Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4fIAMsEQcmOZ4_DyKVy0APyGRzM.roa
File: 4fIAMsEQcmOZ4_DyKVy0APyGRzM.roa (raw, json)
Hash identifier: Ms4dGN4z9p0Cq6jKPZ5ee+GxlPvLYGQTMOtWq6rG/L0=
Subject key identifier: E1:F2:00:32:C1:10:72:63:99:E3:F0:F2:29:5C:B4:00:FC:86:47:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EDAEB8DF5D55BDFE9533A6B7A942409D9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4fIAMsEQcmOZ4_DyKVy0APyGRzM.roa
Signing time: Thu 18 Jun 2026 13:28:50 +0000
ROA not before: Thu 18 Jun 2026 13:28:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 151.247.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 23 Jun 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:eb:8d:f5:d5:5b:df:e9:53:3a:6b:7a:94:24:09:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 18 13:28:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1f20032c110726399e3f0f2295cb400fc864733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:93:b5:ec:4e:22:8e:27:47:1d:78:a8:15:
74:1b:9b:12:30:01:20:84:9e:36:7a:23:4b:7b:13:
73:bd:4b:0f:c8:d2:c0:29:2a:53:0d:fe:6c:71:16:
de:20:7e:31:78:20:0e:4d:4f:8f:99:e9:3d:f5:80:
e3:fd:4f:2e:1c:d0:81:78:d2:93:28:10:cc:5b:8e:
8a:17:f9:83:b6:27:89:31:9f:be:f8:37:23:15:53:
44:ef:0b:7a:c9:3d:34:40:15:a1:c7:93:ad:d1:3f:
1e:50:7f:34:f6:ea:c8:b2:2a:5e:24:f5:45:6d:2a:
cb:ce:cd:0b:a8:71:f2:d3:f9:03:4f:2a:ae:6a:e9:
7c:2f:ec:a8:6d:90:91:64:50:f6:e4:a0:bd:2f:4b:
a8:70:53:72:e3:e8:0f:f2:95:24:94:c7:66:ec:2a:
cf:89:9b:b0:9c:f1:d4:c8:6b:9b:43:8b:31:e2:a6:
54:7f:99:ea:f2:ab:e8:95:38:07:c4:57:92:1f:50:
60:59:64:05:d9:45:e3:19:52:90:2f:32:b7:cf:06:
89:93:51:71:3e:1d:4d:c9:d7:7d:a8:e6:2b:a1:95:
f5:2b:41:dc:77:f9:af:95:f6:f9:d8:fd:7b:60:1b:
39:a0:6b:e8:19:31:2a:fe:78:21:04:38:ac:6e:3b:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F2:00:32:C1:10:72:63:99:E3:F0:F2:29:5C:B4:00:FC:86:47:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4fIAMsEQcmOZ4_DyKVy0APyGRzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.116.0/24
Signature Algorithm: sha256WithRSAEncryption
52:5d:5e:5e:a3:2a:04:93:70:c2:77:70:38:c6:c1:ad:c3:91:
17:7d:54:a7:e9:20:e1:78:59:c0:f0:46:79:9d:91:59:a1:7e:
2f:88:d3:5c:c6:79:b4:4c:c3:d4:58:a2:6e:f9:99:41:d6:f7:
b1:d1:21:56:26:85:3f:68:95:d8:0f:ed:ec:5d:ae:2b:66:bb:
a0:94:2b:38:e0:6a:71:86:3f:14:6d:04:79:09:bc:90:69:cf:
b3:af:ad:d9:23:ad:a8:8c:46:38:7c:d8:bb:49:56:64:59:88:
b7:c9:8e:8f:a5:f7:b4:07:b5:f8:2b:f9:8c:b5:07:64:e0:72:
63:fc:f4:b1:d4:e6:17:08:c7:11:23:47:38:ce:56:e4:10:29:
b1:b1:3f:dd:54:b5:77:ed:be:2d:95:57:67:36:cf:a1:2d:cf:
24:03:88:de:c7:87:09:ea:d7:9d:93:22:5c:85:56:ff:6b:b1:
50:df:5f:bc:6c:67:05:4b:a3:08:c0:f4:ee:22:9d:50:37:5d:
1b:25:33:b7:34:18:a0:fb:76:0f:8c:b4:42:3d:42:9c:7d:aa:
3f:c6:6c:80:2f:d0:fa:16:79:f7:86:ef:e6:7b:a7:1b:8f:38:
83:3b:e0:73:eb:c9:58:7b:bf:cf:e6:40:dd:f5:5e:76:df:fc:
d3:e1:45:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 22 14:14:19 2026 by rpki-client