Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HKAgQtPvpt7fiORr4zduT85rMvk.roa
File: HKAgQtPvpt7fiORr4zduT85rMvk.roa (raw, json)
Hash identifier: wwUIhWFGWC8kjWQAIhBkYeLsL/amhyZNiWzzYv3jZzM=
Subject key identifier: 1C:A0:20:42:D3:EF:A6:DE:DF:88:E4:6B:E3:37:6E:4F:CE:6B:32:F9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E7510132BB0167F0BBE6E1D4F34559532
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HKAgQtPvpt7fiORr4zduT85rMvk.roa
Signing time: Fri 29 May 2026 18:47:28 +0000
ROA not before: Fri 29 May 2026 18:47:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203731
IP address blocks: 151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:75:10:13:2b:b0:16:7f:0b:be:6e:1d:4f:34:55:95:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 18:47:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1ca02042d3efa6dedf88e46be3376e4fce6b32f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f7:a6:05:5d:4b:df:86:a4:d1:cb:db:1a:d7:
73:b0:7f:20:2e:32:50:3d:fb:8b:30:6d:a6:b2:23:
15:8b:cd:57:3a:ff:cc:41:8d:59:3c:81:ef:21:42:
30:5c:04:29:96:99:47:f7:57:20:9d:6a:1d:50:60:
90:db:b3:85:54:9e:1c:3e:49:76:65:bf:a7:42:91:
f7:b9:5d:c8:a1:34:e8:04:0f:15:17:8a:8b:69:f9:
e4:5b:af:62:ac:5a:6a:d7:01:4b:54:70:f1:47:d1:
79:04:1c:3d:07:93:a0:88:86:13:ac:5a:9e:a2:37:
cd:f2:12:31:8c:d6:67:03:58:26:a5:f3:c9:22:db:
f2:5e:ea:4f:a1:0c:51:6d:84:94:03:4e:1d:29:40:
00:14:0a:aa:fd:1e:f0:e4:9b:6c:48:dc:c4:bc:b3:
d2:53:96:b8:93:41:66:c9:9e:d7:8f:77:fb:26:35:
06:74:be:7d:4f:a2:c1:a3:8f:dd:38:af:9c:e5:14:
b2:be:d4:30:44:f4:77:4a:3c:d7:5b:32:eb:70:ba:
3d:41:ce:73:55:9c:6e:63:9d:8b:e7:7e:77:01:28:
78:77:22:f2:65:e7:32:73:e8:fd:ed:09:ff:39:50:
2d:67:47:41:dd:8e:63:74:2c:10:5b:60:18:e6:bc:
cb:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A0:20:42:D3:EF:A6:DE:DF:88:E4:6B:E3:37:6E:4F:CE:6B:32:F9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HKAgQtPvpt7fiORr4zduT85rMvk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:34:a3:f9:66:43:df:00:8c:97:1b:61:62:b9:04:d1:a6:77:
2f:e8:cd:43:69:9d:14:5b:9b:6c:a1:99:03:70:32:6e:f6:04:
6e:c9:b0:5e:55:fd:bd:d5:c6:8e:0c:2c:fb:cc:3a:b9:31:80:
c2:f8:40:8b:60:ca:01:e0:4b:d6:4e:78:a0:7a:70:d7:6b:43:
2a:48:0d:c8:84:45:9f:51:7f:a9:ac:27:d6:ca:f4:31:cf:e2:
b6:80:ad:40:eb:26:74:dd:da:7f:2e:a4:7b:6e:a7:7e:89:ef:
3e:3f:1a:76:34:ae:b9:b2:cd:30:6c:77:d3:0f:d1:db:fe:da:
f4:c4:8d:20:51:5c:c0:0c:24:2e:5f:e2:f6:86:1d:b9:8c:9d:
88:c5:5f:b9:1b:64:05:60:c0:ef:8c:a4:f2:2d:09:d5:62:b2:
3c:9d:33:7e:b9:da:cf:bd:44:1b:82:35:84:17:c0:6f:8a:dc:
25:c4:bc:8e:9e:bb:62:18:27:8d:52:ce:b7:93:3d:87:7d:c3:
2a:bd:38:e3:f9:19:9b:be:ca:43:a9:f6:0d:d4:cc:ef:91:c1:
9e:b1:8d:87:09:22:d6:83:ab:b9:cb:bf:05:fa:e1:b0:31:95:
df:13:08:eb:2d:3c:82:e1:77:46:45:a9:23:46:f4:e1:9c:eb:
4d:27:90:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 15:20:08 2026 by rpki-client