Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5EhIHG60-oUzRf017ZMJG-vAo5Y.roa
File: 5EhIHG60-oUzRf017ZMJG-vAo5Y.roa (raw, json)
Hash identifier: fcciUWbSAzTgZoHaz/QnAnR/JBF3UZFnbJ5RKsHgTh0=
Subject key identifier: E4:48:48:1C:6E:B4:FA:85:33:45:FD:35:ED:93:09:1B:EB:C0:A3:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E3FE7D6DA82B422EF76E6790572DF3CC1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5EhIHG60-oUzRf017ZMJG-vAo5Y.roa
Signing time: Tue 19 May 2026 11:03:38 +0000
ROA not before: Tue 19 May 2026 11:03:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402487
IP address blocks: 151.247.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3f:e7:d6:da:82:b4:22:ef:76:e6:79:05:72:df:3c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 19 11:03:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e448481c6eb4fa853345fd35ed93091bebc0a396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:89:b3:5e:9a:82:7f:ab:91:f5:c1:44:66:85:
95:3a:4e:00:df:2f:97:30:22:42:c4:55:3c:a3:c4:
c6:17:00:9d:f7:38:d8:5f:22:c5:a3:b4:ee:b9:bd:
b7:79:47:88:f3:e9:57:29:04:3a:41:6a:93:f0:c1:
48:3d:18:1c:22:aa:d4:3b:a6:76:9f:56:2b:3c:6b:
bc:94:0f:54:9b:3b:4b:65:c0:64:ed:da:5b:57:d9:
cd:d9:f8:bc:f8:8c:c8:c7:f1:09:45:d4:e8:1d:64:
d4:a2:bc:d9:09:42:1f:66:f7:1b:81:c7:2e:cb:fc:
5d:97:b7:a1:c2:4e:ac:78:77:a6:a7:e0:77:34:19:
55:86:32:b6:ac:70:75:fd:96:e2:6c:c4:39:5f:1a:
c5:45:ef:4a:85:fe:43:e0:90:aa:d1:f4:a5:db:46:
4d:e1:db:e0:4d:71:44:f9:d5:ad:ad:65:3f:e8:bf:
b9:2f:5f:ae:6f:23:af:5d:ad:46:86:40:c6:86:98:
04:fb:3c:ee:56:0e:77:44:81:14:dd:2a:f2:f9:1e:
a8:a7:f0:be:5d:4c:18:6e:33:f8:5b:1e:b1:cb:ad:
35:e2:3e:5c:dc:b9:83:bc:15:57:58:f9:ce:96:62:
1d:7d:51:93:d1:bf:28:9b:c4:47:29:96:07:4b:03:
2e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:48:48:1C:6E:B4:FA:85:33:45:FD:35:ED:93:09:1B:EB:C0:A3:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5EhIHG60-oUzRf017ZMJG-vAo5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.212.0/24
Signature Algorithm: sha256WithRSAEncryption
05:00:c7:70:d8:01:22:0b:ac:4b:6e:0f:f8:8d:15:2c:9a:a7:
a7:a1:0e:ca:a2:44:97:f1:76:75:7f:e8:9a:18:89:a1:6c:55:
03:4f:78:bb:c0:a6:de:04:de:94:21:60:22:44:13:f2:b7:4f:
56:52:e4:d9:f2:77:23:dd:81:91:11:b4:c8:d4:c0:19:c2:62:
9f:fb:01:73:2b:7f:e8:9a:5a:9a:74:aa:3e:14:d9:0c:be:e9:
d4:61:c4:b9:ed:10:e7:2f:f0:3e:74:47:2d:58:51:7d:82:33:
51:67:d9:82:57:69:f4:c3:68:b7:9d:9a:4f:5c:fd:fd:cd:ea:
00:78:eb:e2:3b:cb:6b:d5:c4:c0:37:52:26:64:b2:3e:b7:56:
68:c6:e2:b1:08:bb:26:83:37:54:dd:4a:43:fd:ff:7a:6b:8c:
29:29:20:75:63:54:f0:a8:19:91:56:db:b8:9a:83:0c:59:ec:
0b:59:2c:72:17:af:dc:46:6d:00:68:a6:0b:ee:df:c3:a9:96:
f4:78:7d:3a:0c:68:94:60:e2:d6:f1:f4:ac:12:2b:14:e4:9f:
4a:96:ad:a1:ab:54:c8:9a:1e:80:9b:ba:61:b9:26:6e:98:97:
30:20:e4:7d:e9:23:b4:56:4d:2f:01:1d:ae:2a:a5:00:dd:25:
b4:32:f5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:22 2026 by rpki-client