Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CpE8f0PsXWA-7hJm-AdA2IQ37Vc.roa
File: CpE8f0PsXWA-7hJm-AdA2IQ37Vc.roa (raw, json)
Hash identifier: Y46Wfdx436PwdB1NO1DdIqMLHMCR+cqAWjghlnF0M2Q=
Subject key identifier: 0A:91:3C:7F:43:EC:5D:60:3E:EE:12:66:F8:07:40:D8:84:37:ED:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4B21AB589E2A1EB1DD1ACF86516BA676
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CpE8f0PsXWA-7hJm-AdA2IQ37Vc.roa
Signing time: Thu 21 May 2026 15:22:38 +0000
ROA not before: Thu 21 May 2026 15:22:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14293
IP address blocks: 151.243.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:21:ab:58:9e:2a:1e:b1:dd:1a:cf:86:51:6b:a6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 21 15:22:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0a913c7f43ec5d603eee1266f80740d88437ed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:84:d9:bc:a6:e9:c2:ec:fb:70:66:0f:20:f9:
cc:f6:c3:09:2f:98:a4:07:4c:c8:4a:29:1d:e2:c0:
8f:c4:96:64:14:ed:75:f2:f0:ba:a8:e3:4c:ea:b6:
cd:45:74:3c:bb:ae:62:27:bd:a2:97:c8:5e:36:1e:
7e:f6:1b:81:7d:b1:e7:60:8f:7d:2d:fc:a6:6a:9f:
4d:1a:e7:c5:21:32:14:68:bc:26:d7:fd:a6:71:c6:
c4:1f:48:05:6a:fe:d6:df:40:be:07:f8:11:82:7b:
7f:33:18:62:9a:66:15:17:51:69:44:62:ca:57:83:
f0:2b:19:58:01:f7:ce:6b:7c:51:8e:1d:78:28:8b:
b6:79:b5:f4:22:7e:41:b8:88:92:9f:70:99:af:7a:
e1:3c:6b:21:f2:3b:af:66:26:fb:45:ee:1b:c7:91:
8e:11:34:5c:bb:b2:83:f7:a0:f6:f4:c9:51:d1:f2:
0c:74:22:49:42:19:cc:27:4c:ef:cc:57:88:ff:6c:
96:fa:32:a3:dc:f7:72:46:ce:82:da:37:23:76:64:
76:00:54:0d:47:00:6d:89:d8:f4:8f:57:a3:c3:1f:
e1:f2:a2:b7:5e:f6:be:64:2b:21:da:ee:f5:10:e1:
e4:cb:44:3c:fc:d2:cd:16:ee:b4:69:67:28:39:4b:
70:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:91:3C:7F:43:EC:5D:60:3E:EE:12:66:F8:07:40:D8:84:37:ED:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CpE8f0PsXWA-7hJm-AdA2IQ37Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.170.0/24
Signature Algorithm: sha256WithRSAEncryption
20:8d:85:0b:24:51:01:82:57:bb:7b:f8:8e:f4:a7:79:a1:93:
19:ea:09:c8:34:ae:30:4f:8f:de:0e:e7:82:17:b6:ef:47:e6:
b4:4e:10:53:95:3c:28:d1:9c:bc:12:07:f0:07:d3:b4:da:fe:
fd:9e:26:52:ec:46:fe:f4:4d:70:71:5e:3c:7a:98:b4:47:33:
e8:7b:de:57:af:f2:8d:df:75:53:6b:a3:4f:e4:25:04:24:c1:
d6:19:58:58:a0:aa:81:97:b7:41:40:c7:47:87:0c:76:33:dc:
4f:a6:f9:28:98:62:6a:30:78:b5:63:1e:e7:a2:73:a7:5f:94:
92:a6:91:ac:46:fa:93:fa:1f:fb:cd:87:cb:0d:aa:cb:c4:8e:
21:b4:ee:95:15:7f:4f:de:86:69:f8:93:59:1d:5f:5b:c1:06:
56:32:78:d1:4d:14:c9:52:03:91:aa:ef:8f:dc:7d:17:0f:5a:
a5:ec:3a:4a:5f:c1:a6:97:ab:72:fc:98:9b:c5:d0:30:dd:4a:
3f:69:78:93:06:f7:41:89:e9:6a:31:ea:c1:26:d2:7a:55:0a:
d1:d5:22:f1:5e:2b:5e:a1:1f:59:93:79:15:af:44:bb:ab:a9:
9e:5f:2d:ba:ff:10:55:b9:87:fb:c3:4d:4b:85:70:3e:61:27:
a1:a1:73:c4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5LIatYnioesd0az4ZRa6Z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTIxMTUyMjM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYTkxM2M3ZjQzZWM1ZDYwM2VlZTEyNjZmODA3NDBkODg0MzdlZDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvITZvKbpwuz7cGYPIPnM9sMJL5ik
B0zISikd4sCPxJZkFO118vC6qONM6rbNRXQ8u65iJ72il8heNh5+9huBfbHnYI99
Lfymap9NGufFITIUaLwm1/2mccbEH0gFav7W30C+B/gRgnt/MxhimmYVF1FpRGLK
V4PwKxlYAffOa3xRjh14KIu2ebX0In5BuIiSn3CZr3rhPGsh8juvZib7Re4bx5GO
ETRcu7KD96D29MlR0fIMdCJJQhnMJ0zvzFeI/2yW+jKj3PdyRs6C2jcjdmR2AFQN
RwBtidj0j1ejwx/h8qK3Xva+ZCsh2u71EOHky0Q8/NLNFu60aWcoOUtwCwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAqRPH9D7F1gPu4SZvgHQNiEN+1XMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ3BFOGYwUHNYV0EtN2hKbS1BZEEySVEzN1ZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OqMA0G
CSqGSIb3DQEBCwUAA4IBAQAgjYULJFEBgle7e/iO9Kd5oZMZ6gnINK4wT4/eDueC
F7bvR+a0ThBTlTwo0Zy8EgfwB9O02v79niZS7Eb+9E1wcV48epi0RzPoe95Xr/KN
33VTa6NP5CUEJMHWGVhYoKqBl7dBQMdHhwx2M9xPpvkomGJqMHi1Yx7nonOnX5SS
ppGsRvqT+h/7zYfLDarLxI4htO6VFX9P3oZp+JNZHV9bwQZWMnjRTRTJUgORqu+P
3H0XD1ql7DpKX8Gml6ty/JibxdAw3Uo/aXiTBvdBielqMerBJtJ6VQrR1SLxXite
oR9Zk3kVr0S7q6meXy26/xBVuYf7w01LhXA+YSehoXPE
-----END CERTIFICATE-----
Generated at Sat Jun 6 06:39:01 2026 by rpki-client