Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h97vmxU2SyF3ctE1wGCfFk44RCs.roa
File: h97vmxU2SyF3ctE1wGCfFk44RCs.roa (raw, json)
Hash identifier: dUrljOVF2kO4EkebYsow8XajGCl3uvZEFq70GRnDg3s=
Subject key identifier: 87:DE:EF:9B:15:36:4B:21:77:72:D1:35:C0:60:9F:16:4E:38:44:2B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019DD9881DABC6C17763235A5105AB4747F3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h97vmxU2SyF3ctE1wGCfFk44RCs.roa
Signing time: Wed 29 Apr 2026 13:57:49 +0000
ROA not before: Wed 29 Apr 2026 13:57:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132541
IP address blocks: 206.245.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:88:1d:ab:c6:c1:77:63:23:5a:51:05:ab:47:47:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 29 13:57:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87deef9b15364b217772d135c0609f164e38442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a5:4a:21:d6:b9:a0:e8:05:5e:1f:6c:22:aa:
15:34:a3:7a:59:9f:b2:22:e3:73:dc:11:cd:b4:fe:
35:82:3c:f2:cb:45:af:8b:bb:31:02:81:4c:23:dd:
88:89:de:a0:30:03:f1:ed:07:5b:d8:14:cf:15:83:
d7:2d:c8:be:f7:88:d1:9c:8a:dc:89:aa:38:49:43:
7a:b6:4a:e1:85:c0:d7:07:48:49:51:d1:97:d5:61:
e4:a3:40:86:73:42:35:16:c0:57:26:ad:8d:1a:df:
a4:28:ec:d5:ea:c0:f3:83:3a:82:ac:02:ea:1a:e6:
ad:ae:c2:06:d7:28:f1:bc:71:75:10:b6:c8:52:88:
f4:54:82:0e:f9:8c:7e:bf:8e:52:3c:33:92:8d:29:
36:1c:6f:8e:2f:c4:e2:b8:aa:6e:e9:c3:ab:89:d2:
8b:fe:80:a7:5d:ef:3c:de:0c:f3:44:0d:f7:25:64:
6c:3d:c5:92:03:6c:34:98:b4:32:c3:4d:11:2a:44:
7a:c9:a5:b5:7d:73:b6:66:de:1a:7d:cd:fc:80:14:
01:9d:aa:c2:21:a1:2a:fa:e8:d1:cb:4d:50:39:f7:
0e:68:14:9f:04:e2:45:5d:43:b9:86:60:8f:4b:3a:
ca:ac:d2:af:d9:d4:68:64:a9:e4:f4:74:71:c5:b5:
d3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DE:EF:9B:15:36:4B:21:77:72:D1:35:C0:60:9F:16:4E:38:44:2B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h97vmxU2SyF3ctE1wGCfFk44RCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.151.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:2e:77:fb:c4:d9:f2:11:9b:d9:26:ba:80:a4:59:c6:c7:92:
de:9c:0a:07:d4:15:18:75:5b:66:d3:7b:18:8f:4c:d6:cc:1f:
74:d3:5d:e2:c3:37:6b:76:ad:be:6d:51:54:db:4b:e3:b4:f3:
03:29:10:2a:2a:06:59:9f:8f:f1:23:83:8c:23:31:51:08:3a:
e7:22:5d:ed:9b:3d:bf:b4:0a:7a:7b:4a:89:24:02:e3:9a:cc:
79:c0:56:af:3c:dc:38:2c:84:f5:b7:4e:db:b8:fe:58:52:71:
7a:75:cd:f5:69:67:3e:62:90:be:14:1f:8f:ca:38:5f:da:de:
56:72:ae:e0:38:22:7d:1f:56:f6:bf:ca:de:71:95:c1:47:3d:
4f:b9:53:b8:23:ad:76:d6:35:8f:5c:34:9e:3c:b3:4f:a3:93:
fc:79:e8:41:bf:66:c9:d3:9e:c2:e4:aa:dd:f0:a7:5c:a8:e2:
fc:bb:fd:a6:cb:90:3f:82:d1:e2:1a:10:b8:1f:2f:e3:4a:c5:
d7:09:21:eb:62:25:a2:1f:46:bf:ce:7e:0d:43:68:be:eb:39:
e7:7c:f4:ca:c8:e8:86:9b:c7:0f:be:25:31:54:17:0b:53:f3:
0d:19:9f:58:ae:29:f0:14:75:e3:dd:40:05:8d:55:d8:49:90:
99:55:da:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:52 2026 by rpki-client