Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gngdZJho437U_Psd5vLEx_M_7h8.roa
File: gngdZJho437U_Psd5vLEx_M_7h8.roa (raw, json)
Hash identifier: 7PzmfbPDz0GXbdVuTJ0vOxbbY03tZz2u9r6WmBnoPOw=
Subject key identifier: 82:78:1D:64:98:68:E3:7E:D4:FC:FB:1D:E6:F2:C4:C7:F3:3F:EE:1F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A023AB13CCD9E0D54FAF1907E8584FDE3E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gngdZJho437U_Psd5vLEx_M_7h8.roa
Signing time: Fri 21 Aug 2026 09:33:29 +0000
ROA not before: Fri 21 Aug 2026 09:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 267978
IP address blocks: 151.247.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:ab:13:cc:d9:e0:d5:4f:af:19:07:e8:58:4f:de:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 21 09:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82781d649868e37ed4fcfb1de6f2c4c7f33fee1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:98:63:40:8b:da:b8:fa:b9:a3:28:44:9f:1a:
0a:db:d8:72:7c:29:25:58:73:9c:53:0d:b1:b2:1d:
91:e4:ed:4c:d9:82:ba:29:56:1a:a3:a8:fe:a7:85:
59:c2:ee:aa:27:23:38:17:0e:4e:be:93:66:96:ba:
44:a6:a3:91:85:36:6f:b4:6b:6b:db:03:a3:0d:4e:
a5:1d:70:8a:6d:fe:b9:9f:7c:bd:93:74:f9:aa:60:
a3:9e:d6:28:d7:41:6f:22:8d:9c:ec:bf:f3:52:37:
33:c0:f4:31:d3:cd:20:a3:ba:bc:17:b0:ff:db:ca:
9f:3d:00:56:f4:c6:b7:83:6c:f9:c5:bf:d3:d2:42:
2b:9a:b6:06:05:1c:7b:e6:7e:f6:84:cd:c9:dc:a4:
fb:8d:87:38:b0:d7:08:fd:4b:8a:66:b6:8d:0f:c1:
f9:03:6b:36:e4:3e:dc:9a:9c:de:b2:9c:df:68:76:
2b:14:fd:e0:1d:b5:a6:f6:b8:dc:74:18:7e:c7:20:
a9:d8:eb:89:f9:b3:32:52:dc:65:7a:7d:ad:d1:6d:
2f:72:6c:3f:6a:b7:d4:55:5d:1a:d1:44:3b:2d:e5:
0f:a5:3d:81:0e:17:40:b5:3c:e8:9b:cb:de:98:70:
a0:c4:32:80:c9:77:fe:20:e7:77:27:88:a5:2c:e7:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:78:1D:64:98:68:E3:7E:D4:FC:FB:1D:E6:F2:C4:C7:F3:3F:EE:1F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gngdZJho437U_Psd5vLEx_M_7h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d0:9b:07:d8:bb:f7:27:2a:1f:9c:fc:52:04:67:0a:c0:a0:
73:08:35:d2:0c:4f:1e:29:7c:a5:49:ff:d6:b8:04:90:64:29:
33:8e:b0:3e:17:11:af:af:c2:5c:6f:d4:0c:df:8c:7d:1a:2e:
b5:ef:a6:50:46:00:e4:ff:b1:fe:ca:24:fe:3e:bb:2b:57:33:
d9:a0:b4:93:f3:d0:22:72:cd:c4:da:53:71:b7:6e:cb:76:51:
42:29:10:e7:44:5f:f5:e9:51:51:2d:c1:e7:87:c2:e5:73:7f:
8a:5b:17:9e:88:cb:61:2a:af:07:22:ee:84:d4:f0:26:36:7d:
58:87:04:9f:41:82:f6:7e:b6:22:05:ad:a5:a8:4f:a8:d3:2b:
74:05:af:57:22:9e:d5:93:78:82:ad:1d:26:1b:bd:16:30:66:
ea:7c:1b:28:0e:a3:f6:48:5f:bb:14:23:22:b7:5b:a5:3b:1d:
8a:00:1e:75:2b:5c:78:f8:fe:b6:b7:55:65:cb:ec:85:07:77:
96:c7:b5:49:76:b9:64:58:5a:8c:62:49:29:af:47:68:2b:f0:
54:de:91:7a:e3:16:1b:97:82:4b:32:bf:b2:a8:c4:70:30:0d:
6c:d1:66:08:17:c3:96:ab:20:06:33:99:fb:ae:2a:ff:b3:f4:
8e:59:3c:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAjqxPM2eDVT68ZB+hYT94+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODIxMDkzMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Mjc4MWQ2NDk4NjhlMzdlZDRmY2ZiMWRlNmYyYzRjN2YzM2ZlZTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzphjQIvauPq5oyhEnxoK29hyfCkl
WHOcUw2xsh2R5O1M2YK6KVYao6j+p4VZwu6qJyM4Fw5OvpNmlrpEpqORhTZvtGtr
2wOjDU6lHXCKbf65n3y9k3T5qmCjntYo10FvIo2c7L/zUjczwPQx080go7q8F7D/
28qfPQBW9Ma3g2z5xb/T0kIrmrYGBRx75n72hM3J3KT7jYc4sNcI/UuKZraND8H5
A2s25D7cmpzespzfaHYrFP3gHbWm9rjcdBh+xyCp2OuJ+bMyUtxlen2t0W0vcmw/
arfUVV0a0UQ7LeUPpT2BDhdAtTzom8vemHCgxDKAyXf+IOd3J4ilLOdNvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIJ4HWSYaON+1Pz7HebyxMfzP+4fMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZ25nZFpKaG80MzdVX1BzZDV2TEV4X01fN2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/eQMA0G
CSqGSIb3DQEBCwUAA4IBAQB70JsH2Lv3JyofnPxSBGcKwKBzCDXSDE8eKXylSf/W
uASQZCkzjrA+FxGvr8Jcb9QM34x9Gi6176ZQRgDk/7H+yiT+PrsrVzPZoLST89Ai
cs3E2lNxt27LdlFCKRDnRF/16VFRLcHnh8Llc3+KWxeeiMthKq8HIu6E1PAmNn1Y
hwSfQYL2frYiBa2lqE+o0yt0Ba9XIp7Vk3iCrR0mG70WMGbqfBsoDqP2SF+7FCMi
t1ulOx2KAB51K1x4+P62t1Vly+yFB3eWx7VJdrlkWFqMYkkpr0doK/BU3pF64xYb
l4JLMr+yqMRwMA1s0WYIF8OWqyAGM5n7rir/s/SOWTzV
-----END CERTIFICATE-----
Generated at Fri Sep 25 00:30:08 2026 by rpki-client