Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7IMhlboUnXdb9kUuwCLw0T5go_0.roa
File: 7IMhlboUnXdb9kUuwCLw0T5go_0.roa (raw, json)
Hash identifier: juLHVv9ha438CV78hDYN+DsUDLIk4EJ1qldCQdQiUQ4=
Subject key identifier: EC:83:21:95:BA:14:9D:77:5B:F6:45:2E:C0:22:F0:D1:3E:60:A3:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0FC97A3D494BD071C12707E9914947A84
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7IMhlboUnXdb9kUuwCLw0T5go_0.roa
Signing time: Fri 02 Oct 2026 12:29:51 +0000
ROA not before: Fri 02 Oct 2026 12:29:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402265
IP address blocks: 151.246.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:97:a3:d4:94:bd:07:1c:12:70:7e:99:14:94:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 2 12:29:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec832195ba149d775bf6452ec022f0d13e60a3fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:03:67:66:c4:38:41:39:f9:91:1f:73:e2:
8b:1c:df:1e:9c:dd:d5:d3:92:2e:16:97:ef:40:b4:
45:b8:8b:69:d1:87:5b:7b:4c:93:3c:0a:ac:b5:98:
f6:cb:71:d2:fb:c5:89:b3:86:3b:c3:78:c7:df:34:
2d:5b:90:d7:48:4c:39:b7:6d:e4:98:6f:2e:6d:ad:
3d:96:40:58:57:bc:7d:f0:72:0b:c4:94:ad:b8:a7:
df:46:d7:24:ad:3b:c7:cc:1b:cc:f7:7e:46:73:4c:
b3:2a:fd:be:e6:67:10:bc:87:fa:bc:bc:ca:92:83:
91:c8:9a:56:cf:27:79:a5:4c:b7:a6:1f:f7:67:88:
07:2f:0f:0e:77:52:52:b2:b4:62:0c:c7:b3:2a:f1:
f0:8f:e3:1c:d5:cc:a8:1b:a5:c5:6c:17:7b:30:bb:
52:36:d4:53:70:ea:8c:87:08:a9:23:7a:03:5d:7e:
56:f9:ac:20:f4:45:99:ae:2c:74:43:c7:d1:3b:f7:
a3:53:25:cb:03:d4:9c:ad:fc:10:26:fe:83:49:49:
aa:97:31:94:85:16:3a:c6:95:b7:d9:fb:38:91:65:
46:d0:35:7b:36:16:92:26:b4:b3:eb:90:25:08:cd:
ad:b8:a7:78:18:12:f9:a5:4b:d5:21:13:15:0f:d8:
a6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:83:21:95:BA:14:9D:77:5B:F6:45:2E:C0:22:F0:D1:3E:60:A3:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7IMhlboUnXdb9kUuwCLw0T5go_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.147.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ac:e5:21:64:04:ae:76:29:54:25:5a:d1:3b:b1:15:02:82:
e5:17:7c:c6:09:a5:24:94:1a:8d:7f:f3:5f:39:1b:24:7a:55:
d4:b4:e3:84:eb:2b:a7:6f:ff:f9:45:29:d1:52:02:e2:c8:38:
4b:4c:ee:45:47:a3:58:3c:74:eb:ce:0a:8c:73:0b:7f:84:bd:
54:b0:a8:a0:17:34:f4:2f:2a:7f:34:55:66:97:a6:42:a7:61:
29:3e:c3:6a:0c:ed:81:5a:72:fd:7a:93:5d:3e:c4:27:5a:22:
fe:a1:13:c6:00:bf:9a:18:e9:c4:0d:ea:79:34:0f:35:de:35:
ef:15:4f:8c:92:8e:5e:3c:fb:59:a4:b2:01:41:ed:59:92:7c:
86:37:ec:bf:da:bb:c1:b7:46:4e:ed:44:e1:25:c3:b3:1c:d1:
d1:4d:28:80:b2:0d:56:31:21:1c:1f:25:94:c6:5d:d6:9d:da:
7f:75:f5:0b:00:1c:27:2c:95:43:49:40:c0:65:4e:b2:1b:fe:
01:da:e3:b9:f4:81:e1:e1:c3:8b:a2:32:2d:99:63:2b:de:25:
b7:96:6c:c2:0d:64:c0:25:24:23:6e:8c:19:47:c4:e9:3d:91:
ef:7a:56:59:b0:fd:5d:71:e1:15:85:25:82:84:da:59:0b:43:
fe:4d:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 17:16:14 2026 by rpki-client