Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3JCnHQzWUKX8RtDrkqHvDfFyVZE.roa
File: 3JCnHQzWUKX8RtDrkqHvDfFyVZE.roa (raw, json)
Hash identifier: 9NX5wCABqYk31A6nilzRlAibVpsZePBdAI3Y6t4MgTQ=
Subject key identifier: DC:90:A7:1D:0C:D6:50:A5:FC:46:D0:EB:92:A1:EF:0D:F1:72:55:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F553241B6B82F7C49768BF8E0ED467A5D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3JCnHQzWUKX8RtDrkqHvDfFyVZE.roa
Signing time: Sun 12 Jul 2026 07:19:44 +0000
ROA not before: Sun 12 Jul 2026 07:19:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154648
IP address blocks: 151.246.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 13:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:55:32:41:b6:b8:2f:7c:49:76:8b:f8:e0:ed:46:7a:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 12 07:19:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc90a71d0cd650a5fc46d0eb92a1ef0df1725591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3b:d1:f4:b2:33:7b:79:5a:99:38:e1:6e:04:
37:4a:0f:1f:ef:5d:13:0b:8d:3d:f3:e6:22:21:45:
7f:e9:08:c5:f9:b8:e6:be:74:97:38:d7:23:80:5b:
94:18:0d:03:6c:1d:3d:e4:b9:ad:31:c6:15:a3:cf:
86:bf:ce:fb:dd:c0:43:bd:0a:b9:d2:59:af:00:f2:
d9:c8:ae:74:bb:96:b5:56:2a:3b:68:a2:13:39:49:
dc:cd:b7:e9:db:6b:7c:3e:ad:22:b0:65:cc:d3:70:
71:7a:11:02:ef:07:21:02:62:63:68:80:4a:f4:5a:
6c:b2:e8:24:3a:27:7c:93:00:49:69:5c:ab:ed:65:
77:dd:47:84:79:e5:34:85:dc:91:fc:53:27:0a:54:
2e:eb:ea:21:1d:ad:f7:3f:db:6d:07:35:39:a7:ab:
21:5f:82:b6:ae:74:c9:0e:4d:08:a9:de:59:2f:b0:
61:b6:c4:b9:69:c3:8c:67:75:5b:f3:bd:85:4c:8f:
6d:49:2c:83:62:9a:2b:d5:16:f1:61:b2:62:33:64:
4e:44:49:bc:3b:e9:bd:b0:95:1f:0c:15:86:43:ca:
bf:81:2f:48:91:2c:d0:8b:30:a9:4d:c1:fb:fc:b4:
76:97:c7:39:9d:90:0a:7a:b5:48:ce:ca:12:7f:fe:
7e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:90:A7:1D:0C:D6:50:A5:FC:46:D0:EB:92:A1:EF:0D:F1:72:55:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3JCnHQzWUKX8RtDrkqHvDfFyVZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.184.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:4c:21:2f:3a:96:e1:b1:54:dc:b7:cb:bf:ef:a9:f1:8b:72:
29:17:9d:ed:81:51:7a:e6:23:bd:6e:e8:29:43:f1:97:e3:f1:
42:b2:ad:4d:50:8d:79:49:b9:2d:20:d3:87:0b:42:95:49:71:
72:6a:83:51:4d:4e:bd:92:c1:6a:e9:b6:78:dc:ef:58:2e:dc:
b6:2d:0f:03:82:49:a3:f1:ca:82:9f:29:03:f2:9f:f2:64:39:
e9:b1:03:f9:dd:6f:e1:ef:20:0e:d3:ee:39:f7:7c:31:dc:2e:
63:6e:57:45:33:5a:6e:5f:1a:ae:37:10:a0:d5:b9:19:9d:0b:
6d:08:25:ac:79:ab:6a:6a:85:e9:1e:80:d5:af:d9:0c:f0:66:
11:75:41:d2:0d:20:d1:66:87:8b:23:eb:8c:36:29:42:45:e2:
e3:cd:b8:53:e8:e6:ce:28:5e:07:5a:cb:9d:bd:9f:91:4f:54:
91:8c:d1:13:9d:0c:65:11:a3:87:73:7f:74:25:fc:ea:77:28:
b1:09:97:a0:de:f5:c6:69:17:b7:b1:3f:eb:4a:cd:1f:ea:1a:
5e:e9:33:77:c3:02:72:52:83:9a:ac:03:22:7a:09:69:7f:98:
83:cb:eb:9d:76:d3:1d:e9:14:4e:a7:88:fc:87:78:cb:10:eb:
83:b2:52:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:56:02 2026 by rpki-client