Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sCcAmWyDEkJTGFtNXDv7qkRALY4.roa
File: sCcAmWyDEkJTGFtNXDv7qkRALY4.roa (raw, json)
Hash identifier: 9UyYaz+nJEEzDqSp10fiq+Lzhf1RfZnXIiWRjUnN2vY=
Subject key identifier: B0:27:00:99:6C:83:12:42:53:18:5B:4D:5C:3B:FB:AA:44:40:2D:8E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DB086744FBC30187A33D8E363F7D14489
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sCcAmWyDEkJTGFtNXDv7qkRALY4.roa
Signing time: Tue 21 Apr 2026 14:51:34 +0000
ROA not before: Tue 21 Apr 2026 14:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200833
IP address blocks: 151.246.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:86:74:4f:bc:30:18:7a:33:d8:e3:63:f7:d1:44:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 21 14:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b02700996c83124253185b4d5c3bfbaa44402d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4c:e5:3a:7d:11:de:eb:8e:ce:5e:ce:76:43:
04:4f:bf:a0:c2:e5:56:58:e5:ec:dd:bb:31:d9:f8:
a1:b9:ba:b9:97:0c:2d:13:ea:38:d7:c0:8a:02:58:
17:8d:fb:9a:ac:12:38:e6:58:c9:25:f7:9e:d4:8a:
bd:80:4c:4d:a4:aa:40:ef:1d:91:2c:25:88:27:ad:
3c:fd:0a:c7:ed:b6:27:62:06:d0:2b:f0:61:06:06:
f0:96:74:f7:53:8f:ce:73:d5:2c:91:50:49:69:62:
c1:7d:2b:b7:84:c6:04:db:3d:19:33:3f:3d:e8:1f:
e0:99:11:95:38:84:fe:a0:31:dc:bd:34:dc:66:ed:
a4:7e:23:8e:9d:f0:df:ac:3f:da:ca:c6:dc:e4:2d:
ee:8c:af:2f:8b:0c:85:e0:7f:91:46:93:be:1d:d9:
35:37:17:47:cd:09:25:6f:f3:86:99:c3:df:12:41:
d0:8e:24:6d:fd:37:a6:03:4d:a8:3c:d2:9f:1e:b1:
0b:e1:53:61:73:5a:1c:3c:a7:52:42:57:1f:5f:6e:
ec:ad:28:55:ab:d7:e0:1b:e0:2c:7f:2a:ac:03:25:
fe:af:f1:4f:12:b0:fe:cd:14:66:99:7a:03:9b:8d:
41:2b:fe:59:4c:e6:2a:c1:52:47:75:0b:1c:ef:a6:
4e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:27:00:99:6C:83:12:42:53:18:5B:4D:5C:3B:FB:AA:44:40:2D:8E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sCcAmWyDEkJTGFtNXDv7qkRALY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.175.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:05:d5:e5:79:6f:9b:b3:a2:84:f1:b3:33:d6:b8:1a:00:5e:
ab:ba:2d:c4:1b:a7:34:2c:84:bf:cc:86:32:51:62:f9:29:c7:
d3:f0:e4:06:17:b0:c4:fa:37:50:0a:96:90:98:82:19:1f:ff:
9a:a1:d8:dd:0b:2b:69:40:38:6e:df:04:7d:6e:12:bd:e7:ca:
8d:bd:d2:b9:20:87:56:1b:5b:df:b5:3a:cc:6a:e0:58:f0:18:
f1:b5:d9:b2:91:ba:cd:9d:a6:61:7c:e8:42:03:cb:36:e3:b6:
06:37:be:2c:06:4a:19:f0:44:46:53:84:7b:3e:ae:b1:f6:02:
8a:e3:43:ba:c8:cd:e0:db:e4:94:45:cd:3f:90:3c:12:c3:ba:
c9:ef:d5:41:61:26:c5:10:a0:d8:be:cf:88:77:78:43:9a:13:
b6:cf:65:8a:e4:6a:15:3d:66:55:ae:89:5e:6b:4b:21:93:fc:
69:ce:50:27:81:15:4d:d7:39:9f:84:53:45:fa:cb:2c:86:b4:
a7:b8:a0:0e:30:22:58:15:77:62:36:95:95:2f:66:20:56:32:
63:2d:a3:a2:88:26:3f:71:36:52:e7:16:5a:a6:cb:79:37:98:
97:54:bc:ce:ce:d5:1c:3a:61:32:8b:64:33:21:46:7c:d1:e9:
fa:67:6d:90
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2whnRPvDAYejPY42P30USJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDIxMTQ1MTM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDI3MDA5OTZjODMxMjQyNTMxODViNGQ1YzNiZmJhYTQ0NDAyZDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukzlOn0R3uuOzl7OdkMET7+gwuVW
WOXs3bsx2fihubq5lwwtE+o418CKAlgXjfuarBI45ljJJfee1Iq9gExNpKpA7x2R
LCWIJ608/QrH7bYnYgbQK/BhBgbwlnT3U4/Oc9UskVBJaWLBfSu3hMYE2z0ZMz89
6B/gmRGVOIT+oDHcvTTcZu2kfiOOnfDfrD/aysbc5C3ujK8viwyF4H+RRpO+Hdk1
NxdHzQklb/OGmcPfEkHQjiRt/TemA02oPNKfHrEL4VNhc1ocPKdSQlcfX27srShV
q9fgG+AsfyqsAyX+r/FPErD+zRRmmXoDm41BK/5ZTOYqwVJHdQsc76ZOGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLAnAJlsgxJCUxhbTVw7+6pEQC2OMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvc0NjQW1XeURFa0pUR0Z0TlhEdjdxa1JBTFk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/avMA0G
CSqGSIb3DQEBCwUAA4IBAQC0BdXleW+bs6KE8bMz1rgaAF6rui3EG6c0LIS/zIYy
UWL5KcfT8OQGF7DE+jdQCpaQmIIZH/+aodjdCytpQDhu3wR9bhK958qNvdK5IIdW
G1vftTrMauBY8BjxtdmykbrNnaZhfOhCA8s247YGN74sBkoZ8ERGU4R7Pq6x9gKK
40O6yM3g2+SURc0/kDwSw7rJ79VBYSbFEKDYvs+Id3hDmhO2z2WK5GoVPWZVrole
a0shk/xpzlAngRVN1zmfhFNF+ssshrSnuKAOMCJYFXdiNpWVL2YgVjJjLaOiiCY/
cTZS5xZapst5N5iXVLzOztUcOmEyi2QzIUZ80en6Z22Q
-----END CERTIFICATE-----
Generated at Wed May 13 09:14:35 2026 by rpki-client