Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6X1q5JB6dGx2JFKywhCLot1Fwv8.roa
File: 6X1q5JB6dGx2JFKywhCLot1Fwv8.roa (raw, json)
Hash identifier: fajUTt/TKQDC17q9necv8sWOWxd0mBgJjvAeuPtRTOw=
Subject key identifier: E9:7D:6A:E4:90:7A:74:6C:76:24:52:B2:C2:10:8B:A2:DD:45:C2:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A16890EB7F94232BD1D5B70B1353E3569B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6X1q5JB6dGx2JFKywhCLot1Fwv8.roa
Signing time: Fri 23 Oct 2026 11:41:30 +0000
ROA not before: Fri 23 Oct 2026 11:41:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 151.247.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:90:eb:7f:94:23:2b:d1:d5:b7:0b:13:53:e3:56:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 23 11:41:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e97d6ae4907a746c762452b2c2108ba2dd45c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:5e:8d:74:8c:84:72:f5:26:cd:60:a5:92:
1b:33:9d:9f:8a:16:9c:79:54:d3:53:1d:bd:e3:9b:
d0:8c:eb:8d:09:48:2e:fb:6c:e3:d1:ac:3e:a7:d8:
c7:bd:1e:ae:94:14:7f:3d:0d:d7:37:ac:fd:da:c4:
03:70:05:4b:ca:ba:30:4d:10:15:d5:45:fb:6d:48:
0e:bc:24:37:08:6d:24:d2:b2:14:d2:6c:04:92:04:
6b:45:44:2f:29:86:b9:b7:73:79:c2:12:eb:98:c6:
59:1c:93:9a:9e:f3:06:83:65:1d:c9:6e:b1:6f:99:
55:22:48:d4:00:13:ad:b3:67:6e:3a:22:37:f3:82:
af:1b:e2:28:35:b2:47:eb:f4:a9:9c:46:a3:00:de:
c4:c3:83:25:da:6a:20:d3:05:6f:8b:d2:bb:a0:0c:
ea:03:7b:f4:65:26:53:2b:5a:08:95:6d:ea:01:f9:
2d:de:2d:25:66:ba:53:13:bd:24:42:17:9b:c7:c2:
65:82:95:68:25:a7:3b:47:27:29:0e:cc:c9:2a:bb:
52:19:db:92:dd:ef:33:b8:11:c7:f3:77:68:d7:3b:
19:38:dc:2d:fd:d8:13:23:cf:b3:8f:a3:71:f6:1b:
11:64:51:73:b8:0f:72:a1:7d:1c:0d:c5:c0:4b:bd:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:7D:6A:E4:90:7A:74:6C:76:24:52:B2:C2:10:8B:A2:DD:45:C2:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6X1q5JB6dGx2JFKywhCLot1Fwv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.92.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:e2:60:d9:7d:7b:2a:59:2d:3b:90:36:17:4e:07:c7:14:c9:
fc:2a:e2:2d:35:9f:bb:16:ec:a4:4a:86:a1:49:28:51:34:18:
fe:a3:5f:a0:cc:9a:0f:45:63:a4:b7:9f:3c:0c:ca:ca:0d:2b:
dd:1a:3d:e6:cc:74:b7:58:f0:52:f5:1f:47:35:2e:3d:df:e1:
6a:af:cd:66:59:75:e7:79:9d:3d:24:aa:be:ef:94:8c:41:c4:
7f:58:60:3b:26:90:4c:8f:7c:b6:95:61:c5:a6:01:0e:65:ae:
c3:dd:38:29:bc:c5:2e:79:b0:cb:9b:a4:64:d0:e8:52:03:74:
02:69:39:fa:ce:ff:da:5b:41:6f:4c:d9:70:dd:77:a4:20:41:
8e:db:b5:42:af:75:62:d5:3d:ca:77:b6:a8:44:19:eb:d1:74:
74:fe:33:dd:59:ec:1a:1d:04:66:50:7d:b8:3a:bc:0a:31:ec:
03:d0:7f:00:41:18:ac:f4:16:03:ff:95:74:35:b7:26:9f:3c:
e6:f1:4d:73:05:d7:27:92:8e:3c:d7:bb:98:9e:ef:2f:38:7b:
26:53:c6:ca:d0:f7:b1:f8:d2:b8:15:84:a5:74:96:c4:b4:6d:
13:db:3b:63:6e:68:6c:87:ef:8c:1d:b4:cd:01:41:70:2e:4f:
4a:23:2d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:28 2026 by rpki-client