Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HoDqNWSFok8YHUlX1X5wvx7_R-g.roa
File: HoDqNWSFok8YHUlX1X5wvx7_R-g.roa (raw, json)
Hash identifier: IghVAqTlQeGDJm8c+hrHZ/LRerNtHCuwtLK7u4srEX4=
Subject key identifier: 1E:80:EA:35:64:85:A2:4F:18:1D:49:57:D5:7E:70:BF:1E:FF:47:E8
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5D89E3F21FC9920EC8152B047957BA99
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HoDqNWSFok8YHUlX1X5wvx7_R-g.roa
Signing time: Mon 25 May 2026 05:09:38 +0000
ROA not before: Mon 25 May 2026 05:09:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204116
IP address blocks: 151.247.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 May 2026 13:25:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:89:e3:f2:1f:c9:92:0e:c8:15:2b:04:79:57:ba:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 25 05:09:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e80ea356485a24f181d4957d57e70bf1eff47e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:f1:1a:93:37:08:6f:33:3c:90:e2:d3:2b:
91:ca:7a:8a:76:a6:36:5d:3c:b7:2d:93:7a:a9:a7:
c9:e8:74:c7:05:62:53:0c:07:28:c7:2d:d9:2b:47:
3a:3b:62:e2:34:f7:ca:a7:2a:3c:ca:3d:26:71:21:
c1:8c:4f:f7:8f:d1:7e:f5:d6:69:da:89:d3:b2:da:
97:41:9e:80:26:97:e1:b7:16:ed:d6:1d:ae:c3:d6:
1f:d4:56:96:38:3a:30:c3:b1:64:9b:35:cc:61:f7:
68:59:d8:5a:c0:f5:78:ad:dc:bd:cc:10:35:8f:40:
39:44:a7:42:4c:3b:f4:f2:93:8f:5e:fc:a1:44:38:
a2:62:dc:4c:1b:5f:ee:b3:8a:e9:3d:52:0e:99:a7:
c9:0d:46:c7:ee:2b:5b:ed:d4:e6:06:a6:0e:63:a1:
81:48:0d:fe:7d:6d:7f:85:33:dd:b1:b6:d8:34:4c:
54:31:67:11:05:4b:b9:e3:b8:a9:9f:5d:0f:1a:fb:
04:a7:b8:80:37:cf:be:15:a9:03:17:71:6b:d3:d5:
85:7f:d7:60:0b:cf:9b:ac:e3:50:6e:72:94:58:64:
5b:c1:cd:ae:5d:0e:c1:43:fc:95:4d:9e:a9:b1:dc:
9f:4c:9f:f4:43:3d:30:4f:d3:64:c4:52:99:f6:e7:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:80:EA:35:64:85:A2:4F:18:1D:49:57:D5:7E:70:BF:1E:FF:47:E8
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HoDqNWSFok8YHUlX1X5wvx7_R-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.11.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:2b:d7:d4:89:54:9f:30:48:cc:5e:cc:71:a6:6d:e5:de:39:
ab:c2:db:07:d7:67:46:51:a7:19:2f:24:f8:87:dc:2a:b9:f0:
c7:7f:a5:cd:fc:bc:68:65:ef:b4:e6:99:bb:fc:42:11:86:02:
bc:f9:78:e9:6e:1f:c6:a4:10:2a:d6:f4:ac:f9:67:79:6a:ee:
b0:0e:2b:46:97:4b:49:45:6a:5c:2c:90:8b:06:9c:ab:92:ab:
c6:e9:3e:fd:5c:89:00:a9:8c:a0:91:86:d3:61:95:aa:bb:7c:
24:b7:c1:94:58:c7:cf:4f:d8:71:98:68:1e:96:d2:d7:1b:35:
cc:43:5a:93:4d:e3:42:f7:1a:21:37:29:bc:58:e7:b2:49:3a:
80:5c:35:e2:2f:9f:4a:0a:0e:dc:6e:cb:85:65:91:0b:19:02:
f9:8c:5b:9f:ab:18:80:f6:de:4a:08:3c:b8:ea:81:e3:92:40:
29:a8:1d:80:b2:32:bc:29:b3:6f:40:69:ea:73:3e:98:1f:14:
44:2f:0a:17:1b:22:49:76:31:c6:fc:22:f0:7f:fb:3a:08:b6:
b4:58:79:8d:c9:90:bd:91:12:f3:7d:32:04:5c:79:d0:bf:14:
7e:c8:0b:fd:39:ed:fb:1a:a4:3f:5b:18:73:8b:31:3b:3e:aa:
36:2c:aa:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 27 17:40:29 2026 by rpki-client