Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7XPN-kKxj91rwS4I3hX7zDwrtN8.roa
File: 7XPN-kKxj91rwS4I3hX7zDwrtN8.roa (raw, json)
Hash identifier: qGSQoGmMDkSfrQiB7JYyHGjUIW4aFdSqTVQsDD7V4Ro=
Subject key identifier: ED:73:CD:FA:42:B1:8F:DD:6B:C1:2E:08:DE:15:FB:CC:3C:2B:B4:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1223B53B2CE0FE2301BC0C5F9518297BC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7XPN-kKxj91rwS4I3hX7zDwrtN8.roa
Signing time: Fri 09 Oct 2026 19:54:35 +0000
ROA not before: Fri 09 Oct 2026 19:54:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43969
IP address blocks: 151.241.5.0/24 maxlen: 24
151.242.74.0/24 maxlen: 24
151.242.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:3b:53:b2:ce:0f:e2:30:1b:c0:c5:f9:51:82:97:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 9 19:54:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed73cdfa42b18fdd6bc12e08de15fbcc3c2bb4df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:f2:c2:c3:96:a3:7a:75:62:0e:17:46:41:
69:a4:e5:42:59:71:ac:ca:c3:aa:dd:ed:8a:e9:f4:
bc:d5:09:b3:b7:76:6a:26:8a:08:45:d9:51:ab:36:
2f:b2:3a:e8:a8:00:1c:3e:25:97:a1:e7:54:36:ad:
6b:0c:a8:37:b2:ea:5d:c9:98:a8:1a:bd:28:05:99:
32:ba:37:d8:f6:5a:5b:9d:6b:c5:00:40:87:68:1d:
1f:27:09:5f:40:a0:ef:98:28:77:cf:41:11:b9:7d:
33:6a:c5:21:38:43:aa:45:d7:91:97:d8:46:70:0a:
b5:60:e0:60:c7:fb:ab:0e:b1:e0:a3:a3:31:10:b2:
3a:a1:25:8d:4c:bf:80:ab:02:03:ee:a7:70:22:4c:
f8:74:05:70:b5:aa:bb:96:13:bd:9c:7b:21:bc:64:
cd:2a:a7:70:4a:35:cc:fc:2a:80:ca:2c:18:16:ef:
6f:b0:ff:88:9d:98:36:ec:67:24:39:e6:89:e5:8e:
d9:b3:a6:85:f1:ea:51:e9:9e:4b:e4:53:ac:9a:27:
d0:a6:43:3e:1b:d1:76:4b:25:4e:c7:eb:f1:b6:78:
77:4a:df:cc:9b:28:1e:b5:73:61:1a:e5:11:19:90:
05:84:df:b5:7b:af:6f:23:ff:52:b9:57:ba:30:35:
cc:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:73:CD:FA:42:B1:8F:DD:6B:C1:2E:08:DE:15:FB:CC:3C:2B:B4:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7XPN-kKxj91rwS4I3hX7zDwrtN8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.5.0/24
151.242.74.0/24
151.242.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a4:40:6b:8d:0b:61:6f:1c:41:95:bb:e7:23:70:5a:02:d0:
85:3a:d8:2a:56:73:66:df:d1:d0:76:c6:93:8a:a3:b1:b4:de:
26:92:00:6a:65:0f:c1:6e:7a:f2:f4:03:60:6a:91:2c:f3:6b:
8e:f4:49:fb:54:82:83:96:c6:52:51:1c:ea:f7:d0:6f:b4:0a:
6e:9e:6c:0a:d5:90:4f:ea:f6:53:a3:99:bc:6a:de:71:12:5d:
75:af:74:f7:09:13:6d:ed:9c:9a:8a:e0:6f:09:e0:1d:de:5c:
34:d6:eb:6d:00:b3:05:9f:5b:1b:93:b5:99:12:22:30:4b:2a:
72:57:e9:c3:fa:58:4f:64:38:94:38:0e:18:67:2b:91:34:e5:
57:1b:46:84:52:40:74:e7:ef:4c:63:c6:3e:68:7b:6d:1a:7d:
60:a7:3a:1e:b9:fe:57:4a:b8:b5:5a:6c:eb:60:2c:11:89:ee:
18:4d:bd:6c:88:60:aa:15:14:d2:4b:02:46:2f:4e:0d:83:65:
07:23:9d:29:18:0a:88:c7:5a:b4:3a:c2:7e:96:2b:c6:70:5e:
f5:3a:9d:42:41:8b:0f:92:96:40:62:c1:5c:88:ac:12:3e:4f:
79:ad:ee:69:99:9b:ea:45:be:59:d5:7c:3b:a7:9f:b4:80:1b:
d3:8d:04:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:27:46 2026 by rpki-client