Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-gt8s3ai2f88KhZ_SL6FfwyNlo.roa
File: 0-gt8s3ai2f88KhZ_SL6FfwyNlo.roa (raw, json)
Hash identifier: krFdimimJ89TZGJGjRy6howkrU8/IqXlG7PO4yCWjCw=
Subject key identifier: D3:E8:2D:F2:CD:DA:8B:67:FC:F0:A8:59:FD:22:FA:15:FC:32:36:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E3FE16CE988966EED4CA08A97E7047D0F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-gt8s3ai2f88KhZ_SL6FfwyNlo.roa
Signing time: Tue 19 May 2026 10:56:38 +0000
ROA not before: Tue 19 May 2026 10:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210176
IP address blocks: 151.245.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e1:6c:e9:88:96:6e:ed:4c:a0:8a:97:e7:04:7d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 19 10:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e82df2cdda8b67fcf0a859fd22fa15fc32365a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:17:35:36:8e:ca:d7:b5:bc:9f:85:75:af:15:
18:e8:f5:36:d7:18:ed:12:95:c3:c6:88:d8:89:be:
31:63:24:37:68:94:1a:ce:da:b3:3a:a7:76:93:73:
11:44:e1:75:66:9e:a2:22:5c:a7:40:f6:0e:c6:90:
fb:88:09:fd:5e:e7:dd:4b:4a:0b:07:53:e4:77:32:
08:71:ab:c2:42:21:bf:d1:d0:27:c0:1d:c1:78:1e:
78:00:a6:1e:b4:72:10:e9:ab:4a:7c:5a:70:db:b9:
3d:77:61:a5:00:37:67:d0:b8:9d:38:43:6d:6c:f2:
42:8a:4d:ff:79:30:cb:c9:df:c8:de:5a:b1:50:d1:
38:1d:d6:f5:07:fc:83:74:7b:ec:38:ba:ec:d8:a4:
d0:1e:9a:d7:ee:8e:e4:1e:79:ac:3a:fd:cc:99:77:
96:5d:f4:3c:59:dd:3d:2c:43:3d:8b:30:61:59:5c:
4a:54:b1:15:10:0d:70:7c:9d:cc:27:c6:0a:3d:a8:
a0:bc:58:ec:d9:8a:45:d4:ab:d3:60:c8:0f:63:29:
bc:57:76:d7:94:d6:87:31:1c:d6:54:b9:bc:eb:66:
62:d1:da:ef:ad:03:78:f9:ce:9d:fe:97:3d:96:4b:
64:39:fc:45:bc:46:66:db:4b:4e:56:c2:4d:e2:de:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E8:2D:F2:CD:DA:8B:67:FC:F0:A8:59:FD:22:FA:15:FC:32:36:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-gt8s3ai2f88KhZ_SL6FfwyNlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.193.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:89:e8:ee:fd:70:23:d7:24:dd:db:8c:ae:b4:b0:9d:3c:b0:
0f:07:84:63:f0:00:e1:d5:14:02:0b:6b:ae:ad:af:f8:fa:07:
38:5e:bd:eb:96:7b:1b:d5:10:08:99:93:5d:6d:c5:12:f2:cf:
c3:eb:12:3c:32:3e:b7:f8:58:a4:f4:1a:24:0b:f1:a0:5a:65:
51:9b:52:cf:93:89:d7:8c:dd:ea:d0:96:42:30:ae:16:73:86:
3a:48:41:cb:50:92:ec:a1:49:93:57:ef:51:c5:f8:69:71:b3:
0e:e6:4a:1d:d2:61:be:d4:31:ce:3d:65:24:d1:93:f5:3d:e6:
fe:ca:e0:a7:f8:be:b6:1a:97:62:b4:fc:ea:88:77:9d:37:86:
27:1e:27:38:fa:ba:c0:cb:44:71:82:b4:ab:3c:b1:55:21:0d:
e6:f3:18:ac:41:fa:bd:0b:04:21:81:65:0c:de:34:12:aa:6b:
e8:ab:e5:59:94:5f:1e:8a:04:cc:71:1d:28:14:22:d3:14:1f:
4d:10:2d:b6:59:45:f1:97:6b:e3:57:33:bc:39:2f:bf:7b:d4:
f5:b0:33:aa:1a:8a:ee:a7:df:0b:21:35:31:c4:39:53:e8:e9:
80:b0:8d:3d:80:a6:93:58:8e:9f:e5:e2:94:0e:4f:36:83:6b:
28:6f:d3:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:13:03 2026 by rpki-client