Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f-cCOeJafm3up-v2aU_bO22pqRA.roa
File: f-cCOeJafm3up-v2aU_bO22pqRA.roa (raw, json)
Hash identifier: 2PapjOxr2U5iH+QIZ5NNBcJZxjcqmVNs7VUhHbLoD2M=
Subject key identifier: 7F:E7:02:39:E2:5A:7E:6D:EE:A7:EB:F6:69:4F:DB:3B:6D:A9:A9:10
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F47FB664594B546B3181B45C3040E44ED
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f-cCOeJafm3up-v2aU_bO22pqRA.roa
Signing time: Thu 09 Jul 2026 17:44:45 +0000
ROA not before: Thu 09 Jul 2026 17:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 151.243.179.0/24 maxlen: 24
151.246.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:fb:66:45:94:b5:46:b3:18:1b:45:c3:04:0e:44:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 17:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7fe70239e25a7e6deea7ebf6694fdb3b6da9a910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:aa:ad:89:93:e6:a2:a7:f4:87:aa:22:62:
6c:ef:32:2c:bb:f3:5d:97:23:e7:26:db:37:a8:a1:
34:53:ff:fd:e5:c3:49:9c:69:2e:7e:62:c6:63:44:
4d:20:a3:0a:f4:aa:ea:3b:24:23:50:3b:80:88:e8:
b5:c9:34:6a:e2:2e:75:96:1e:68:f4:50:cb:5c:8c:
29:53:cd:ed:d7:e0:28:b5:c0:71:fa:1d:70:20:ac:
32:be:98:47:01:9d:ec:de:9f:d1:52:d1:28:55:ef:
e4:38:5a:65:e7:aa:31:d5:4b:62:26:1b:b3:06:59:
ea:cc:16:1e:83:a0:6d:c2:1a:9f:e2:20:86:02:c4:
70:4f:b4:29:b1:36:ea:95:ef:bc:ec:09:1a:3a:a8:
ec:9a:24:2c:dd:d6:8c:96:94:2e:26:67:d6:0f:cc:
0d:e0:01:94:25:6c:ed:f6:b3:c0:a2:c5:8d:e8:57:
00:19:fc:eb:a8:0e:45:6d:79:d9:8f:c9:e6:9b:2c:
c3:24:34:5a:8a:89:8c:e9:1a:e1:1d:eb:67:1d:bb:
84:63:6b:73:ff:f8:e7:11:38:b9:3d:b8:7d:36:22:
e4:6f:f0:49:02:da:03:08:20:41:ae:e2:d2:38:bd:
46:72:a6:11:4d:8e:01:43:76:29:2a:c0:fd:86:9a:
53:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E7:02:39:E2:5A:7E:6D:EE:A7:EB:F6:69:4F:DB:3B:6D:A9:A9:10
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f-cCOeJafm3up-v2aU_bO22pqRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.179.0/24
151.246.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:77:33:c9:31:61:69:61:2d:c3:95:ae:35:eb:9f:f9:c2:b4:
12:b9:1b:47:fb:19:4e:62:65:c7:c3:a9:8c:a6:5f:f2:67:7d:
f0:82:36:26:d1:31:36:52:b6:3a:a7:19:c4:25:d9:cb:09:b3:
af:38:97:d4:2b:54:58:3f:86:b8:ce:c5:96:d3:00:83:93:36:
61:7a:8e:b8:7b:af:a5:a0:01:b2:a0:90:6f:77:82:f0:f2:3a:
cf:af:f7:6b:8d:1b:bc:f3:b4:66:aa:7b:6f:57:3f:f5:ea:01:
85:22:ab:1f:c1:ec:3e:ff:5e:64:f3:49:2c:a4:e6:7a:6b:1c:
5e:81:5f:af:58:1e:aa:5f:08:c7:a8:f5:52:a8:2f:1c:3e:25:
99:0c:ac:eb:f7:1c:f8:80:3c:70:94:2e:10:cc:4b:50:15:e3:
ee:92:7e:ed:b1:60:82:d6:22:ba:f3:96:c5:27:2c:e3:1e:17:
a6:c8:77:f5:24:ad:c3:1f:65:d9:17:1f:91:6c:a1:d2:1c:0e:
94:37:2f:d9:2d:8e:78:f7:9a:d1:d2:2f:d2:06:c2:2d:12:d9:
f5:2c:01:b7:47:86:67:88:ab:54:4b:87:62:7f:80:68:2e:00:
9f:c5:07:c8:b3:1b:9e:89:a9:4d:90:7b:5b:0f:b7:30:3f:a2:
f4:b2:fb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:18 2026 by rpki-client