Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C5H8MaWlOxx6UzFjZE-nznCSjUw.roa
File: C5H8MaWlOxx6UzFjZE-nznCSjUw.roa (raw, json)
Hash identifier: XjDXd3egyI9YO14vF+34kPQ4m8vYbAibbMgU+8fqDqk=
Subject key identifier: 0B:91:FC:31:A5:A5:3B:1C:7A:53:31:63:64:4F:A7:CE:70:92:8D:4C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7D50D26EDB023C5D7BAAEA4C46C31EBF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C5H8MaWlOxx6UzFjZE-nznCSjUw.roa
Signing time: Sat 11 Apr 2026 16:12:21 +0000
ROA not before: Sat 11 Apr 2026 16:12:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 151.247.164.0/24 maxlen: 24
151.247.176.0/24 maxlen: 24
151.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 Apr 2026 05:15:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:50:d2:6e:db:02:3c:5d:7b:aa:ea:4c:46:c3:1e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 16:12:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b91fc31a5a53b1c7a533163644fa7ce70928d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:58:4f:21:04:6e:86:fc:3f:ad:7b:8d:05:
7c:77:3f:22:67:2c:2c:33:17:99:df:74:6c:71:39:
a4:eb:af:7e:5f:ad:d8:24:9a:b2:52:5c:43:f1:0e:
46:a5:86:bc:f1:1b:94:ba:aa:c8:87:17:b3:a2:39:
5d:fe:1b:06:47:ff:1a:05:42:ae:fe:5a:18:22:9b:
84:1a:d1:d0:63:74:01:28:fe:9f:e3:e0:52:91:84:
2c:27:87:37:b6:08:15:c4:ce:92:f6:cb:3b:a1:b6:
20:a1:f1:eb:7f:94:eb:0d:b4:a0:8d:57:81:26:3d:
4f:74:23:06:4e:5b:c1:ab:5c:ca:d2:7d:9c:6f:e5:
cb:8d:f1:e0:97:29:4e:7a:83:69:a8:02:48:b0:9f:
ed:06:d2:67:ec:f7:83:eb:2b:a4:06:cc:58:2a:a5:
77:19:6e:b0:67:58:4e:d5:8d:35:87:60:25:c3:1d:
0b:11:7e:62:18:95:2c:be:b1:ab:41:a5:9d:ba:e2:
fb:43:ff:14:25:99:ac:d3:2e:87:31:01:3e:04:06:
7b:cf:75:1b:19:aa:6c:d6:f0:b6:33:45:64:59:b8:
83:7f:d5:3f:d0:31:ad:42:fd:e1:98:7c:f3:2c:84:
4f:3b:f4:ff:f1:7d:37:cf:b8:10:b9:d3:ab:45:36:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:91:FC:31:A5:A5:3B:1C:7A:53:31:63:64:4F:A7:CE:70:92:8D:4C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/C5H8MaWlOxx6UzFjZE-nznCSjUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.164.0/24
151.247.176.0/24
151.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:8b:6d:8e:c0:41:1d:10:69:84:01:a9:d8:6b:45:6d:63:7c:
31:ca:43:0a:25:a3:7d:52:6c:b6:49:55:1c:eb:d5:a0:ab:5b:
e9:2f:64:51:c1:f6:1d:70:cf:6e:dc:48:9b:7e:2f:cb:21:56:
b9:6b:39:20:cf:91:8b:97:19:13:83:00:53:17:0c:02:ca:bf:
48:c4:6e:14:7c:98:7f:f2:2a:a3:d0:80:ec:b7:7f:81:da:aa:
a1:26:2f:9e:6f:7e:2c:a2:17:7c:23:68:dc:d5:5a:4b:fc:82:
3a:69:31:af:41:8d:85:74:e1:d9:f5:32:e3:fa:dd:82:6a:b3:
e2:80:7b:65:ec:51:c6:2d:d0:9a:d8:06:c2:b4:59:66:74:a5:
dc:02:3d:40:15:31:99:50:4c:af:1f:ea:4a:db:48:7e:7b:66:
01:17:b0:62:8a:23:fe:ef:d5:e2:e1:0a:0f:73:bb:94:88:33:
03:09:d8:de:91:e5:af:43:fe:26:c1:2e:f5:d8:9d:cb:2f:fa:
bb:13:62:b4:f1:87:e3:10:6f:60:fa:a1:8c:55:93:d8:0e:08:
ae:08:93:d1:9b:1e:c5:3b:70:a4:db:48:a9:c8:ee:c3:89:8d:
92:00:ac:b2:20:3f:e6:41:f3:56:f7:8c:d7:94:b0:0a:43:eb:
f2:0d:8b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:22 2026 by rpki-client