Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Gu6rKR6JP9RV1JARVnOLhjKof2M.roa
File: Gu6rKR6JP9RV1JARVnOLhjKof2M.roa (raw, json)
Hash identifier: I+QXa9Xp49Gzfg9yxXOkc4js4oHO4DI6+Vu4aobb5hQ=
Subject key identifier: 1A:EE:AB:29:1E:89:3F:D4:55:D4:90:11:56:73:8B:86:32:A8:7F:63
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0623E404BEACC465E502B12EF8CA5C262
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Gu6rKR6JP9RV1JARVnOLhjKof2M.roa
Signing time: Wed 02 Sep 2026 13:10:41 +0000
ROA not before: Wed 02 Sep 2026 13:10:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59993
IP address blocks: 151.243.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:3e:40:4b:ea:cc:46:5e:50:2b:12:ef:8c:a5:c2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 13:10:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1aeeab291e893fd455d4901156738b8632a87f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e7:d1:34:d2:f1:08:ce:1c:06:82:aa:99:4c:
67:fa:53:1e:7a:b3:89:58:d3:ce:93:08:cc:0f:01:
60:59:2c:ff:31:26:a4:fd:da:47:22:45:27:a8:29:
a0:b2:ca:0b:51:b5:ea:a4:19:00:ea:1c:13:3c:97:
94:d0:76:d1:50:63:14:40:e6:32:0d:8c:21:76:1b:
d6:de:84:99:28:8e:e8:17:1f:c4:34:4b:ea:9a:fb:
3d:c6:97:05:4b:cf:d4:0b:79:a2:73:ac:60:e6:dc:
87:e7:c8:4c:0e:6c:63:d7:21:d9:2d:4a:83:ad:11:
6e:d4:7e:90:50:3a:60:c8:2e:22:5c:a6:a4:e9:ad:
87:32:9f:e0:78:06:fa:5c:82:9b:47:68:b7:21:36:
3f:85:f7:63:34:c1:ba:5f:1b:6d:a5:21:86:d5:d7:
e8:92:57:7f:55:7b:8b:66:71:a9:e5:da:13:f6:a2:
22:8b:ae:96:c7:97:02:39:89:9d:ce:15:97:21:4d:
3c:2a:21:e3:09:38:a6:35:60:5d:b3:e5:37:06:0a:
29:09:87:d1:c8:58:52:f9:b2:db:d2:3d:27:78:0c:
21:98:36:d9:44:11:09:ac:7b:b4:25:02:51:68:26:
85:3f:6f:ff:60:8a:23:82:af:3e:1d:88:c9:6b:a4:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:EE:AB:29:1E:89:3F:D4:55:D4:90:11:56:73:8B:86:32:A8:7F:63
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Gu6rKR6JP9RV1JARVnOLhjKof2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.100.0/24
Signature Algorithm: sha256WithRSAEncryption
36:1d:c1:61:b7:d3:c8:f0:34:e9:f5:00:d3:53:9d:ff:14:31:
2c:f0:4c:a0:4b:c4:d2:dd:2d:1a:0f:12:b3:f4:96:8d:0f:12:
66:a1:65:27:44:84:81:24:a8:4f:92:2f:ec:97:ae:f8:d1:64:
2f:48:ba:a5:d6:22:68:02:40:0b:aa:d0:61:96:ef:74:9a:05:
51:96:4f:f9:61:23:23:c7:ec:53:ba:28:02:6c:de:e0:c1:cc:
34:69:c6:19:f8:6b:2b:97:90:77:01:41:78:50:df:06:76:0c:
49:42:67:e5:ea:08:a9:86:4d:06:35:79:f7:95:56:59:11:37:
1c:2e:fb:2d:39:24:14:6c:66:9c:6b:47:fc:f7:79:39:0d:82:
a6:35:29:d8:af:00:7c:52:3a:c7:62:d8:85:51:11:af:f1:e3:
6c:ab:19:4b:e1:56:78:85:ce:93:62:f2:6e:b0:85:fc:bf:9b:
8e:9e:8b:b2:99:c4:34:7e:8f:11:18:2f:ae:71:da:e2:20:e1:
af:e5:b0:36:98:12:00:7c:7f:8d:25:b9:a4:16:14:f0:ce:ae:
df:50:37:cc:4e:a4:39:73:88:16:74:e9:88:fc:b9:12:3f:28:
2c:2f:77:62:8b:cb:7b:0b:81:b6:38:9b:fe:42:08:54:e7:59:
fc:a4:fa:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:12 2026 by rpki-client