Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D7srcfXCoCHXAXqghxj6S-XdjUM.roa
File: D7srcfXCoCHXAXqghxj6S-XdjUM.roa (raw, json)
Hash identifier: RvJhhz22tB+UaJPCWc1Qf3xs+i8ZDrzoWQ0W3rmPDQk=
Subject key identifier: 0F:BB:2B:71:F5:C2:A0:21:D7:01:7A:A0:87:18:FA:4B:E5:DD:8D:43
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05D235DEB082FB333A9914807894373BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D7srcfXCoCHXAXqghxj6S-XdjUM.roa
Signing time: Tue 01 Sep 2026 13:23:13 +0000
ROA not before: Tue 01 Sep 2026 13:23:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 37.202.216.0/24 maxlen: 24
151.242.152.0/24 maxlen: 24
151.242.153.0/24 maxlen: 24
151.243.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 11:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:23:5d:eb:08:2f:b3:33:a9:91:48:07:89:43:73:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 13:23:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0fbb2b71f5c2a021d7017aa08718fa4be5dd8d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:06:ac:86:8c:94:a4:d6:dc:f0:f1:bc:54:
80:3a:82:1b:a5:66:f9:53:77:c5:be:96:9a:83:e0:
9a:a6:37:4d:91:74:e4:3a:6e:b5:97:8f:8a:73:cc:
e1:12:66:60:c4:82:ee:59:ae:82:22:90:8c:ea:9d:
db:53:ab:07:f7:cf:8d:a4:6a:ab:6b:1b:00:05:72:
e5:f9:a9:c8:fa:81:25:b2:b9:69:84:2f:30:99:05:
8d:4e:e4:8a:e8:d6:87:59:ce:df:04:53:79:d6:a3:
6f:22:29:d4:11:0a:8e:83:2e:74:c4:16:82:f9:de:
f6:6d:66:77:64:04:6c:4a:b6:e8:e1:8c:d1:cd:cd:
ef:44:52:ff:6d:da:8a:73:a6:17:17:a6:9c:67:11:
c8:f5:21:6b:bf:6b:f0:4e:81:25:7c:ed:0b:25:e4:
69:32:28:0b:6e:c9:86:26:10:01:8d:6a:ec:63:28:
19:a0:cf:17:36:7d:a2:18:3f:e9:77:7b:cb:f3:2b:
89:42:30:6c:8d:f8:f8:81:97:7c:93:07:32:1d:b5:
04:be:39:cf:df:72:3d:a6:6f:00:36:9d:df:b6:96:
d9:4f:73:e8:7d:bc:0f:2e:2d:9a:4b:12:3c:0c:8b:
ce:d7:ab:d6:d5:a7:4e:12:e6:63:c8:cc:59:d6:d3:
7f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BB:2B:71:F5:C2:A0:21:D7:01:7A:A0:87:18:FA:4B:E5:DD:8D:43
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/D7srcfXCoCHXAXqghxj6S-XdjUM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.216.0/24
151.242.152.0/23
151.243.130.0/24
Signature Algorithm: sha256WithRSAEncryption
79:ed:ff:58:94:55:8b:35:fb:a4:bb:74:f2:78:53:0d:2c:83:
90:ab:5c:f4:07:4b:e0:47:bb:1c:f6:1e:89:09:88:a3:85:de:
2c:80:48:00:28:3d:b3:3a:e2:8b:1f:09:46:ee:d5:78:e9:77:
29:36:88:67:6c:96:dc:92:95:a9:e3:8e:82:8e:34:0f:96:55:
13:b4:18:3e:08:b4:74:1f:5e:59:a4:8d:a7:0d:99:59:59:c9:
45:3b:35:48:2f:27:42:26:3e:da:01:28:cd:6c:b5:80:07:ed:
e7:f4:c0:01:f6:bd:18:c8:2b:7e:a1:37:94:8e:53:d4:a2:68:
60:bd:13:bf:19:77:70:a9:07:85:30:95:27:cd:21:99:cb:bc:
14:6d:d7:5a:b5:ad:56:fd:f2:69:77:03:6c:36:a5:8f:9c:c3:
7b:e3:ef:57:47:13:ad:69:76:fd:04:e4:0d:6b:2b:e9:14:d9:
27:7a:15:66:b4:cc:65:cb:88:0d:14:8e:b0:5c:ef:71:af:53:
10:ab:de:8f:c7:65:e1:c2:f4:b7:4d:10:0c:f1:d2:ca:72:f5:
90:84:31:42:60:6a:17:2c:58:3e:c2:94:c2:66:38:ae:90:de:
57:00:d4:76:a5:c1:4f:5c:bf:f0:ee:af:08:1e:74:26:c9:4d:
e3:a3:cd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:18 2026 by rpki-client