Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EQcPXWdsEe39EILMXR6-yIHOr-w.roa
File: EQcPXWdsEe39EILMXR6-yIHOr-w.roa (raw, json)
Hash identifier: 7xpu2UOw0mp8bwZlj4JWTLJHQANj5CLQVxL5+6GlVdA=
Subject key identifier: 11:07:0F:5D:67:6C:11:ED:FD:10:82:CC:5D:1E:BE:C8:81:CE:AF:EC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CAE1EEC34ADEC1BAF17890A90B001C718
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EQcPXWdsEe39EILMXR6-yIHOr-w.roa
Signing time: Mon 02 Mar 2026 10:36:28 +0000
ROA not before: Mon 02 Mar 2026 10:36:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152920
IP address blocks: 151.247.148.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:1e:ec:34:ad:ec:1b:af:17:89:0a:90:b0:01:c7:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 2 10:36:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11070f5d676c11edfd1082cc5d1ebec881ceafec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:2c:c5:d3:cb:ca:4e:fb:a2:55:b7:93:d7:0b:
25:9a:3f:60:2a:87:4d:a5:35:e6:70:2b:84:0e:22:
b2:eb:37:ae:be:7d:53:93:0f:02:f9:42:ea:ec:0f:
a2:2b:0a:87:88:b4:1a:0e:d6:53:7a:4d:75:01:06:
fa:12:ab:e9:29:90:f9:bf:7e:20:09:22:aa:6f:1c:
4a:ef:f6:0e:ef:8e:c7:72:52:29:ca:4b:c6:4e:af:
8f:eb:9f:1e:1c:81:80:c2:49:75:81:4a:72:49:1b:
ed:8e:49:09:12:fe:aa:fc:ef:fb:e9:b3:72:d6:7a:
bc:4f:f0:27:2f:45:77:35:da:d5:a0:d0:c8:7c:f3:
f6:3f:a8:63:13:a0:d7:56:49:87:17:33:e7:d3:a3:
69:19:29:32:9f:b3:87:5e:6a:9d:39:13:74:80:63:
bb:76:1b:9d:f7:e2:25:14:7b:cd:29:3c:41:87:52:
78:2c:b0:a4:18:12:f3:45:19:f4:de:e1:b5:7f:ef:
6f:3d:79:7c:90:a8:04:a6:c5:28:ad:e0:64:27:8c:
5b:cf:55:53:c5:53:fc:37:3f:05:1f:39:9b:7e:8a:
a9:0e:25:d3:42:44:76:ce:8e:37:2e:e1:c1:1e:0f:
0c:33:66:e2:78:d8:50:50:36:fc:8f:be:17:b3:c5:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:07:0F:5D:67:6C:11:ED:FD:10:82:CC:5D:1E:BE:C8:81:CE:AF:EC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EQcPXWdsEe39EILMXR6-yIHOr-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.148.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:bb:55:f9:f2:b5:95:38:4e:a0:66:a8:1f:04:2c:5d:67:70:
e3:bb:98:3c:07:dc:a1:69:a5:e4:35:2c:ed:e9:e8:12:36:be:
84:47:8f:19:d9:8e:98:11:84:d8:7c:10:c8:b1:ec:a4:b4:f2:
fb:13:0d:c1:9b:37:b3:41:1a:af:18:f2:34:f3:02:d3:5b:3b:
3f:db:52:05:74:c8:72:3b:a8:63:7f:19:75:a4:97:86:5b:a1:
8b:db:a8:c4:4e:49:f1:4f:51:7e:1c:59:81:1a:03:7d:8a:19:
5b:cb:09:64:f6:37:48:bb:7c:02:bc:16:cd:01:44:07:c6:40:
0c:ba:71:a8:3b:7b:fd:99:c5:b8:26:7f:4b:5b:32:ae:f5:7d:
a9:48:bf:41:ea:62:31:3d:31:60:50:a5:38:42:4c:f0:6d:fe:
6e:d0:3c:70:ed:da:2e:7b:24:f8:6f:71:95:82:ff:db:1a:72:
74:d1:c8:53:44:e2:25:21:6d:90:12:44:b2:01:8d:00:e4:c9:
69:d6:32:b5:57:ce:7b:c4:5a:da:7d:7c:3b:b8:cd:0c:6a:88:
63:a2:f5:46:8c:99:b5:97:db:73:77:46:f4:70:eb:1f:af:b6:
c3:79:93:0c:c7:78:6b:30:6b:13:dd:20:07:78:59:5c:4f:cb:
e3:f1:35:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 14:20:19 2026 by rpki-client