Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hHwVbYy2fPkc5vvLbHQv0WbIwOo.roa
File: hHwVbYy2fPkc5vvLbHQv0WbIwOo.roa (raw, json)
Hash identifier: JImFt6zDieFzwupuYCcrHF/I6vTritZGVyR3IbAEhk4=
Subject key identifier: 84:7C:15:6D:8C:B6:7C:F9:1C:E6:FB:CB:6C:74:2F:D1:66:C8:C0:EA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A070B590EF67C4724E7F869EA11805107F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hHwVbYy2fPkc5vvLbHQv0WbIwOo.roa
Signing time: Sat 05 Sep 2026 08:35:42 +0000
ROA not before: Sat 05 Sep 2026 08:35:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2144983
IP address blocks: 151.247.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:b5:90:ef:67:c4:72:4e:7f:86:9e:a1:18:05:10:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 5 08:35:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=847c156d8cb67cf91ce6fbcb6c742fd166c8c0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:dc:ec:1f:95:bf:cb:cb:70:9b:a2:d4:e0:2e:
f5:f4:10:16:fd:90:c6:49:31:0e:4c:56:10:da:00:
0e:27:78:05:92:ae:89:60:5f:d6:e4:25:a0:03:5b:
3e:0c:8b:94:c3:95:86:97:aa:e8:88:f3:eb:a0:19:
b5:b5:c1:ce:a3:48:9b:2b:85:ca:b8:6d:47:af:58:
dc:95:8f:bb:35:bf:7b:a9:51:24:6a:94:f3:89:97:
5d:60:2e:97:2b:a8:7c:01:51:46:25:f5:91:4b:69:
a2:ce:9a:62:fc:65:6c:9e:cc:b3:fc:4e:3f:da:df:
3c:f1:a5:63:c3:df:43:42:1a:03:28:9e:13:2a:68:
9e:cd:14:1b:0e:fe:4b:10:eb:58:f1:89:0a:6d:fe:
ba:b1:ec:17:20:43:5f:19:ac:18:c7:55:0d:a0:10:
c7:75:41:12:aa:8a:62:60:c6:66:d9:82:5d:74:af:
8a:56:98:c0:19:51:11:fd:30:b3:ba:0d:2b:41:b9:
36:e0:1c:9f:2a:41:8a:65:fa:ec:32:cf:54:9a:25:
de:6e:f1:63:1b:bf:aa:54:34:87:a4:d3:0c:90:1b:
75:6a:3f:29:c2:25:14:16:c4:bd:2c:10:da:f3:3c:
f3:47:08:3a:de:c0:45:87:78:3f:76:80:cc:5d:82:
43:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:15:6D:8C:B6:7C:F9:1C:E6:FB:CB:6C:74:2F:D1:66:C8:C0:EA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hHwVbYy2fPkc5vvLbHQv0WbIwOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.89.0/24
Signature Algorithm: sha256WithRSAEncryption
98:83:e5:5a:96:8d:41:22:24:6c:a7:40:f8:e4:b8:1b:1a:a2:
9c:29:1e:13:bf:65:db:68:56:00:7a:46:dc:ce:7b:4a:d6:78:
38:59:28:a1:ea:fd:60:4f:a2:34:32:d2:a7:3d:a1:36:28:3c:
29:46:b1:08:0a:19:54:86:cf:d0:7d:5f:79:ca:9d:ef:ff:5f:
c3:31:24:1b:a9:93:15:a1:74:fb:fe:b5:15:16:34:c0:ee:b0:
da:a9:15:31:5a:7c:f5:bc:72:23:69:e1:17:7f:8d:a3:fc:08:
81:0d:8d:17:3b:7e:49:9a:57:af:90:56:21:d2:c4:8c:7e:26:
a6:87:32:79:97:56:26:bf:a3:aa:d5:e2:aa:8b:23:51:df:64:
30:31:fc:a6:85:b4:d1:9c:56:a9:eb:d8:ca:80:01:3e:35:3f:
37:e6:9e:f0:11:9e:9e:71:19:c7:1f:51:ff:f2:bc:ce:b0:8a:
c5:3a:51:ad:e2:b3:5d:19:5b:b0:c8:fe:59:8c:88:ee:04:b0:
c7:a2:ed:2b:a5:6b:fa:d0:be:fa:c7:c3:97:22:8d:01:ae:5c:
9d:ca:c2:71:a4:70:64:8b:22:fa:b0:54:85:88:0d:5f:98:91:
17:2a:75:bd:5a:ba:32:f0:47:a8:71:4f:a9:09:a6:89:b4:69:
7b:43:59:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:44:01 2026 by rpki-client