Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9D3u0N1kng2VO8t5F9Uduwptc8.roa
File: H9D3u0N1kng2VO8t5F9Uduwptc8.roa (raw, json)
Hash identifier: d3uJ7JlLWIvK5WLpTqwNCJBU3PgcqaXZb97mg0cBMs0=
Subject key identifier: 1F:D0:F7:BB:43:75:92:78:36:54:EF:2D:E4:5F:54:76:EC:29:B5:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E8E650F99E319A1D7CABAD9E93A894559
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9D3u0N1kng2VO8t5F9Uduwptc8.roa
Signing time: Wed 03 Jun 2026 16:50:48 +0000
ROA not before: Wed 03 Jun 2026 16:50:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197246
IP address blocks: 151.244.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 18:31:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8e:65:0f:99:e3:19:a1:d7:ca:ba:d9:e9:3a:89:45:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 16:50:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd0f7bb437592783654ef2de45f5476ec29b5cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:62:ee:8b:a7:4d:8c:bb:73:ca:0d:3b:fc:b4:
79:d7:89:4e:78:39:42:f8:89:a4:98:2f:bb:ea:e9:
3d:96:9e:5d:b3:ef:57:ae:eb:3c:d5:d7:2d:10:cf:
53:c9:d8:3b:ab:22:48:c7:b0:17:7e:f2:a4:17:50:
ac:de:dd:50:7d:58:fc:a7:58:03:80:69:6f:f8:7c:
3b:8d:5c:a8:4f:20:b3:76:cf:78:83:2a:f1:06:82:
85:59:f4:90:ad:23:05:ce:3c:11:1a:70:b0:f2:49:
78:a2:c1:11:f7:dc:3f:5d:31:7b:0c:64:38:4b:34:
c0:50:2c:ce:40:de:32:86:8f:42:46:35:ce:fd:2f:
4f:3c:3c:85:92:ff:69:74:9b:11:d3:4d:60:f9:25:
2d:21:f0:9f:3e:f4:45:84:3b:66:3c:e7:aa:f5:d2:
1f:3f:b4:b2:96:7a:61:92:03:95:bd:6b:78:b7:3c:
24:15:6e:26:e7:70:8d:94:6f:3d:49:f7:b4:5b:72:
aa:77:08:1b:89:99:df:c6:6a:ac:96:89:46:06:23:
e9:9f:39:08:71:62:17:08:62:cb:cf:65:33:c8:f4:
bc:51:73:5c:1b:75:fd:43:e6:13:09:a3:12:a4:71:
4f:52:1f:3e:92:63:41:a8:db:97:10:e5:7a:44:9c:
f9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D0:F7:BB:43:75:92:78:36:54:EF:2D:E4:5F:54:76:EC:29:B5:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9D3u0N1kng2VO8t5F9Uduwptc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.139.0/24
Signature Algorithm: sha256WithRSAEncryption
44:e9:b4:40:6f:ab:54:33:90:4f:22:be:33:46:8b:2b:2a:89:
ce:27:13:3f:51:62:d8:04:1c:fe:c7:c6:26:7d:31:2a:5f:c0:
00:8f:56:2b:09:99:fd:4f:cc:27:9f:d2:27:53:ef:6c:b0:7c:
90:4d:f9:90:4a:ae:89:aa:56:cc:f1:9c:e8:a1:a1:ea:40:48:
2c:98:d8:5b:b1:86:0c:eb:7f:76:ce:31:39:e1:f0:d8:3d:6d:
c7:a6:41:c9:04:9d:b5:18:ee:65:5b:60:3a:7f:fb:32:83:21:
2e:9e:02:16:58:0b:43:e3:0a:67:a7:a8:24:93:2f:24:bc:b9:
1c:9e:b0:2d:de:ea:cb:47:88:0f:42:48:5d:3a:f1:7f:91:66:
a3:1b:16:e7:74:00:6a:6a:b8:7d:9a:c6:42:3d:57:99:85:ac:
bf:36:67:25:85:a4:d7:8e:c0:f9:e5:19:a9:14:bf:ca:34:13:
22:09:c6:9c:19:29:51:7b:a2:61:43:f8:fa:e8:5a:78:cb:27:
f0:40:1f:a4:b6:54:fb:24:5f:88:34:63:41:14:c0:65:60:b5:
19:6d:95:32:f1:7a:70:bc:0d:50:31:61:f2:f6:d6:67:79:d3:
00:d1:7e:ae:02:a8:7e:eb:1a:03:90:33:0d:7b:91:77:de:b6:
07:31:12:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 03:11:25 2026 by rpki-client