Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4uA_7qXPz1ad9rsJaUbK5A2bQM.roa
File: L4uA_7qXPz1ad9rsJaUbK5A2bQM.roa (raw, json)
Hash identifier: Ch3W7AH/7jh59qCg60qiDuAib7AmbDVi79Qgb2FpMX4=
Subject key identifier: 2F:8B:80:FF:BA:97:3F:3D:5A:77:DA:EC:25:A5:1B:2B:90:36:6D:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0623C6B151AFC327C3BC04B3A52997356
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4uA_7qXPz1ad9rsJaUbK5A2bQM.roa
Signing time: Wed 02 Sep 2026 13:08:41 +0000
ROA not before: Wed 02 Sep 2026 13:08:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 151.242.208.0/24 maxlen: 24
151.242.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:3c:6b:15:1a:fc:32:7c:3b:c0:4b:3a:52:99:73:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 13:08:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2f8b80ffba973f3d5a77daec25a51b2b90366d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:87:23:50:a9:06:27:ea:7d:31:cd:1d:3f:61:
3c:0c:3b:5d:9a:a3:83:49:ca:62:44:32:18:e9:2e:
57:d0:92:2f:37:09:a8:81:ba:99:47:7d:af:5b:92:
37:89:d0:ca:5b:7c:88:ee:cf:a5:47:7f:b4:11:8a:
c1:15:9a:63:04:5d:23:7c:44:c9:62:54:c4:60:08:
61:92:ce:70:bc:3c:c1:67:cb:eb:a2:e1:cb:95:aa:
c0:57:64:ed:91:10:33:81:3e:33:58:9e:2f:48:2c:
53:5f:ff:eb:8e:db:15:14:1f:41:a9:6d:1d:12:be:
bd:38:f9:7f:e7:8d:4b:97:b8:9a:da:b2:98:5a:ee:
b6:c1:bc:91:ff:43:9f:5c:3e:cb:3d:ad:aa:50:e8:
2e:84:f9:21:0a:d9:a7:6d:97:25:42:c7:c1:3c:71:
1c:e3:a2:e3:96:08:4e:2c:c5:d5:37:01:27:cf:fb:
76:fc:72:21:29:fb:0e:bf:bd:e8:01:c0:1d:7f:49:
8b:6f:7b:3a:aa:30:20:32:0f:13:99:66:b3:3a:94:
90:fa:b9:f1:05:4c:ac:47:a5:a2:c5:2a:f3:e2:12:
9e:b0:46:6f:d7:28:5d:5b:fe:bb:89:8a:73:e9:6f:
70:cb:84:86:63:16:13:9a:59:18:b6:83:53:23:4e:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8B:80:FF:BA:97:3F:3D:5A:77:DA:EC:25:A5:1B:2B:90:36:6D:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/L4uA_7qXPz1ad9rsJaUbK5A2bQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.208.0/23
Signature Algorithm: sha256WithRSAEncryption
24:5f:f8:77:82:7d:ab:90:fb:3a:9b:2a:e1:66:96:bd:84:ee:
48:fa:0b:d6:66:3e:39:cd:a8:ce:6a:0c:b6:c1:8f:9a:6c:73:
5d:2e:15:52:13:f0:86:ba:c6:da:cc:79:ea:31:f2:12:82:00:
3e:a2:8b:fb:bb:b6:db:74:6f:13:cf:95:fb:4b:f7:c6:7e:b0:
6c:3c:4b:24:1a:34:f7:4e:88:16:2d:ff:f1:ac:06:48:b0:8b:
fe:80:db:9f:1a:b4:39:47:50:57:e7:06:a3:31:61:f7:80:d4:
bc:ba:79:c2:c8:0c:b3:1b:c3:49:23:60:c1:2d:05:12:12:8f:
c5:18:1b:6f:2a:f4:3b:5d:45:c5:e6:17:d5:95:30:e8:cc:86:
b4:56:8f:6d:e6:25:0e:b8:05:ad:f7:1d:b4:eb:a7:61:1f:3e:
58:a8:d5:54:30:79:3f:06:45:79:c3:5b:6a:b0:91:c6:61:27:
70:90:6b:a7:5c:42:01:fd:ca:e4:dd:2a:df:51:22:3c:28:2f:
c6:e1:a6:c2:c1:42:9d:2a:3b:a5:62:8d:f9:e8:77:c5:cf:c9:
cc:f4:0c:48:56:84:af:05:5f:b7:d1:bd:fb:dc:39:13:c7:35:
dd:71:03:8f:3f:e5:62:24:81:24:99:7f:8b:a7:26:92:a4:19:
7b:38:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:11:32 2026 by rpki-client