Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XHhsJwratugRAOa34_QPtL_FEf0.roa
File: XHhsJwratugRAOa34_QPtL_FEf0.roa (raw, json)
Hash identifier: I62FEcR1+UWfOyD5LyBsXKVyF0oWMoZoI0kREz0IDOA=
Subject key identifier: 5C:78:6C:27:0A:DA:B6:E8:11:00:E6:B7:E3:F4:0F:B4:BF:C5:11:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A12FD72FF161A9D4B7C4C377E3AB0E1297
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XHhsJwratugRAOa34_QPtL_FEf0.roa
Signing time: Mon 12 Oct 2026 11:19:53 +0000
ROA not before: Mon 12 Oct 2026 11:19:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58232
IP address blocks: 151.245.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:d7:2f:f1:61:a9:d4:b7:c4:c3:77:e3:ab:0e:12:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 11:19:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5c786c270adab6e81100e6b7e3f40fb4bfc511fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:97:66:b1:7e:4e:95:f4:36:47:64:3c:b0:f7:
0b:3f:bc:88:5e:6b:d7:cf:43:f8:04:11:83:4b:ba:
4e:6f:f7:be:87:43:b0:c9:24:65:b0:ab:1b:f0:d0:
b4:81:ee:2f:89:34:83:8b:f9:c0:1e:97:06:83:20:
ed:6d:8c:eb:25:d5:0a:9f:5e:14:7b:f3:18:35:fa:
90:cb:85:b8:be:ee:72:8e:78:82:c5:b7:93:24:03:
0c:5d:30:94:39:b6:80:91:4e:48:58:9c:65:76:8a:
a4:98:92:91:b9:73:46:89:4c:fe:61:3c:3d:d2:7a:
51:18:70:0a:76:e5:9b:76:97:d8:05:f3:88:80:59:
02:bf:d6:99:db:d3:43:d2:95:23:5a:20:8f:da:05:
51:eb:0f:3c:61:10:10:b9:5e:ce:f7:0f:93:58:46:
78:56:0c:ed:51:5d:48:f4:56:36:bd:f8:98:02:eb:
30:34:6e:34:e5:30:92:33:a9:1d:8e:03:38:f0:78:
de:2a:2f:68:52:9c:29:77:6e:ef:79:8b:d4:cd:d4:
08:36:8c:51:be:df:ba:38:03:45:da:fb:12:47:76:
48:df:12:a7:3d:04:f2:86:a4:51:22:39:7f:0c:f7:
95:22:9f:e7:90:c0:9e:2f:ee:db:ef:f8:7b:6e:4d:
00:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:6C:27:0A:DA:B6:E8:11:00:E6:B7:E3:F4:0F:B4:BF:C5:11:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XHhsJwratugRAOa34_QPtL_FEf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.218.0/24
Signature Algorithm: sha256WithRSAEncryption
36:84:e4:b1:77:71:da:b7:41:d6:74:d0:3b:a8:b5:45:31:fa:
50:51:ff:76:3b:ef:06:03:0a:4a:75:6e:19:91:9a:ac:52:be:
04:4e:7e:e5:ca:6a:ce:f6:cd:0e:3b:1b:ac:7a:a6:09:aa:86:
48:4c:c7:8a:5a:2c:24:24:4e:12:2c:d2:6e:73:6d:b0:cd:a0:
65:0a:2b:01:13:70:62:6e:a8:eb:e9:c8:29:ab:1f:7b:88:ba:
15:13:6c:93:a8:40:ca:a3:c0:0c:85:e3:87:df:d7:5a:47:f0:
34:02:49:55:72:d0:98:68:1d:d1:65:6d:36:75:ca:7e:64:01:
9e:d1:ba:f2:99:e6:44:27:a3:cc:2e:f8:d2:b7:23:72:bd:71:
2e:6f:4e:fa:67:9d:cf:01:a7:51:7b:87:07:9b:09:99:21:06:
23:22:1f:66:20:a6:e5:b5:93:ef:b1:6f:ec:e4:00:48:cf:c7:
32:82:77:ac:52:65:19:5b:98:39:17:16:b8:69:da:25:6b:44:
0c:5d:a3:11:f5:94:e6:ef:88:52:77:2a:3a:47:f6:43:4a:85:
47:61:12:a1:13:58:1c:46:60:dc:a0:61:c5:44:23:4a:fd:52:
d9:f5:87:ea:b2:b2:9e:e7:4c:fe:92:2b:fb:29:ef:10:ba:07:
f0:4f:cf:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 04:54:08 2026 by rpki-client