Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CBWsxFg9iAu9eAx19URmeJOBixo.roa
File: CBWsxFg9iAu9eAx19URmeJOBixo.roa (raw, json)
Hash identifier: K/kp1QvXLCniWDXkk2ULE5/nXRYs9HqDC5mzF/k8JOc=
Subject key identifier: 08:15:AC:C4:58:3D:88:0B:BD:78:0C:75:F5:44:66:78:93:81:8B:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0E30DEF0756C69841926053E1731AF5E2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CBWsxFg9iAu9eAx19URmeJOBixo.roa
Signing time: Sun 27 Sep 2026 13:28:56 +0000
ROA not before: Sun 27 Sep 2026 13:28:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203676
IP address blocks: 151.242.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:0d:ef:07:56:c6:98:41:92:60:53:e1:73:1a:f5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 27 13:28:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0815acc4583d880bbd780c75f544667893818b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c8:78:1a:f1:9e:1a:09:1a:a2:72:b8:0a:09:
eb:73:1c:33:4f:f9:5e:46:9f:e0:55:7e:e0:10:6b:
e1:29:75:52:3d:f0:2e:90:54:64:96:1c:65:35:79:
89:f9:6d:c3:9d:6c:92:c4:42:2f:95:bd:52:28:1a:
62:c7:88:67:15:cb:95:b5:51:16:e1:50:82:52:a4:
52:de:f0:5c:c4:b2:83:e1:95:fe:ff:bd:00:12:01:
6d:c5:0c:98:ce:ea:95:f2:14:ff:15:06:4d:d3:fc:
5c:bc:d4:d4:54:7f:58:d6:a8:18:50:f4:4a:a2:21:
af:4c:b5:0f:c2:5f:6e:a2:0f:28:1d:4b:bb:ee:ab:
e3:05:3d:6c:16:da:7c:90:8e:3a:bb:5a:bc:ec:1e:
84:6e:cf:0f:03:10:f1:c9:2f:52:4c:d1:17:31:6c:
d9:12:b2:2e:71:dc:58:6e:db:3e:d1:f0:24:2b:f9:
05:62:c6:b1:ca:b3:99:b1:0e:2f:4f:86:da:c7:64:
bd:3b:8e:75:d1:2d:fb:53:e5:3d:75:94:b4:46:d1:
82:2d:d0:80:ba:a4:d1:a3:af:0e:4e:8b:74:77:39:
a9:e1:20:1b:9e:cf:e8:2d:c1:6c:49:84:ca:8d:d4:
3c:49:61:28:ae:d7:d4:76:28:da:d5:11:a6:ce:08:
d3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:15:AC:C4:58:3D:88:0B:BD:78:0C:75:F5:44:66:78:93:81:8B:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CBWsxFg9iAu9eAx19URmeJOBixo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.239.0/24
Signature Algorithm: sha256WithRSAEncryption
35:67:17:3c:a4:b1:1f:9f:13:95:80:b2:b9:b1:02:6c:73:8d:
56:59:97:22:d9:01:fa:25:12:6f:92:3b:aa:d9:c1:ca:1c:7b:
19:08:6c:bc:60:c8:f7:24:27:d8:65:db:3e:87:0a:8e:11:de:
33:07:30:61:e5:5c:d7:31:1f:d9:a7:66:67:17:b8:e8:f7:f7:
30:d3:53:fe:0d:14:fa:32:8e:4b:0e:4f:68:71:ff:c1:89:16:
cb:b9:52:4a:47:d7:02:1a:1c:44:e9:4a:38:80:ed:99:56:7f:
90:20:2c:ef:45:53:72:22:69:7d:c1:23:7c:c8:39:30:c6:92:
b0:ae:a7:e2:ff:7c:c2:2d:87:0c:9e:d9:94:ff:01:35:11:2d:
75:21:dc:f5:73:a2:c6:86:21:20:f2:64:04:90:21:b2:a0:10:
3a:e9:50:ab:28:d9:53:8d:5d:04:1f:f1:ea:2e:78:f8:7b:e3:
fe:f8:dd:6c:0e:48:b7:b3:cf:9e:37:a5:89:e8:d3:b0:a4:c8:
64:e2:1e:7e:00:ff:3f:2b:41:da:f0:72:d3:53:24:a1:96:a3:
78:62:bd:70:ae:15:e3:80:a1:eb:0f:a8:c4:79:38:e4:ac:08:
d7:23:cf:a5:20:68:4d:ea:e2:04:0d:8c:56:00:ef:f1:5d:48:
c4:96:27:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:27:39 2026 by rpki-client