Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9j-3o7CkpNvGa7-W7WiV6Uj5aJg.roa
File: 9j-3o7CkpNvGa7-W7WiV6Uj5aJg.roa (raw, json)
Hash identifier: R5UGuF+Je5dqQncH6Ylpwu2Pqy4fE/wgFZtDkYNuhTU=
Subject key identifier: F6:3F:B7:A3:B0:A4:A4:DB:C6:6B:BF:96:ED:68:95:E9:48:F9:68:98
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FC7BFB54DD0DC0CEFD10337E662E5C276
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9j-3o7CkpNvGa7-W7WiV6Uj5aJg.roa
Signing time: Mon 03 Aug 2026 13:10:57 +0000
ROA not before: Mon 03 Aug 2026 13:10:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265919
IP address blocks: 151.242.227.0/24 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 07:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:bf:b5:4d:d0:dc:0c:ef:d1:03:37:e6:62:e5:c2:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 3 13:10:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f63fb7a3b0a4a4dbc66bbf96ed6895e948f96898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b5:e3:2c:d6:cb:e4:0a:98:b2:9e:c7:c7:56:
c5:a0:c5:40:41:ef:e3:b8:22:8e:e7:45:6b:d2:ce:
55:1c:3c:e1:1b:8c:c7:2e:d6:7d:b1:40:d1:dd:18:
90:e9:3f:f1:0e:72:d7:9b:cd:35:8b:4c:78:47:cc:
7c:6b:37:72:c8:1e:4c:5c:00:ce:58:b9:62:3e:ba:
fc:c0:a2:d8:5e:32:4b:b8:0c:39:24:ae:2f:f3:df:
93:58:ce:a2:3c:dd:50:9e:68:76:03:6e:47:a5:b8:
0a:d3:dc:37:53:19:14:19:28:f0:a8:9c:c0:85:60:
a9:fc:98:6f:6f:10:2b:a8:3b:81:63:dc:cd:f4:bd:
96:3f:4f:53:76:9a:80:69:55:74:80:89:5d:09:f5:
cf:86:f3:8c:d1:11:16:a2:27:c5:b1:c1:4d:22:24:
33:60:a7:5b:37:1f:71:73:11:87:01:79:3f:d4:2f:
01:30:99:bb:f4:e0:5d:4b:ce:5d:59:fc:59:26:ae:
a1:21:4d:f1:43:c6:e6:19:44:db:94:1b:ca:87:42:
fd:0e:4c:75:1a:11:b9:19:2f:9e:21:2d:1d:b4:aa:
a4:a4:79:5f:c9:9b:85:c5:49:6e:68:93:f7:7e:0e:
55:78:bf:87:f5:a9:eb:1e:32:e2:e7:8a:ec:e8:42:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:3F:B7:A3:B0:A4:A4:DB:C6:6B:BF:96:ED:68:95:E9:48:F9:68:98
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9j-3o7CkpNvGa7-W7WiV6Uj5aJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.227.0/24
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
80:56:29:74:66:59:80:df:0d:5f:75:c8:a1:9b:3d:bd:05:f4:
22:49:aa:ae:f6:62:f7:d2:ef:5e:b1:56:00:47:73:9d:5a:5f:
c8:9f:52:b2:c7:08:d1:75:77:cd:69:95:a4:a1:75:f7:08:01:
d9:58:aa:d0:d7:80:c3:49:eb:d0:e7:02:4e:f3:36:a0:db:d6:
9e:a8:34:ed:2c:ed:ad:c5:03:ee:07:af:10:c5:69:59:4c:c2:
27:4c:a9:e3:98:8a:e8:25:50:b0:a1:b5:d3:1f:ed:42:37:b9:
b8:d7:39:d0:3e:b6:69:f3:7e:28:59:aa:0c:f3:f4:81:b3:8b:
f2:52:74:b4:9f:53:97:b7:30:a0:2c:a9:b9:01:2a:05:3a:25:
bb:89:bd:f7:50:71:3a:da:4a:59:1d:6b:04:76:83:bc:55:86:
bf:15:89:93:23:c4:83:ed:6c:70:a3:e8:2e:cd:c5:4d:0d:4e:
50:a3:4d:6e:67:88:5d:68:16:ba:54:f9:2c:76:9c:79:09:47:
bd:12:11:a3:0a:08:48:77:4f:24:e8:64:96:0e:4a:17:c3:36:
35:ad:be:d1:af:0a:66:00:53:39:48:b3:d6:a5:44:79:55:d9:
26:b6:51:8b:2a:16:96:14:fe:76:70:87:f8:3b:6e:b3:90:76:
09:a5:12:cb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ/Hv7VN0NwM79EDN+Zi5cJ2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODAzMTMxMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjNmYjdhM2IwYTRhNGRiYzY2YmJmOTZlZDY4OTVlOTQ4Zjk2ODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA57XjLNbL5AqYsp7Hx1bFoMVAQe/j
uCKO50Vr0s5VHDzhG4zHLtZ9sUDR3RiQ6T/xDnLXm801i0x4R8x8azdyyB5MXADO
WLliPrr8wKLYXjJLuAw5JK4v89+TWM6iPN1Qnmh2A25HpbgK09w3UxkUGSjwqJzA
hWCp/JhvbxArqDuBY9zN9L2WP09TdpqAaVV0gIldCfXPhvOM0REWoifFscFNIiQz
YKdbNx9xcxGHAXk/1C8BMJm79OBdS85dWfxZJq6hIU3xQ8bmGUTblBvKh0L9Dkx1
GhG5GS+eIS0dtKqkpHlfyZuFxUluaJP3fg5VeL+H9anrHjLi54rs6EKMQwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPY/t6OwpKTbxmu/lu1olelI+WiYMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOWotM283Q2twTnZHYTctVzdXaVY2VWo1YUpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/LjAwQA
l/ebMA0GCSqGSIb3DQEBCwUAA4IBAQCAVil0ZlmA3w1fdcihmz29BfQiSaqu9mL3
0u9esVYAR3OdWl/In1KyxwjRdXfNaZWkoXX3CAHZWKrQ14DDSevQ5wJO8zag29ae
qDTtLO2txQPuB68QxWlZTMInTKnjmIroJVCwobXTH+1CN7m41znQPrZp834oWaoM
8/SBs4vyUnS0n1OXtzCgLKm5ASoFOiW7ib33UHE62kpZHWsEdoO8VYa/FYmTI8SD
7Wxwo+guzcVNDU5Qo01uZ4hdaBa6VPksdpx5CUe9EhGjCghId08k6GSWDkoXwzY1
rb7RrwpmAFM5SLPWpUR5VdkmtlGLKhaWFP52cIf4O26zkHYJpRLL
-----END CERTIFICATE-----
Generated at Fri Aug 21 14:30:56 2026 by rpki-client