Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9WgNMeq4McL3Va_CZ2Vf2m9PjA.roa
File: H9WgNMeq4McL3Va_CZ2Vf2m9PjA.roa (raw, json)
Hash identifier: BhJjtc44nGPbfLeIhyGjXWZDRzsT4RSrAmC+HNxywPc=
Subject key identifier: 1F:D5:A0:34:C7:AA:E0:C7:0B:DD:56:BF:09:9D:95:7F:69:BD:3E:30
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CCA0237045C2E3B7F19DF27F1C94A5D5C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9WgNMeq4McL3Va_CZ2Vf2m9PjA.roa
Signing time: Sat 07 Mar 2026 20:34:28 +0000
ROA not before: Sat 07 Mar 2026 20:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213734
IP address blocks: 151.247.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 09:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:02:37:04:5c:2e:3b:7f:19:df:27:f1:c9:4a:5d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 20:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1fd5a034c7aae0c70bdd56bf099d957f69bd3e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:40:0a:3c:78:4b:d7:d8:49:2b:87:c3:d5:3d:
82:f2:48:65:9e:82:59:b3:79:68:44:63:c8:fc:be:
47:60:83:dd:96:b5:cd:64:43:b6:53:ea:1c:1b:d1:
64:92:b9:1d:f2:b3:9b:0b:f2:c6:20:89:48:24:97:
7b:93:88:86:04:96:48:22:af:6f:f9:07:28:82:14:
5c:7c:fc:27:c8:1e:5f:b2:95:94:0b:0a:06:28:6c:
de:b4:80:99:42:cd:28:a2:90:96:b5:e9:a9:a4:52:
89:48:7a:5e:4e:a3:2c:49:1d:34:ec:fb:4c:0b:8c:
31:f5:07:2f:fb:64:dd:83:93:93:01:52:89:c4:03:
c2:ef:75:f0:72:18:6f:97:59:fe:2f:a9:f7:f1:d6:
eb:f6:0e:9c:56:07:46:00:e4:13:91:ce:2f:4f:27:
f5:08:8f:11:97:78:df:71:13:26:c1:c7:1b:41:32:
d8:61:b9:d8:79:81:1c:3c:57:e8:f1:f9:7a:db:9c:
99:19:50:36:e7:10:3b:bd:44:5f:a5:57:c2:02:18:
80:8b:1f:50:ba:d6:fa:ed:1e:21:32:cd:89:e7:d5:
c9:d6:b1:e5:60:42:f0:f1:4f:d6:d2:34:fb:b3:38:
5f:6f:07:85:f6:8d:37:3b:46:3c:93:0b:10:f1:d9:
bb:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D5:A0:34:C7:AA:E0:C7:0B:DD:56:BF:09:9D:95:7F:69:BD:3E:30
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/H9WgNMeq4McL3Va_CZ2Vf2m9PjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.178.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8d:96:df:21:3c:d4:a2:c9:83:1a:39:8b:01:81:44:c0:b5:
6d:99:ea:7d:9c:54:f6:9f:13:dc:0a:e4:4c:0e:5c:24:4f:61:
68:77:98:43:88:86:ec:83:8d:45:9f:f8:76:f3:22:f8:78:3f:
4a:e5:bb:4f:98:c9:d5:1e:e5:85:01:fa:01:e8:43:df:07:3a:
99:25:c9:f7:b9:2d:5c:c6:8a:df:1f:c5:53:1f:bb:f1:07:07:
5a:22:cd:fd:55:3d:e1:48:08:0e:95:95:d9:db:e1:88:eb:40:
2d:3b:1c:d2:81:d2:d2:8c:25:c1:37:31:e0:b7:05:af:b8:ed:
10:a8:6d:62:da:55:ee:a9:99:ea:13:ce:b5:0c:0b:e9:69:07:
8b:e7:0a:3b:25:ee:6c:8e:9b:95:60:8d:e6:9c:ea:aa:86:31:
d6:65:41:3f:dd:ec:4b:42:b7:fc:4c:5b:61:d3:4f:01:67:b3:
18:5f:80:e2:d7:d9:05:5a:c7:31:dd:3f:a6:37:d5:c8:08:ab:
c6:23:da:5d:ea:bb:5f:ea:03:9b:3f:a8:f9:df:76:a0:a0:62:
89:03:20:f1:7e:41:5a:64:0c:90:f4:f8:1b:ab:28:92:5b:e9:
fd:41:a7:30:43:57:37:87:70:d2:4d:ee:44:67:60:e8:e2:44:
f5:ec:1c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 17 17:32:32 2026 by rpki-client