Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/70HDkxsVU-EM60WB6l8h6LvtV7Q.roa
File: 70HDkxsVU-EM60WB6l8h6LvtV7Q.roa (raw, json)
Hash identifier: alpgq6auw7fGqcdxChYvel/Y0aIOgtim/JsQoXK2kKI=
Subject key identifier: EF:41:C3:93:1B:15:53:E1:0C:EB:45:81:EA:5F:21:E8:BB:ED:57:B4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0DCBD1EAAC4542BFB8ADBF9BA734DB661
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/70HDkxsVU-EM60WB6l8h6LvtV7Q.roa
Signing time: Sat 26 Sep 2026 08:02:56 +0000
ROA not before: Sat 26 Sep 2026 08:02:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213186
IP address blocks: 151.242.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:bd:1e:aa:c4:54:2b:fb:8a:db:f9:ba:73:4d:b6:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 26 08:02:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ef41c3931b1553e10ceb4581ea5f21e8bbed57b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a9:ae:2d:bf:5a:51:d0:f3:b1:67:34:0b:72:
c3:25:30:b0:dc:5f:6f:49:69:8b:c5:c7:73:f5:ab:
11:91:b9:e8:5a:88:52:b9:85:7d:82:8c:85:37:79:
59:82:b9:06:91:09:b7:40:b1:46:cd:2a:f3:48:d4:
a7:8e:e9:25:01:91:95:d1:b6:d3:7d:c2:87:e4:1c:
ba:c5:3e:6f:29:b8:f6:6a:d8:54:36:88:4b:7a:81:
65:13:7f:76:9f:e2:16:44:b1:ac:71:43:1b:86:89:
03:b3:c9:af:54:65:a7:cb:3f:84:e3:ef:47:22:10:
06:28:29:be:79:5a:f4:46:b6:27:53:58:ea:a6:d7:
b5:08:52:67:9d:ec:cd:3c:7a:81:35:f2:6e:4b:03:
c0:10:b0:37:60:24:aa:99:56:f7:64:93:dc:20:41:
c6:19:5f:ea:b0:22:16:48:8f:9b:af:19:85:80:3d:
9f:d9:72:67:aa:0d:b8:f0:0c:54:c0:b2:7c:24:92:
7c:7f:45:cb:0b:83:56:e7:a0:3c:4e:41:84:e0:b7:
5e:c5:88:f9:59:fc:21:16:c7:f9:b0:9b:81:7d:76:
e6:b0:1b:49:23:ce:de:ac:d2:db:44:f3:b7:03:e2:
51:ba:e4:22:39:93:4b:01:07:b9:dc:de:da:7e:ca:
ea:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:41:C3:93:1B:15:53:E1:0C:EB:45:81:EA:5F:21:E8:BB:ED:57:B4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/70HDkxsVU-EM60WB6l8h6LvtV7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.92.0/24
Signature Algorithm: sha256WithRSAEncryption
13:04:6d:38:98:74:eb:e2:de:98:4a:74:35:36:da:3b:95:7a:
54:f0:b8:6d:31:85:8f:38:95:38:23:72:aa:6a:fd:b3:3c:32:
0a:26:77:38:79:09:32:d9:75:b2:80:82:89:bc:c3:05:a7:67:
32:98:e2:45:3a:e7:d3:d1:16:f0:4f:a0:e8:3d:9a:5c:78:7b:
62:38:eb:b3:29:c4:ce:76:b0:02:84:ec:b8:61:6f:b6:60:be:
17:59:68:1c:ab:7f:9d:e7:c7:48:af:fd:2e:e3:84:96:e2:c5:
aa:e5:77:d7:62:e8:ca:16:dd:57:79:7c:26:f5:b9:98:5c:be:
02:6f:fa:31:1a:70:79:63:d4:94:4d:1a:bd:90:14:81:b0:3a:
53:d7:95:39:fd:ce:a8:0c:e6:c5:94:fb:8d:da:bb:43:d4:f0:
44:c5:38:0b:6a:c1:45:b3:0e:60:8b:42:b4:17:24:77:86:3a:
da:08:ec:3e:ff:91:d6:39:a5:23:68:aa:5c:af:77:f6:f3:e7:
4c:03:9c:70:94:d1:e2:a3:f0:6a:60:e9:51:a0:5c:07:d4:90:
70:4e:71:d7:90:dd:28:a3:02:67:51:dc:4b:a8:2e:5b:1a:e2:
63:32:ac:78:31:28:3f:ad:94:3b:66:4b:82:3a:15:52:92:d3:
83:9b:c0:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 11:01:48 2026 by rpki-client