Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a-e6UzV4_BrJKr8rgalt6chukk8.roa
File: a-e6UzV4_BrJKr8rgalt6chukk8.roa (raw, json)
Hash identifier: xT6WvhoJu1UvIMO+VR72PIje5BM5yf19AGdKBph59Mg=
Subject key identifier: 6B:E7:BA:53:35:78:FC:1A:C9:2A:BF:2B:81:A9:6D:E9:C8:6E:92:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A052701E99174E1D4A653D15DF1EA32408
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a-e6UzV4_BrJKr8rgalt6chukk8.roa
Signing time: Sun 30 Aug 2026 11:31:14 +0000
ROA not before: Sun 30 Aug 2026 11:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133637
IP address blocks: 151.247.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:70:1e:99:17:4e:1d:4a:65:3d:15:df:1e:a3:24:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 30 11:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6be7ba533578fc1ac92abf2b81a96de9c86e924f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:95:32:00:8a:86:69:ba:b9:9a:4f:b4:2b:3f:
42:62:b6:43:90:e6:57:e7:df:19:71:c7:2b:10:53:
a8:ee:11:9d:95:cc:8c:37:15:53:68:2a:0f:76:60:
16:01:fb:ae:c5:b4:f3:ff:01:9b:c0:05:43:d3:9e:
1c:b9:48:aa:70:b8:fa:3e:db:92:6b:91:27:70:94:
67:ee:6d:37:49:87:34:65:e6:78:56:02:f3:87:e2:
c2:1e:d7:d5:af:ef:ba:74:19:fe:0c:50:40:89:3d:
88:ea:c1:56:3e:bb:15:9a:63:de:3b:a0:e6:52:e3:
e3:a7:20:ec:5c:c9:66:68:21:19:9d:bd:5f:92:f3:
7e:2e:33:f3:cb:c1:77:79:6c:65:f2:66:d7:12:14:
32:f9:b8:f5:f7:b3:4c:6a:84:f6:5b:cc:bb:53:f6:
a2:da:53:dc:81:5e:07:9c:7b:b5:75:dc:a6:72:62:
8a:f0:be:86:79:8c:b9:0b:33:49:ee:f7:87:67:82:
4b:7c:02:ca:52:28:02:65:3d:2d:8e:96:0e:f1:11:
6b:a1:51:0b:ec:ee:19:8f:6f:00:df:27:54:14:f8:
99:75:e4:52:bc:1a:54:ae:8f:18:2c:50:56:63:50:
b3:bd:7a:47:dd:5b:1b:f9:ad:63:14:e8:6a:ea:f8:
2a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E7:BA:53:35:78:FC:1A:C9:2A:BF:2B:81:A9:6D:E9:C8:6E:92:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/a-e6UzV4_BrJKr8rgalt6chukk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.33.0/24
Signature Algorithm: sha256WithRSAEncryption
07:0d:ee:fe:8b:e4:51:75:dc:f2:ca:9b:70:61:7c:a1:07:70:
5f:74:ab:17:a4:1f:ee:48:b0:75:8d:db:72:76:1c:be:6a:54:
ba:35:a2:ad:c5:7b:f3:e9:b2:00:a3:31:d8:d9:dc:6f:88:f7:
33:8f:35:e9:a4:93:3e:b0:15:c7:58:49:fe:49:e4:72:24:a1:
00:db:dd:6b:67:e5:80:c4:9c:ba:19:3d:99:a3:33:2e:fb:0f:
c1:1a:aa:4b:79:64:8a:02:8b:6c:76:36:8c:a1:3f:59:25:25:
56:ee:ab:f3:a7:e4:fa:01:ff:62:da:f9:2d:21:71:c5:81:7f:
40:0a:b2:bb:d2:6b:22:1b:6a:c8:b4:11:7a:eb:e6:b3:7f:a2:
a2:5b:dc:1b:73:e8:3e:9e:63:63:46:6b:4a:72:55:e8:66:e7:
9e:c6:3d:8d:78:93:3c:4b:d0:39:3d:2d:2c:69:96:58:16:7e:
2c:d6:3b:8a:41:b0:86:4e:f1:fb:13:ff:f7:81:45:ee:19:85:
b2:92:b3:65:c3:b3:3a:56:c3:b9:cb:d4:3c:0a:47:b4:d0:ac:
1c:b8:bb:16:4d:df:37:cd:4a:f6:5d:da:6f:18:bc:be:50:89:
a6:6b:56:04:8b:18:1f:cf:1c:c9:f9:bc:f3:c9:34:51:75:6b:
66:33:66:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:05:59 2026 by rpki-client