Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XF7gbyzkoIw_k7fVJ6DaOw3P4jA.roa
File: XF7gbyzkoIw_k7fVJ6DaOw3P4jA.roa (raw, json)
Hash identifier: 9fWMdVczKp36sPhXN6+UrF0XW2Qop4KtfQdywtjN4i4=
Subject key identifier: 5C:5E:E0:6F:2C:E4:A0:8C:3F:93:B7:D5:27:A0:DA:3B:0D:CF:E2:30
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E9B9322D1D181A778B366009BCD090E2C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XF7gbyzkoIw_k7fVJ6DaOw3P4jA.roa
Signing time: Sat 06 Jun 2026 06:16:11 +0000
ROA not before: Sat 06 Jun 2026 06:16:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44589
IP address blocks: 151.246.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:93:22:d1:d1:81:a7:78:b3:66:00:9b:cd:09:0e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 6 06:16:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c5ee06f2ce4a08c3f93b7d527a0da3b0dcfe230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:84:bb:7a:2a:34:e5:eb:e9:00:82:af:f7:e1:
88:11:da:58:45:63:f0:11:60:7e:6d:de:e5:53:83:
6a:7f:38:97:07:d9:54:16:88:cb:49:d0:c4:e5:59:
2e:b4:ae:5b:1e:e8:56:68:36:6d:e3:6b:03:84:05:
17:6c:b2:49:b8:e8:bc:54:ff:22:b2:67:88:b5:d7:
a7:f5:cd:d5:2a:10:99:38:a8:2b:97:f5:81:d0:91:
97:e3:a6:02:02:51:29:b5:1d:e2:43:69:18:8a:e9:
93:44:98:cc:21:93:1d:45:40:7f:c8:4b:56:46:1e:
2e:6c:93:bf:3b:e5:f6:22:7c:f8:66:7b:52:0c:8f:
3a:d7:1a:85:12:78:7e:cb:47:4c:22:5f:a8:4d:75:
72:f7:b7:bf:29:21:52:ec:76:41:2e:4e:61:37:cb:
68:4a:6c:aa:8f:06:3d:57:f7:6f:6d:a6:d9:ec:ed:
61:34:82:4d:b3:4c:38:a6:39:4e:1b:14:75:15:4f:
90:94:33:d8:e6:71:06:11:b5:fa:e4:21:57:34:60:
74:a2:fc:0c:19:0a:e1:e6:db:4c:a2:12:51:bf:80:
56:3d:3d:c9:89:3b:38:15:47:c2:f5:a3:c5:b1:82:
fa:08:4f:d4:be:8b:15:3f:a5:4d:24:11:7a:04:49:
36:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:E0:6F:2C:E4:A0:8C:3F:93:B7:D5:27:A0:DA:3B:0D:CF:E2:30
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XF7gbyzkoIw_k7fVJ6DaOw3P4jA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.160.0/24
Signature Algorithm: sha256WithRSAEncryption
89:3f:32:b1:6f:ea:74:92:11:4d:d3:c3:e8:71:c5:4c:0e:2c:
0f:a8:38:65:ac:8e:07:44:70:d9:1f:88:3d:6e:d9:38:e5:9c:
da:e1:36:44:c9:09:ec:01:6c:02:e6:7c:f8:57:b5:4f:24:33:
35:98:38:60:f6:05:85:87:ff:bb:5f:e5:95:e1:d0:ff:70:ef:
39:3d:d1:68:6d:a7:76:37:3e:fc:39:44:33:eb:d2:e8:2e:4a:
1b:33:c8:f1:c2:54:d5:fc:50:b8:da:74:ae:d3:db:46:c0:68:
a3:02:cb:e4:fc:5a:d1:e3:2f:24:f9:e0:92:1c:9b:77:6b:4e:
3c:fd:a4:75:9c:50:4f:16:94:76:3e:75:a8:5a:c6:59:f0:fa:
68:4c:8e:49:67:a0:62:29:dd:af:14:bf:9b:16:96:fb:da:6a:
52:b4:db:f5:e2:eb:e0:01:01:96:02:ad:19:a9:c0:dc:ac:5d:
c3:25:39:ab:dd:0d:87:01:eb:14:75:60:ca:dd:4f:65:a9:77:
9a:4d:5f:be:94:a4:d1:a9:39:e2:aa:ca:1b:fc:ec:d9:bf:38:
cd:59:f1:39:ac:a4:5e:51:5a:61:1d:19:be:cc:0d:31:0b:17:
fe:64:47:8d:44:dc:69:a5:9a:90:cb:b0:d4:e2:60:1f:2f:8e:
3a:9b:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:54:38 2026 by rpki-client