Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N2n4YlyznADCkntNqC-_7ZWaj0U.roa
File: N2n4YlyznADCkntNqC-_7ZWaj0U.roa (raw, json)
Hash identifier: Tl5DlLh27BwARa6SGu/prWll2BXft+mjdBm3ciu4dPo=
Subject key identifier: 37:69:F8:62:5C:B3:9C:00:C2:92:7B:4D:A8:2F:BF:ED:95:9A:8F:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FF019865F080EB428BF6389552D774057
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N2n4YlyznADCkntNqC-_7ZWaj0U.roa
Signing time: Tue 11 Aug 2026 09:13:52 +0000
ROA not before: Tue 11 Aug 2026 09:13:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197213
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f0:19:86:5f:08:0e:b4:28:bf:63:89:55:2d:77:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 11 09:13:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3769f8625cb39c00c2927b4da82fbfed959a8f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:00:af:d0:98:05:37:f7:45:68:0d:90:89:d8:
91:d8:f6:80:ad:f0:fa:34:15:02:d6:cc:8f:d5:7e:
a2:06:54:6c:0e:53:ac:0d:ac:46:27:25:01:a6:a5:
9c:93:8a:52:ae:5b:af:67:fc:0a:d7:4b:d1:6b:74:
0b:fa:16:18:1c:fb:e1:7f:69:b9:27:de:60:32:27:
30:97:62:1c:fa:a0:bf:87:ac:42:da:1a:3c:67:8b:
2d:d8:99:f2:4f:43:3b:9f:aa:cc:06:dd:a5:ce:34:
f4:02:b3:23:b0:ed:b8:02:4c:5b:86:45:2d:ed:ea:
56:30:11:c9:9c:0d:24:36:7c:22:b3:88:69:b8:94:
94:d2:ef:78:15:e4:f0:ad:8f:a1:32:98:8e:28:d5:
f7:ae:29:6d:e0:35:87:2e:d0:bc:88:c5:78:14:12:
f6:a6:1f:a4:31:ab:51:15:79:1e:4c:2e:b8:df:c1:
62:d6:d6:e7:6b:1c:80:92:6e:e3:8f:e0:07:c6:ae:
2a:8b:38:b4:d8:5e:65:4a:8c:e8:d6:db:41:a8:28:
29:ee:d4:84:8e:e7:99:3d:bb:be:f7:ae:52:be:c7:
02:17:18:d5:b9:69:d9:5d:cf:d5:56:a9:3a:41:5d:
80:dd:b1:f7:d0:26:f6:85:58:bb:31:c4:74:b3:47:
46:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:69:F8:62:5C:B3:9C:00:C2:92:7B:4D:A8:2F:BF:ED:95:9A:8F:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/N2n4YlyznADCkntNqC-_7ZWaj0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:8b:5b:da:bf:d7:6f:88:9d:f3:37:c6:8c:32:82:24:82:fc:
85:87:cb:6e:82:6f:82:8b:e8:13:a8:46:38:86:8b:5d:8a:56:
c8:11:5c:7b:00:e8:3b:81:a5:72:5c:c1:08:92:f0:07:00:06:
85:f7:c7:ed:fe:11:e5:a8:a0:61:d5:f1:52:d1:7f:f0:37:2d:
b3:0a:07:46:b4:7d:b3:75:11:91:2c:09:ed:b8:ce:f2:07:1d:
18:3a:b4:31:72:78:ef:76:8c:f8:3a:7a:ba:2c:c5:c8:7a:5b:
35:96:22:6b:1e:f3:6c:ef:79:ca:ff:45:83:4d:bc:fe:ad:b6:
7d:b1:58:45:1d:2b:81:f0:8a:a8:be:3b:7e:f6:3f:06:27:77:
b4:42:f3:5b:3b:4b:aa:88:31:ab:fb:1e:09:70:27:28:78:97:
51:17:4b:26:4d:30:f4:96:0a:1e:10:04:5b:95:be:ee:9a:f1:
6f:d7:19:10:81:29:88:d2:1a:b1:84:e3:26:77:55:5c:96:7d:
69:02:fd:ca:40:4c:0a:5e:6c:b8:54:1d:b7:54:ac:ce:dc:30:
20:98:40:3b:38:43:93:c1:4a:3b:a0:f2:31:e9:bb:ff:9f:31:
22:62:8b:35:0d:be:a1:6a:3a:17:0c:0a:b9:1e:d7:de:79:c7:
5d:27:32:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:23:16 2026 by rpki-client