Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Yf-v-mU25vnR1z9d-Voc_C1nn4.roa
File: 8Yf-v-mU25vnR1z9d-Voc_C1nn4.roa (raw, json)
Hash identifier: 7xlonf5Gs8nufPbCsP5QvqBEwhy9uKI55+taHcvdZLs=
Subject key identifier: F1:87:FE:BF:E9:94:DB:9B:E7:47:5C:FD:77:E5:68:73:F0:B5:9E:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3D4D9FBF64E32B8FC475EA0F8C59D040
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Yf-v-mU25vnR1z9d-Voc_C1nn4.roa
Signing time: Tue 07 Jul 2026 15:58:45 +0000
ROA not before: Tue 07 Jul 2026 15:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402215
IP address blocks: 37.202.202.0/24 maxlen: 24
151.242.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:4d:9f:bf:64:e3:2b:8f:c4:75:ea:0f:8c:59:d0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 7 15:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f187febfe994db9be7475cfd77e56873f0b59e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:13:c2:5c:9d:7c:50:88:cf:9f:b7:14:ff:c4:
ec:63:9d:57:a6:9e:21:cf:85:e8:54:19:be:19:5a:
5e:fc:c7:31:b8:13:0b:86:e1:63:bc:ab:36:50:65:
6e:82:e7:b3:48:69:4e:7d:3b:c2:31:9b:b9:ee:53:
46:17:28:8c:9c:61:bb:48:b6:21:d8:eb:9b:d3:11:
63:7c:84:5a:87:6f:b9:02:dd:49:5f:76:c2:9e:59:
b9:fc:6e:de:85:11:fc:cf:0f:0f:8c:fe:bf:c5:c8:
58:bf:08:67:0e:16:16:4c:1b:1c:c1:57:18:03:00:
f2:0d:c0:8e:ca:c2:14:89:f9:47:98:27:d6:6c:ea:
dd:90:b2:72:4e:a5:c4:fd:6d:b9:46:e1:58:5c:8a:
40:17:5e:45:52:a4:f6:a7:69:81:dc:76:91:43:b9:
0a:43:9b:ae:ad:11:38:7e:bf:e8:a2:d7:17:28:cc:
ca:5f:75:dd:30:48:e6:70:85:48:4a:da:bb:3d:78:
6e:c5:f7:c0:65:82:96:19:27:3d:fa:a4:d7:20:f5:
17:e2:75:60:d4:94:09:60:0d:a2:78:d5:13:11:83:
32:e8:20:a2:83:87:d0:3c:4b:f8:81:4b:bc:88:55:
e3:9b:92:64:06:6b:a1:82:b2:89:04:89:bc:c5:65:
5b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:FE:BF:E9:94:DB:9B:E7:47:5C:FD:77:E5:68:73:F0:B5:9E:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8Yf-v-mU25vnR1z9d-Voc_C1nn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.242.129.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:0e:51:5d:3d:fb:ce:23:7b:f7:bf:5e:1f:e8:83:4e:7f:bf:
b7:4b:62:22:e5:b9:51:d9:71:e8:2d:3f:1b:38:c7:fd:ef:de:
b8:17:fb:94:98:37:0f:2e:8b:23:13:63:33:e2:85:19:4d:98:
6c:b6:5b:dc:ab:bb:43:49:b3:08:db:01:d8:e2:8d:a0:9f:30:
e2:45:61:82:eb:5d:3f:d5:76:ae:d5:56:82:b9:b9:1d:48:c4:
3d:1d:5d:88:c4:86:c0:46:4c:bb:35:4c:2f:8d:27:f0:cd:d2:
ea:c9:9b:53:c8:9d:fe:0f:dd:32:ac:af:f2:9e:ba:5c:d1:32:
20:a6:b9:29:4d:38:8e:4e:86:39:8a:1a:f9:06:8a:38:6f:0b:
06:d6:ae:90:84:00:db:bb:58:d0:51:5d:5d:12:db:03:10:ec:
62:46:51:ee:29:0b:af:d2:cf:58:59:91:60:4c:7b:72:dd:7d:
01:49:67:88:38:03:d0:58:b3:80:8c:a1:8f:02:cd:df:81:76:
2c:2c:41:8d:96:fb:3c:eb:fd:44:b8:7a:5e:67:ac:f2:6e:65:
7e:31:e0:8e:44:1f:f7:3a:52:6b:29:91:ec:d9:6b:12:ab:63:
27:b2:84:c8:aa:b6:c0:9a:42:c4:90:79:a9:b7:1f:cb:ee:75:
03:33:68:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:20 2026 by rpki-client