Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mGlfC6FfHBpGUl514W2CetF4bD8.roa
File: mGlfC6FfHBpGUl514W2CetF4bD8.roa (raw, json)
Hash identifier: jgkvMq625l/Bb1jLbGasg72ulSTnbHCrBu33TYkC/6k=
Subject key identifier: 98:69:5F:0B:A1:5F:1C:1A:46:52:5E:75:E1:6D:82:7A:D1:78:6C:3F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C95B26143EF8CD2F3CD721DF75FF2BF0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mGlfC6FfHBpGUl514W2CetF4bD8.roa
Signing time: Tue 22 Sep 2026 13:43:09 +0000
ROA not before: Tue 22 Sep 2026 13:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 151.246.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5b:26:14:3e:f8:cd:2f:3c:d7:21:df:75:ff:2b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 13:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98695f0ba15f1c1a46525e75e16d827ad1786c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:cc:5c:78:cd:59:45:f3:24:a2:15:7f:6e:
1f:21:ed:4c:ce:02:8d:72:d3:d5:f8:82:1a:40:6c:
67:ab:22:5d:6c:cb:c0:bc:03:fc:4d:78:f9:44:7f:
2d:ac:f3:22:e7:87:78:0a:a7:87:53:ab:d7:25:f2:
5c:03:7e:ef:20:16:33:65:b8:7c:c0:e5:95:ab:ec:
4b:1e:cd:1e:a0:7c:33:8e:70:6a:e7:50:3f:17:b7:
52:0e:b9:f0:73:5e:25:c4:1d:0c:c4:9f:33:c6:ab:
c9:29:23:49:1e:60:96:c3:73:d5:1d:85:82:6f:72:
c8:b1:ba:f6:e7:20:7d:37:41:32:6d:5b:6c:5b:14:
3d:70:4c:de:e9:52:7c:01:50:49:8a:99:ae:bf:84:
47:4a:26:0b:0a:b3:f4:0f:25:09:86:5a:09:cd:02:
be:cb:42:ac:bc:e6:59:ca:34:4f:21:b1:18:83:64:
33:48:50:a2:5c:ab:05:a6:e2:88:07:c8:e1:d6:a9:
2a:1a:2a:28:16:7e:03:b8:55:e5:48:58:92:1f:33:
8b:9f:d6:ab:48:01:3c:65:dd:58:21:77:05:6f:88:
e3:0c:b4:17:1c:a7:a2:18:c7:4f:53:77:43:7f:39:
e2:4f:39:22:9e:ac:87:2d:50:6a:79:34:e4:ed:54:
c5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:5F:0B:A1:5F:1C:1A:46:52:5E:75:E1:6D:82:7A:D1:78:6C:3F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mGlfC6FfHBpGUl514W2CetF4bD8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.104.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:be:90:36:d4:89:45:ef:10:55:8d:a3:0a:bd:51:48:48:65:
f8:8f:8b:f7:ff:7a:9a:b2:48:c2:cf:1d:ed:4d:31:88:25:58:
f5:7c:d4:da:29:e9:26:59:9f:df:df:6a:8a:aa:bc:d8:88:7f:
be:3b:ea:65:57:05:92:2f:03:6d:ac:f8:83:e3:65:e1:6d:a4:
29:0c:ac:de:d1:ad:a3:e0:d8:40:f6:9a:fe:01:70:6e:8f:6c:
70:44:30:06:c9:c7:41:96:f4:ec:5d:18:75:4f:a0:a8:02:ce:
dc:40:29:de:06:58:fa:e3:25:30:95:be:86:ad:c0:b9:c0:03:
cf:64:a4:80:72:dd:97:82:c7:c1:81:bf:75:94:0f:c7:eb:25:
1d:90:5d:d8:96:96:ee:4e:8d:94:c8:ae:7b:4a:a0:92:b6:24:
46:87:ba:48:78:9f:80:aa:26:89:90:63:ba:ca:b7:e5:ef:71:
9c:c6:38:e1:70:30:de:1c:ad:38:b1:d4:2e:48:52:b2:42:b4:
d3:12:37:e0:b6:0c:0c:3b:46:97:d5:ba:a8:d5:81:b0:1e:9d:
f8:56:b7:bb:15:1d:c1:70:fa:53:70:74:48:bf:fb:62:25:40:
d8:8f:04:8c:52:1c:d4:36:f4:12:6e:51:c8:e9:e7:f8:0a:93:
f4:b8:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:56:49 2026 by rpki-client