Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JWfUA3a_-aP-c7cFjp7rXRohoS0.roa
File: JWfUA3a_-aP-c7cFjp7rXRohoS0.roa (raw, json)
Hash identifier: 4rAF2FgkoIbcIsNqQEMhLu/SZAiIW3QFfSGNBDXGTYQ=
Subject key identifier: 25:67:D4:03:76:BF:F9:A3:FE:73:B7:05:8E:9E:EB:5D:1A:21:A1:2D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A15FF8CF7E75A330D484F7A280C30BD228
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JWfUA3a_-aP-c7cFjp7rXRohoS0.roa
Signing time: Wed 21 Oct 2026 19:38:23 +0000
ROA not before: Wed 21 Oct 2026 19:38:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205544
IP address blocks: 151.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:f8:cf:7e:75:a3:30:d4:84:f7:a2:80:c3:0b:d2:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 21 19:38:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2567d40376bff9a3fe73b7058e9eeb5d1a21a12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ea:d8:7e:8a:5f:fa:7c:64:d7:43:43:4c:33:
f9:63:d7:3c:5a:0b:c3:36:90:9f:6e:dc:bd:a7:b6:
6b:8f:1f:54:40:d5:3f:0e:0d:c1:c5:c9:21:7f:66:
65:86:72:17:ff:0f:d0:7d:6a:26:7f:c8:0f:32:bc:
aa:49:a8:b5:7d:a2:20:62:a9:55:4d:4e:fd:35:b0:
53:c6:37:8e:f3:7b:88:79:e4:68:59:e4:9e:10:b3:
65:c5:b9:13:ac:f7:d8:bc:79:9d:13:e6:fe:e6:11:
5f:22:22:02:5a:41:00:6d:33:19:4b:39:19:43:8d:
fe:65:96:7a:13:84:84:b5:2c:b4:29:03:af:2c:f1:
05:a9:e8:92:5d:b5:6e:65:55:7f:c7:f0:50:e4:72:
83:85:07:25:02:c6:42:79:98:2d:2b:f2:19:9f:16:
15:f8:8f:37:51:3e:f7:dc:72:21:3f:8a:cf:2c:37:
3f:d0:1f:cd:12:6e:d5:dd:41:22:30:1c:0f:cd:01:
7f:90:3b:40:8b:1e:54:7a:d4:fc:ed:31:e6:25:d6:
aa:9e:d5:7e:72:29:f2:08:d9:33:1d:12:40:3e:1c:
92:0d:eb:87:5b:7e:4d:78:c3:b3:e9:d1:3a:1d:83:
19:6c:f0:9c:54:34:ec:0b:00:ab:2d:46:5c:16:b4:
c9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:D4:03:76:BF:F9:A3:FE:73:B7:05:8E:9E:EB:5D:1A:21:A1:2D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JWfUA3a_-aP-c7cFjp7rXRohoS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
57:14:3b:36:4d:0f:87:a5:e1:76:e0:8f:cb:32:99:51:f5:c7:
f8:75:26:b0:98:7b:8c:da:57:93:bf:35:83:25:e3:ca:a0:57:
76:d8:b8:f1:18:c8:9b:7c:e9:72:92:0a:1b:47:2d:35:33:b9:
31:c0:18:9e:b6:d7:61:84:bc:cb:92:84:d3:e4:0d:9e:1a:07:
90:75:48:0a:c5:0a:af:73:f5:9a:fb:1b:6b:64:d1:2e:52:7c:
2e:1f:1d:88:bf:93:fe:30:33:ca:8a:7f:43:ee:ef:4c:9a:50:
9f:43:c0:17:fb:cb:a9:13:b2:8c:bb:05:86:c1:18:74:8a:7d:
ce:27:1f:52:40:7a:bd:50:bf:dd:92:ba:d6:6e:95:49:0d:4f:
53:d0:1a:34:f2:be:44:5b:ca:df:f1:d9:1c:c3:24:c9:59:cd:
f7:63:06:e5:18:d9:25:67:c0:70:92:ed:ba:83:f2:b2:16:29:
4b:cc:5d:e0:79:22:7c:e1:81:6a:52:46:b5:37:57:37:1d:df:
6d:38:c0:99:b2:cf:b9:bb:ce:05:65:c3:6e:1a:c8:57:b8:bf:
51:82:4e:bd:1b:13:08:05:c3:82:3c:25:ef:4f:02:3b:70:8b:
24:3b:55:6c:c5:c7:d8:d6:0d:34:98:9e:75:5b:34:66:4b:38:
b8:30:44:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:54:21 2026 by rpki-client