d:f0:9a:d6:cd:e2:f4:63:ec:
bb:16:e8:c9:c3:63:88:88:57:71:18:0d:5f:db:2d:
c6:77:f9:df:cf:bf:80:c4:6d:51:e9:76:0d:e5:57:
da:27:24:93:b0:6a:1f:90:fe:11:84:8c:e0:2d:dd:
46:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:63:48:97:3C:95:73:F9:DA:CB:86:0B:15:63:36:57:52:58:E6:84
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gmNIlzyVc_nay4YLFWM2V1JY5oQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:24:56:11:89:76:e5:23:f7:f6:04:d6:2d:a2:3c:e9:2a:82:
c0:cb:18:f5:99:85:87:b8:4d:b6:74:b7:ec:d6:33:3d:cc:b3:
e0:4d:08:9a:73:84:3c:71:4f:84:7f:cc:c4:cc:75:13:6c:32:
dc:22:1e:50:42:d2:51:e9:21:8c:03:0f:2e:fe:ad:bb:43:06:
dc:fa:72:86:7f:3b:7d:95:b4:4f:db:7f:5b:24:97:4c:89:9c:
db:25:44:6a:be:90:b8:a4:9e:b2:34:c1:8d:16:c3:5b:f9:12:
cf:e5:38:53:a1:08:02:57:02:14:19:9e:69:67:1f:2d:14:bf:
ed:48:ec:b5:24:d1:89:8f:4d:dd:2e:2c:16:13:2c:d8:83:83:
01:6f:7f:57:45:fb:3c:e7:69:78:27:bb:45:80:ca:44:4f:66:
72:01:df:2f:11:92:3b:c6:ac:8f:4f:a9:cb:e4:ff:d4:2e:44:
4a:e2:9a:ca:be:2c:0c:83:74:41:78:4f:51:5f:4e:1f:64:00:
89:34:84:6a:e5:f3:8d:9e:3f:c4:9b:c6:a0:8c:d2:0b:f9:d6:
53:f8:3e:04:24:4b:97:8b:70:1c:e0:99:7a:f5:5c:c3:82:85:
31:62:b1:dd:a1:5a:b8:65:b9:bc:7d:7b:c0:8b:93:b5:ac:ef:
5b:1e:2f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:12 2026 by rpki-client