Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C3ZqlDNE7ekrWtCho-y4LAdUeeg.roa
File: C3ZqlDNE7ekrWtCho-y4LAdUeeg.roa (raw, json)
Hash identifier: tSBCVb+I+2qqrPgZ1SNgOLG+xsplLCn1uQ3YhCsHqHk=
Subject key identifier: 0B:76:6A:94:33:44:ED:E9:2B:5A:D0:A1:A3:EC:B8:2C:07:54:79:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DEC0E90B03E785B5EB56D593C7B5645A8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C3ZqlDNE7ekrWtCho-y4LAdUeeg.roa
Signing time: Sun 03 May 2026 04:17:50 +0000
ROA not before: Sun 03 May 2026 04:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215607
IP address blocks: 151.243.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:0e:90:b0:3e:78:5b:5e:b5:6d:59:3c:7b:56:45:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 3 04:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b766a943344ede92b5ad0a1a3ecb82c075479e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:84:1e:99:ab:dd:bf:54:1a:1e:60:f4:ed:
49:52:bc:9d:ff:b6:27:ab:5e:aa:14:23:4a:b0:1a:
5b:df:69:bb:47:95:7e:a3:32:d3:f6:85:fb:3d:b7:
00:0c:58:da:ca:54:bc:d4:eb:62:d3:f7:3b:f1:0c:
c1:a5:9c:fb:d6:ea:c8:ee:35:1a:61:55:45:93:9d:
10:5d:ba:8e:57:f2:a4:ff:96:95:f8:20:e9:55:ee:
d9:64:be:b2:23:71:1a:45:9e:0e:f3:22:d3:20:b3:
4f:26:41:f5:af:4b:74:77:e2:a9:29:e5:03:5c:a6:
c4:ea:13:fb:ef:29:9a:0d:bf:38:dc:e9:be:1a:4a:
ec:08:42:d2:1d:20:c1:a2:33:47:3b:02:c2:20:63:
57:f7:73:09:26:da:00:76:1a:05:6b:bd:db:6f:26:
d8:41:c4:ca:ae:f3:f0:3d:4e:25:97:27:2b:7f:04:
e8:c0:76:09:21:a1:36:59:b0:fb:fc:fd:e2:f6:54:
c4:ce:a0:d5:59:85:65:6c:7c:57:e9:4a:e1:3e:d1:
63:b5:60:0a:5c:16:64:84:88:42:bd:97:ef:64:ad:
c0:b9:19:28:4d:37:68:fa:80:57:49:34:90:49:b5:
b5:0b:dc:ff:fc:c2:ed:6b:13:4f:9a:82:b5:9b:87:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:76:6A:94:33:44:ED:E9:2B:5A:D0:A1:A3:EC:B8:2C:07:54:79:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C3ZqlDNE7ekrWtCho-y4LAdUeeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.32.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:19:32:ed:93:bb:a5:1a:e3:4b:a8:00:5f:1e:fd:03:83:d3:
eb:ef:cd:49:38:f4:56:00:0c:00:ca:14:45:04:31:a3:18:27:
25:28:91:7c:62:5d:ec:4b:cb:8b:6e:dc:b1:a7:31:9c:d1:6f:
eb:ce:ad:41:ca:e1:9a:79:9d:09:6a:f7:16:45:56:2e:c0:65:
8c:04:d8:d0:f1:c5:c7:8f:6e:be:bf:28:73:81:eb:1a:36:b3:
c8:85:4f:1c:fb:4c:fd:4b:fe:3f:79:fd:30:06:d5:87:fb:02:
57:27:66:f4:65:e1:c0:c9:b7:51:f5:53:67:1b:33:a2:c3:a5:
2f:47:3c:d9:24:05:19:5a:de:f8:74:93:eb:3a:ef:a9:2e:9b:
93:85:e1:e0:da:33:3d:c3:26:72:b6:0b:4d:75:99:12:b4:b0:
2f:f2:2e:3c:65:60:f9:0d:54:ee:6c:97:08:3c:b3:42:f5:28:
ae:35:48:f3:68:33:58:c8:71:ae:fd:13:12:ab:06:eb:7a:f0:
26:f2:79:a1:20:3b:d6:4a:57:c5:e9:d4:fc:d8:13:80:38:6d:
03:67:01:39:b0:cd:f3:1a:10:b3:0e:5d:45:56:d4:db:59:48:
36:45:60:8c:83:f5:d5:d4:4d:d7:7e:8f:43:04:ce:a2:30:b8:
09:57:65:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 8 15:35:32 2026 by rpki-client