Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jfqhYFtY0OTr9Gr79ezcGa5hOt4.roa
File: jfqhYFtY0OTr9Gr79ezcGa5hOt4.roa (raw, json)
Hash identifier: Fz7k+GNDbBFAZIPLkUr74nZmES/qGemPT4F7AuCknS0=
Subject key identifier: 8D:FA:A1:60:5B:58:D0:E4:EB:F4:6A:FB:F5:EC:DC:19:AE:61:3A:DE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F60C622C3E9FCDFD56384ADFD4F30909
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jfqhYFtY0OTr9Gr79ezcGa5hOt4.roa
Signing time: Thu 01 Oct 2026 06:00:01 +0000
ROA not before: Thu 01 Oct 2026 06:00:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214456
IP address blocks: 151.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0c:62:2c:3e:9f:cd:fd:56:38:4a:df:d4:f3:09:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 06:00:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dfaa1605b58d0e4ebf46afbf5ecdc19ae613ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ea:af:6a:6a:15:a1:dc:cf:18:14:e9:14:18:
0e:85:c4:20:8c:80:2c:b2:41:08:da:93:40:02:42:
84:e8:ae:43:93:d3:87:16:19:14:86:de:2d:ef:5f:
9a:e3:48:57:8f:b0:94:a0:f3:52:f0:2c:68:b3:b8:
98:9a:cf:07:69:27:bf:77:3e:6c:27:3d:de:08:ab:
34:24:aa:74:c4:f0:89:9e:73:28:2f:23:29:18:b2:
b5:da:e3:ba:3a:3d:2a:16:4f:75:20:f0:0f:23:56:
c6:1c:99:ff:90:b3:a4:93:d6:b7:79:94:7e:35:00:
a9:fe:75:54:da:2f:20:6f:96:40:92:bf:1c:bd:1f:
81:88:01:72:69:1e:aa:e4:77:f6:10:b8:44:58:15:
de:4c:14:ea:01:bc:30:b7:a7:67:2a:15:c5:b5:88:
dc:7e:af:0a:a5:25:d7:9e:57:84:61:a8:40:69:ab:
57:94:0a:c2:92:4d:7b:8f:c1:98:2d:a8:45:73:6b:
af:e7:17:bb:25:51:26:4e:bb:ba:12:74:08:1c:01:
24:be:02:5c:88:10:70:45:90:d0:0a:f7:9d:9f:d6:
83:a5:bb:be:9d:16:85:7e:bd:03:73:d1:7c:18:8b:
39:0b:fe:d5:91:ac:69:50:51:0f:35:34:7d:90:b1:
c5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:FA:A1:60:5B:58:D0:E4:EB:F4:6A:FB:F5:EC:DC:19:AE:61:3A:DE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jfqhYFtY0OTr9Gr79ezcGa5hOt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
84:b9:1a:bf:34:4f:1d:cf:4a:4a:9c:f1:61:a4:b1:f4:83:4a:
dd:90:48:4d:6a:6a:71:f0:1a:8d:bc:58:5c:64:42:e1:7b:12:
9d:b3:03:40:88:fc:2a:f7:22:db:eb:6b:1f:d7:19:05:30:a8:
07:92:48:4f:70:5b:82:a0:5f:90:22:ed:f5:90:de:27:4b:24:
a0:1c:68:bc:1d:f5:63:cd:25:6b:b8:9d:c5:9c:ce:69:97:35:
3d:ec:1d:51:1c:ff:4d:e2:0c:14:4f:b8:b3:1c:c8:3c:a3:0d:
dd:4e:c1:9e:1e:f3:91:59:29:a4:2b:56:49:f4:92:20:4a:37:
da:04:8b:be:28:68:3b:7f:5f:af:0c:35:36:a0:17:21:59:53:
b9:84:26:04:98:19:35:1f:a0:04:b2:48:be:33:d4:96:0b:63:
f9:bc:4c:32:05:19:2a:d9:13:ed:b5:a3:b2:d9:e2:97:d2:23:
3a:7c:a3:f7:77:77:74:31:8b:5b:1d:63:23:1b:c2:38:0e:74:
d3:7a:9a:e1:d1:f2:76:a6:2a:bc:91:92:9d:5b:72:81:0b:3b:
3e:9a:47:62:40:b0:05:3f:e7:f0:33:b8:06:5c:19:58:a0:d3:
19:fc:a0:61:d2:f1:8d:02:36:7e:e0:9a:08:a4:fb:78:ed:16:
12:f8:7e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:17:37 2026 by rpki-client