Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9rRyClqjpAcsLAaqTgafU6g8p0.roa
File: t9rRyClqjpAcsLAaqTgafU6g8p0.roa (raw, json)
Hash identifier: V7U3kcnlj+vll3TEWwlZGSkkL64HHWJxNY9EmAU24DY=
Subject key identifier: B7:DA:D1:C8:29:6A:8E:90:1C:B0:B0:1A:A9:38:1A:7D:4E:A0:F2:9D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CCA014CFF461CDF0F5B32580F7E6FE995
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9rRyClqjpAcsLAaqTgafU6g8p0.roa
Signing time: Sat 07 Mar 2026 20:33:28 +0000
ROA not before: Sat 07 Mar 2026 20:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 151.247.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:01:4c:ff:46:1c:df:0f:5b:32:58:0f:7e:6f:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 20:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b7dad1c8296a8e901cb0b01aa9381a7d4ea0f29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:7c:27:2c:a0:6e:57:2e:a5:c3:89:a9:b1:
ba:5f:0c:8c:6a:e8:21:e6:ad:81:3a:aa:9b:80:e4:
b9:6e:ac:b9:67:6b:4d:53:9b:0c:4d:54:1a:0e:95:
0f:1e:b8:c4:a6:1e:9e:80:fb:d3:7e:39:54:16:ab:
79:2b:46:15:1e:bc:c9:ad:42:f1:d5:42:07:01:ef:
d8:ac:3d:63:38:b3:4c:db:02:b6:84:72:ab:65:d8:
ff:c1:b1:49:d3:a9:b4:ee:e9:cf:30:aa:90:9d:4b:
ce:cc:02:37:ad:3b:0f:e4:0a:f8:1e:cb:c2:9e:b6:
44:41:0e:a6:bb:0a:1a:25:f5:96:e1:6b:c5:49:a2:
49:bc:2a:c8:a2:42:be:b5:96:74:2b:40:bd:41:d2:
c9:00:f4:40:14:e2:8c:61:97:03:43:d7:2b:0f:d2:
de:7c:9b:0d:7b:c3:ea:0b:b9:54:06:6b:ba:b6:be:
75:96:6e:f2:bf:e1:67:83:4a:b8:64:fa:51:db:f8:
24:3c:c2:d4:cd:59:48:28:6f:38:10:26:17:ef:83:
44:13:6a:8d:a6:a3:73:0c:cc:b4:6a:79:93:3e:aa:
11:39:bf:62:b8:57:8a:9b:69:c7:88:45:91:46:1b:
0b:af:d1:a7:51:66:5a:0f:29:ac:8a:f8:a3:e1:fb:
f6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:DA:D1:C8:29:6A:8E:90:1C:B0:B0:1A:A9:38:1A:7D:4E:A0:F2:9D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t9rRyClqjpAcsLAaqTgafU6g8p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.174.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4d:74:c1:66:16:8c:df:da:22:59:15:5c:ec:60:cf:54:c8:
59:67:ac:ab:15:da:cf:4f:a3:97:e9:5c:b8:3f:75:d3:08:98:
ad:4f:e3:97:1a:72:75:dc:98:af:37:2a:7f:2b:cc:e9:94:15:
65:0b:7d:32:45:8c:7e:a9:79:c0:69:c5:5e:b1:c8:46:c9:16:
7a:ac:64:cf:2b:11:6f:de:19:76:48:be:4f:c3:8a:9f:f9:5d:
a2:09:17:00:f8:b5:33:e9:60:92:51:a5:71:b7:9d:4f:be:8c:
6e:5f:1b:cd:cb:e4:63:e7:d2:6d:11:5d:cd:ba:38:3c:e9:6c:
b0:a1:68:8f:eb:96:92:77:f2:69:01:a7:f3:e1:74:3c:25:26:
07:8f:17:bb:aa:92:03:4a:4c:32:ad:d1:f3:8d:67:d2:d7:86:
ef:19:2f:1f:92:10:55:e3:ad:77:a1:b9:a1:d5:04:43:15:50:
74:af:c4:fa:cb:32:4f:04:e8:cc:08:51:5e:f1:d4:8a:a8:ad:
50:25:8f:82:83:da:5e:86:65:ff:8e:cd:d0:00:c3:a4:8d:24:
89:0d:61:15:4f:d2:f7:f8:cc:06:46:d0:7a:d1:75:11:3f:ab:
13:32:7b:e9:5d:3b:0f:b1:70:b1:e6:2e:bc:93:a3:fb:db:ac:
93:aa:a3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:36:42 2026 by rpki-client