Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6FWDbuTyPNHrJjFyifZK_siHUw.roa
File: i6FWDbuTyPNHrJjFyifZK_siHUw.roa (raw, json)
Hash identifier: t1HK2L6a43gVbs4V1qNbMEGlDd0e13ydjGmMKX7mZKo=
Subject key identifier: 8B:A1:56:0D:BB:93:C8:F3:47:AC:98:C5:CA:27:D9:2B:FB:22:1D:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CF24C973D727F728AE3A79BBFD8C0C06E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6FWDbuTyPNHrJjFyifZK_siHUw.roa
Signing time: Sun 15 Mar 2026 16:20:31 +0000
ROA not before: Sun 15 Mar 2026 16:20:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202828
IP address blocks: 151.247.0.0/24 maxlen: 24
151.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:4c:97:3d:72:7f:72:8a:e3:a7:9b:bf:d8:c0:c0:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 15 16:20:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ba1560dbb93c8f347ac98c5ca27d92bfb221d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:9c:5a:c6:18:7d:df:13:e8:ef:15:be:45:
95:62:bc:a2:fa:60:88:f7:96:20:c4:c7:2b:37:8c:
1f:aa:93:ef:65:d1:89:57:e3:db:ca:68:ab:55:6c:
bd:ed:18:6d:dd:43:93:be:86:dd:a6:ac:18:6d:0a:
04:09:a8:1c:9c:31:26:57:16:aa:ee:ab:ab:48:83:
6c:9a:f3:77:e6:eb:db:cf:4d:7b:8c:85:ce:f4:65:
7f:df:39:33:a0:38:3a:1c:f1:12:61:5e:3e:64:be:
8f:7d:4d:33:ba:f7:52:25:c4:fd:fd:07:50:71:0f:
24:44:1d:dc:c8:d6:f8:c0:95:84:75:4f:11:1d:40:
4a:7f:04:fc:bc:6c:01:b1:14:62:41:09:55:ea:0e:
d1:6e:c6:8b:23:b4:f2:9c:72:a6:51:66:2d:6b:8a:
61:af:fe:39:e0:18:ed:31:e8:ea:eb:09:c6:44:77:
2f:b1:55:a3:68:19:33:d7:bd:8c:c1:72:de:62:41:
cf:10:79:5a:09:bb:b0:77:94:99:1c:61:39:de:de:
24:3f:97:7d:90:7b:de:eb:5c:00:c4:75:75:fc:f4:
c2:36:23:65:26:cc:9a:a4:68:ff:3d:00:85:ee:f8:
1f:ba:4f:9a:33:5f:fd:d2:5e:ba:e9:5a:23:a7:02:
4c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A1:56:0D:BB:93:C8:F3:47:AC:98:C5:CA:27:D9:2B:FB:22:1D:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/i6FWDbuTyPNHrJjFyifZK_siHUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.0.0/23
Signature Algorithm: sha256WithRSAEncryption
4f:c2:39:32:3a:1d:d3:db:a1:da:92:88:ce:cd:b9:19:7d:ae:
d2:6f:93:eb:3a:b1:a4:02:5b:2c:ee:76:53:60:d9:35:b8:25:
25:3a:89:8c:de:36:5b:82:b5:a4:7c:08:38:f0:a4:66:f9:06:
b9:ae:9d:c4:0c:ee:b7:a5:00:76:00:7f:94:1b:24:ee:bb:0a:
74:bd:e2:90:d0:fb:b0:3e:4c:70:b1:b4:b1:0d:46:fc:13:cd:
57:bf:93:3a:08:68:30:18:0d:f6:ed:c6:fa:c4:1d:40:82:d7:
23:fa:b1:64:de:37:f1:a7:cc:04:12:de:9c:4a:54:e2:8a:29:
f1:5e:8a:9f:b7:f9:99:a2:32:56:43:79:a5:c3:94:71:3f:58:
94:3a:6b:67:54:fb:6e:b4:b0:a7:88:b6:19:4e:67:03:3a:4a:
79:f4:66:c0:28:6e:22:16:d9:c3:e3:c7:c3:33:08:16:aa:3b:
c0:c7:60:76:aa:11:2e:b4:60:ca:f4:15:15:10:48:bd:d4:41:
12:14:86:10:56:1f:81:d7:d2:35:73:80:2a:bb:08:5b:e1:91:
54:c0:a6:e9:9d:5b:23:9a:11:f9:19:3a:12:72:06:9b:6b:91:
42:26:21:00:0b:3c:36:20:bd:18:c8:dc:06:38:45:50:27:cb:
2f:c1:65:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzyTJc9cn9yiuOnm7/YwMBuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzE1MTYyMDMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmExNTYwZGJiOTNjOGYzNDdhYzk4YzVjYTI3ZDkyYmZiMjIxZDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVecWsYYfd8T6O8VvkWVYryi+mCI
95YgxMcrN4wfqpPvZdGJV+PbymirVWy97Rht3UOTvobdpqwYbQoECagcnDEmVxaq
7qurSINsmvN35uvbz017jIXO9GV/3zkzoDg6HPESYV4+ZL6PfU0zuvdSJcT9/QdQ
cQ8kRB3cyNb4wJWEdU8RHUBKfwT8vGwBsRRiQQlV6g7RbsaLI7TynHKmUWYta4ph
r/454BjtMejq6wnGRHcvsVWjaBkz172MwXLeYkHPEHlaCbuwd5SZHGE53t4kP5d9
kHve61wAxHV1/PTCNiNlJsyapGj/PQCF7vgfuk+aM1/90l666VojpwJMvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIuhVg27k8jzR6yYxcon2Sv7Ih1MMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaTZGV0RidVR5UE5IckpqRnlpZlpLX3NpSFV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBl/cAMA0G
CSqGSIb3DQEBCwUAA4IBAQBPwjkyOh3T26HakojOzbkZfa7Sb5PrOrGkAlss7nZT
YNk1uCUlOomM3jZbgrWkfAg48KRm+Qa5rp3EDO63pQB2AH+UGyTuuwp0veKQ0Puw
PkxwsbSxDUb8E81Xv5M6CGgwGA327cb6xB1Agtcj+rFk3jfxp8wEEt6cSlTiiinx
Xoqft/mZojJWQ3mlw5RxP1iUOmtnVPtutLCniLYZTmcDOkp59GbAKG4iFtnD48fD
MwgWqjvAx2B2qhEutGDK9BUVEEi91EESFIYQVh+B19I1c4Aquwhb4ZFUwKbpnVsj
mhH5GToScgaba5FCJiEACzw2IL0YyNwGOEVQJ8svwWW4
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:40:08 2026 by rpki-client