Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WfDaiQNoiVTHAHIZHcttgVjvv5c.roa
File: WfDaiQNoiVTHAHIZHcttgVjvv5c.roa (raw, json)
Hash identifier: XacsH7eKtoCGdMbJgEab8wvwwPwHLgFB5ofkXjiRlr8=
Subject key identifier: 59:F0:DA:89:03:68:89:54:C7:00:72:19:1D:CB:6D:81:58:EF:BF:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F9E37F721A12A30F1C044623166320717
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WfDaiQNoiVTHAHIZHcttgVjvv5c.roa
Signing time: Sun 26 Jul 2026 11:38:15 +0000
ROA not before: Sun 26 Jul 2026 11:38:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402268
IP address blocks: 151.246.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:37:f7:21:a1:2a:30:f1:c0:44:62:31:66:32:07:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 26 11:38:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59f0da8903688954c70072191dcb6d8158efbf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:94:a2:a1:0e:bf:b5:91:4c:ac:17:1b:70:
9c:ec:4f:44:4c:6c:bd:9e:42:32:51:95:ab:2a:0d:
5f:71:48:5e:22:02:82:b3:0e:77:10:75:f0:1b:02:
00:71:71:d1:56:ce:44:7c:cc:bd:26:74:be:b9:fe:
71:14:c8:f7:d1:bc:ba:aa:1a:90:19:ee:c3:6e:7f:
8b:5a:0e:65:3b:cf:73:14:8a:83:81:37:7e:e5:25:
8b:e0:c5:ab:42:21:69:89:4f:87:3f:44:cc:33:29:
6e:bd:89:96:69:fc:4e:e2:80:1d:f2:e8:1b:a9:d6:
f0:9c:85:39:a3:f5:41:d4:96:e0:fb:9c:88:aa:df:
99:d8:a0:98:99:65:76:0b:35:4c:f3:1b:6d:9f:3f:
78:31:83:69:93:16:97:ff:4b:43:9a:47:91:1a:2b:
49:d9:c3:63:90:ef:d9:81:da:e1:2d:15:69:8f:89:
a9:f5:11:a5:6c:07:d2:60:60:06:37:c6:91:e9:a9:
7e:d8:51:a9:b0:2b:8f:af:95:f3:24:17:c0:b1:2e:
96:dc:e0:03:81:83:51:91:78:6b:62:67:a1:7c:9e:
c5:05:c3:98:c3:60:09:91:4d:3a:72:c1:bd:0f:db:
ae:77:98:fb:27:64:b3:65:04:94:22:40:7e:0e:cc:
f8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F0:DA:89:03:68:89:54:C7:00:72:19:1D:CB:6D:81:58:EF:BF:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WfDaiQNoiVTHAHIZHcttgVjvv5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:03:5d:69:95:8c:23:83:2e:08:7c:0c:10:ea:2d:c6:ef:29:
c2:5e:57:e4:b5:77:e9:04:ee:06:d3:79:8a:a1:4d:11:c6:34:
4a:dc:e6:d5:64:80:29:94:3d:e8:49:70:58:75:bb:92:0e:e1:
1f:b6:d5:0c:db:e2:6e:68:7a:a2:f3:63:5c:16:6d:58:30:12:
66:bc:7f:b1:dd:9e:59:13:2d:12:ca:34:90:21:86:ff:fe:f9:
95:18:1a:d2:c3:6a:66:dd:16:08:f6:31:c8:64:6c:ca:2c:31:
cf:4e:08:97:f7:71:3d:51:c0:f7:75:6d:76:17:bf:d2:55:8b:
b8:71:3a:d5:4d:cf:32:29:35:17:46:1c:04:22:4f:a1:58:24:
53:6c:16:cb:71:27:ba:b3:3e:81:dc:a4:6c:db:55:41:0f:71:
25:34:d7:5f:11:89:a6:36:01:e4:d9:4a:e3:4d:6b:0c:10:55:
40:3a:56:77:a9:d9:bd:6a:86:c7:47:12:67:cc:23:cd:0e:9f:
cb:da:37:45:52:e2:19:5f:82:5b:bb:9e:d2:dd:77:c7:3e:1f:
df:d1:25:82:0a:79:aa:e2:4c:c1:79:77:c7:c1:80:6e:dd:aa:
83:06:fd:7e:db:f3:7a:bd:0e:4e:fa:41:56:6a:d1:82:c0:a7:
97:e0:88:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:30:12 2026 by rpki-client