Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvfIoeGTO3lr-2F9GeX5MjY3IHY.roa
File: jvfIoeGTO3lr-2F9GeX5MjY3IHY.roa (raw, json)
Hash identifier: bWSinHn4FY5yMmKFpzW4cydjfUOfUNyKa5K58r1dmVg=
Subject key identifier: 8E:F7:C8:A1:E1:93:3B:79:6B:FB:61:7D:19:E5:F9:32:36:37:20:76
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1B0BBF1237C098F7F8582E220F2187591
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvfIoeGTO3lr-2F9GeX5MjY3IHY.roa
Signing time: Fri 06 Nov 2026 12:01:09 +0000
ROA not before: Fri 06 Nov 2026 12:01:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 151.247.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:bb:f1:23:7c:09:8f:7f:85:82:e2:20:f2:18:75:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 6 12:01:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef7c8a1e1933b796bfb617d19e5f93236372076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9c:a7:8a:28:97:7f:a2:7e:ac:83:85:18:f1:
ba:65:c1:b3:ec:17:bd:0f:48:5e:98:00:ec:ac:e9:
9c:8a:4d:87:d5:41:c1:ce:0b:61:72:c6:4b:65:11:
05:aa:bd:81:df:a9:a3:98:7e:b9:17:0d:94:24:8e:
32:02:a5:e3:99:b3:9c:c1:fb:35:a1:d1:9b:8a:46:
50:64:d8:6e:ec:b9:69:98:12:22:e1:c3:97:f9:81:
c0:20:75:b9:bf:c5:37:f6:bb:09:8d:cf:7f:04:20:
dd:d9:c7:62:8c:19:28:95:70:b0:8c:18:9a:6c:c6:
0b:a3:d2:a8:e0:93:ea:a5:a9:bc:97:d3:5f:31:05:
18:fb:8d:f4:33:ad:56:47:66:d6:20:00:f1:ff:18:
05:9e:e3:ee:7a:66:cd:eb:77:70:37:30:e8:38:82:
13:70:a5:7d:65:56:be:47:dd:2c:0f:57:77:54:f7:
c2:91:d9:30:af:05:d0:ef:75:39:f4:a3:1f:0c:c7:
92:e1:99:d3:b8:cd:e8:dc:cb:e1:91:b0:49:3f:af:
b7:d8:f4:7c:62:ce:cf:ed:ea:45:f4:02:ad:61:5d:
2b:27:5d:c5:27:71:74:a1:c2:68:2c:87:3c:38:ca:
e4:ff:f8:94:fd:5b:e0:41:65:b9:df:0f:0d:b4:5c:
38:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F7:C8:A1:E1:93:3B:79:6B:FB:61:7D:19:E5:F9:32:36:37:20:76
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvfIoeGTO3lr-2F9GeX5MjY3IHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.92.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fb:bf:e5:aa:aa:f8:89:f9:e5:e3:7e:0d:42:89:31:b5:2b:
96:64:63:69:c8:63:3f:53:c1:eb:8b:27:3e:be:6d:bf:c5:3e:
a4:88:74:29:28:d9:d5:d0:6b:56:39:0e:b9:bb:36:f0:6d:60:
82:fb:0a:b5:33:7b:3c:5f:3f:01:a4:4b:b5:a0:1c:4c:88:19:
43:c4:93:2e:43:a3:e5:90:1e:67:cf:98:d1:b7:b9:0e:30:73:
67:3f:b1:9a:d5:e5:bd:2a:ac:e2:3e:12:46:83:83:1b:7f:1b:
47:1c:d6:88:0c:6c:9b:3d:4c:f4:fb:bf:05:41:c6:0a:d0:6d:
14:4c:ab:d3:b7:a3:8f:bf:00:5c:76:36:cf:54:8c:a9:55:79:
a0:8d:49:43:40:3b:e8:84:3e:79:0e:93:89:f3:d7:1d:e4:69:
32:25:20:16:68:84:b5:01:1f:f1:c0:a4:e8:d2:47:dc:2d:58:
cb:6d:e7:06:94:d4:e2:f5:4b:ef:c5:34:e9:47:4f:67:ad:82:
ae:6a:aa:2c:e5:0c:c4:1b:bd:14:6f:69:ad:83:f3:7b:63:78:
c5:b5:10:c2:7a:e9:cd:88:09:86:e4:1e:bf:06:ee:ae:22:98:
8d:e8:3b:51:f7:cd:00:58:de:95:47:f1:9b:93:67:34:36:a9:
32:00:e4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:17:49 2026 by rpki-client