Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_MecCxraNFv14NvWJ1Sj49hVJUk.roa
File: _MecCxraNFv14NvWJ1Sj49hVJUk.roa (raw, json)
Hash identifier: 44Qu0UjQk9X7FsPyTRnTHyTtrVrHe5KowDfTRmOoyaE=
Subject key identifier: FC:C7:9C:0B:1A:DA:34:5B:F5:E0:DB:D6:27:54:A3:E3:D8:55:25:49
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4BB2736C0A7F01AA4251C338D3CBA5CF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_MecCxraNFv14NvWJ1Sj49hVJUk.roa
Signing time: Thu 21 May 2026 18:00:46 +0000
ROA not before: Thu 21 May 2026 18:00:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 151.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:b2:73:6c:0a:7f:01:aa:42:51:c3:38:d3:cb:a5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 21 18:00:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fcc79c0b1ada345bf5e0dbd62754a3e3d8552549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:e8:ba:6e:fa:48:dc:c2:43:86:f4:f6:da:
94:6c:37:46:eb:f6:17:6d:ee:76:a2:ea:78:a6:cb:
f0:46:68:c0:07:99:c3:f2:a2:11:ca:38:22:aa:b0:
fa:10:7b:44:80:a6:54:6f:34:41:ca:c5:40:e7:7c:
44:a7:e6:54:62:7f:8b:0e:48:57:da:cf:e6:66:38:
4e:37:ec:4b:27:02:5c:49:7f:45:c0:51:4d:f9:49:
08:47:50:43:19:9c:19:38:5b:3e:be:35:90:5a:61:
2c:3e:2f:94:c2:ff:b6:25:80:85:0e:28:7c:1d:92:
a6:42:70:28:1c:ed:16:79:02:59:e7:a4:7f:35:bc:
e2:8c:8e:27:7b:78:62:02:77:d7:df:1d:a7:5c:b4:
fb:b5:ae:2f:12:ab:52:9e:3c:28:73:39:4e:ae:18:
da:55:26:1f:4b:96:89:0b:79:13:d1:4d:4f:17:d3:
cf:86:e4:59:cc:be:73:8d:09:70:cc:46:4b:cf:1a:
8c:10:29:d1:b3:df:63:c5:06:7d:85:f3:f6:2e:0e:
80:2f:9e:42:0e:40:80:aa:8d:20:ff:54:16:73:4a:
9d:1a:b7:07:19:24:79:10:cb:7b:f7:ce:26:41:94:
2e:fa:64:fd:54:d9:a9:80:47:57:0d:bf:fa:63:21:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C7:9C:0B:1A:DA:34:5B:F5:E0:DB:D6:27:54:A3:E3:D8:55:25:49
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_MecCxraNFv14NvWJ1Sj49hVJUk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
02:d3:cb:d5:f6:6e:68:42:36:ae:66:74:b9:10:43:3c:cb:7e:
2d:5e:68:8b:31:a1:cb:35:a0:a6:11:14:b6:aa:c5:47:79:5e:
28:0f:84:39:bc:97:75:6e:29:52:a1:2f:7b:46:44:75:3a:34:
55:96:f6:10:b9:c6:9c:1a:0c:ea:ad:83:fe:de:74:8b:b7:74:
c2:63:df:04:c7:10:b1:90:eb:ba:c9:3e:40:88:76:59:2d:2c:
29:71:80:59:9f:f0:fe:13:c0:a3:33:08:3b:96:0e:bd:6b:61:
cf:8b:b2:f7:fc:ff:eb:a4:43:1c:35:c0:b4:cd:ef:46:e0:67:
94:cd:d6:1e:8b:d0:23:d8:93:32:bc:74:a1:f7:a7:00:ec:51:
4f:72:84:44:23:b6:5a:34:f2:e7:bf:59:01:6f:0e:a8:79:26:
4b:9e:70:8b:4b:f7:18:ee:b2:da:b5:d6:b1:21:5c:84:9b:3a:
0b:bb:a5:0e:9b:93:b5:c9:57:c1:f0:1a:e7:69:92:cc:50:62:
2a:cc:31:8e:05:4a:f3:e8:76:cf:80:9f:cc:8f:02:d2:7f:29:
c9:3b:fd:0c:a0:c8:d5:3a:d5:78:41:18:2d:04:16:8b:2a:7b:
2f:de:73:6b:48:d4:c3:ef:6a:39:41:bb:1c:e4:c6:94:db:f7:
ef:c3:38:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:03:03 2026 by rpki-client