Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/63ohh7Ilb5obt22kj7Hzlp22uGQ.roa
File: 63ohh7Ilb5obt22kj7Hzlp22uGQ.roa (raw, json)
Hash identifier: Wn7RULpe6vBBbbyJ81TTJt2b+6bBj0gQiGtpy+XW6Co=
Subject key identifier: EB:7A:21:87:B2:25:6F:9A:1B:B7:6D:A4:8F:B1:F3:96:9D:B6:B8:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F319486D8010EB1C89BECB7DC52CE292C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/63ohh7Ilb5obt22kj7Hzlp22uGQ.roa
Signing time: Sun 05 Jul 2026 09:20:45 +0000
ROA not before: Sun 05 Jul 2026 09:20:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 151.243.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 13:39:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:94:86:d8:01:0e:b1:c8:9b:ec:b7:dc:52:ce:29:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 09:20:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eb7a2187b2256f9a1bb76da48fb1f3969db6b864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:48:ad:44:ab:10:93:73:fa:a8:37:64:d5:a1:
3f:9a:6c:85:8e:0a:3b:be:b1:16:5a:69:6a:74:cd:
07:b9:52:34:ad:c5:3e:59:f9:45:dd:6b:a7:f9:ae:
20:4e:a1:0b:8c:11:19:2a:5b:fc:dd:80:d2:2f:d6:
c4:c6:6c:c8:46:77:a6:c7:31:bf:77:21:4f:68:8b:
fc:e8:ef:dd:b2:08:79:21:10:a5:e0:f8:79:45:62:
84:0c:b0:3c:cf:e4:89:8a:cd:aa:fb:2e:37:34:83:
6f:19:9d:92:6c:5b:94:97:91:d8:02:8a:b9:54:34:
c7:54:cf:71:1c:7a:0b:d5:5f:ab:6e:f7:1c:c3:11:
00:51:99:05:11:55:2f:c5:de:24:47:30:4f:a3:27:
b9:ce:b8:4c:a3:f0:87:3f:0a:e1:07:6d:6a:f2:d1:
dc:2c:34:20:1e:dc:ed:bb:69:25:06:68:0c:4b:c4:
9b:ea:5a:17:b9:73:f4:59:a3:e8:20:e8:78:6d:3b:
e3:11:21:6e:c1:7b:69:c0:29:9c:e8:61:ca:a7:df:
95:e3:9c:a5:57:93:77:76:02:81:16:85:46:85:c1:
de:60:8c:ef:20:30:01:dd:7e:b9:a2:71:56:72:3d:
f0:58:a5:6b:0c:c5:e6:8f:ab:c3:fe:33:4a:b3:8b:
80:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:7A:21:87:B2:25:6F:9A:1B:B7:6D:A4:8F:B1:F3:96:9D:B6:B8:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/63ohh7Ilb5obt22kj7Hzlp22uGQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.10.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:5a:f2:15:11:7c:49:ff:cf:e9:1a:38:4b:e2:e9:4a:d9:d4:
26:d7:36:2f:58:73:80:bf:99:7e:82:ca:ad:6f:f1:f4:53:0d:
c4:d7:36:eb:dc:49:2d:59:8a:3b:32:3b:8c:47:42:0f:b4:9f:
46:4a:7c:fb:22:e9:2a:2a:fc:81:10:0f:71:6f:e0:1b:8a:80:
79:17:73:05:31:ea:74:c8:a5:42:98:84:25:92:25:0e:38:5e:
cd:d2:09:d6:79:84:5e:08:4c:b9:e8:7d:86:0d:c2:63:6b:55:
66:75:35:94:ca:d1:43:44:af:a9:aa:94:d7:14:42:cc:e7:86:
7f:47:07:82:8c:40:c2:41:33:20:99:58:cf:2d:b7:ca:35:2a:
03:da:fe:45:8c:d7:5b:6c:2a:4d:9a:08:0a:63:0e:13:64:cd:
1c:32:6a:f7:e1:94:5c:9d:1a:50:89:cc:e7:df:d9:63:e3:b1:
ee:f3:5d:ad:0a:16:1c:97:68:94:7a:76:35:cd:a4:e8:1e:e9:
0c:e7:31:d1:f6:55:e8:0b:be:f6:eb:9e:e1:c0:0f:d6:34:2d:
fa:ca:6c:73:f8:e4:a1:0b:37:82:be:48:ad:87:5e:cd:ba:96:
2f:36:dc:f5:00:43:75:85:7a:d2:44:a5:df:39:dd:80:1b:a4:
95:ab:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 23:16:22 2026 by rpki-client