Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aJEctC-mxPB68Ku7C_fXYKpqtZc.roa
File: aJEctC-mxPB68Ku7C_fXYKpqtZc.roa (raw, json)
Hash identifier: ZXgRrq4CFu4gxvrgHz08lcoqzjXFPmCBefsVdaLm5rg=
Subject key identifier: 68:91:1C:B4:2F:A6:C4:F0:7A:F0:AB:BB:0B:F7:D7:60:AA:6A:B5:97
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09051B6E511C2CD25CFF1078F380FD796
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aJEctC-mxPB68Ku7C_fXYKpqtZc.roa
Signing time: Fri 11 Sep 2026 11:54:29 +0000
ROA not before: Fri 11 Sep 2026 11:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216174
IP address blocks: 151.247.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 15:32:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:51:b6:e5:11:c2:cd:25:cf:f1:07:8f:38:0f:d7:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 11:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68911cb42fa6c4f07af0abbb0bf7d760aa6ab597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:05:e3:4b:0f:07:c2:23:c3:c6:4a:0c:63:
92:68:a5:19:f0:e7:78:5e:36:5b:12:b0:f7:f9:bf:
77:24:3e:d4:1a:aa:67:4a:49:53:d1:5e:b4:98:ac:
ff:12:4e:0d:e7:d2:5d:a9:8d:1c:ca:a9:d1:fa:8c:
cd:8d:a6:bc:c3:b0:4e:bd:f7:35:b8:45:33:66:39:
8c:84:b2:ab:1b:ed:f8:25:02:04:f3:71:5d:d6:81:
bc:59:9a:2e:34:02:b7:bf:dc:56:56:31:4e:00:76:
9c:56:1f:61:ee:e5:bb:bc:52:df:32:36:df:a5:3d:
58:61:73:d3:d4:86:2e:41:fe:40:86:05:89:d0:c7:
d4:3b:cc:0d:82:dd:f3:96:f1:ce:c1:d1:24:86:f3:
dc:2a:00:cc:5d:e3:62:ce:3d:26:37:54:5f:b5:90:
0d:d6:07:ac:bc:eb:36:83:0d:4f:fb:98:3a:05:15:
72:af:47:60:7c:3f:28:fd:c8:39:bd:00:5a:07:6a:
e8:c5:f4:f2:fc:90:8e:9f:6b:24:15:56:a3:98:52:
f5:f2:4e:99:04:52:e3:5e:d6:bc:17:e6:fe:db:09:
22:c4:bf:f4:51:9d:cd:f1:e9:dd:c1:f5:de:37:0e:
b9:3c:73:ef:92:fd:26:23:2c:c2:33:d0:80:de:d0:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:91:1C:B4:2F:A6:C4:F0:7A:F0:AB:BB:0B:F7:D7:60:AA:6A:B5:97
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aJEctC-mxPB68Ku7C_fXYKpqtZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.1.0/24
Signature Algorithm: sha256WithRSAEncryption
30:07:d1:a7:b9:36:92:79:cf:b9:2c:bc:00:f2:23:03:fd:57:
e2:23:9e:48:a4:40:7b:51:38:59:72:f6:39:80:74:d5:e6:55:
5c:dc:f5:8f:b7:77:44:c1:36:fb:2f:5c:74:0a:71:f4:fa:8a:
fe:f6:44:46:20:4e:83:a5:d9:ba:f0:33:ae:31:bf:fc:a5:53:
6a:c4:d7:4a:1a:48:54:57:81:7c:0a:c6:d3:8a:b8:c4:27:17:
1e:3f:02:f5:83:5d:8a:c7:41:d1:5b:26:ac:76:41:ff:cc:f1:
50:28:0d:6d:cc:fb:55:e1:0c:b6:5e:14:a5:11:b6:ee:05:6d:
d5:5b:41:24:3f:3a:32:73:65:51:b9:26:e8:8c:53:64:26:cd:
75:01:fa:e5:c9:9b:f2:7a:16:39:53:66:3b:6b:ce:a9:a5:72:
86:e5:88:dd:d3:74:b6:3a:bb:5e:09:f2:58:22:e4:2c:1f:73:
fd:2a:23:d9:23:ed:2c:59:96:0b:e4:65:bd:2f:ac:d8:4a:44:
47:3d:c6:aa:4d:a1:e3:2a:d2:3c:84:a4:9e:0b:7b:d0:62:2e:
a6:3f:2f:59:d2:4b:0d:ed:ae:65:3d:89:47:87:d4:6b:85:ea:
c3:c4:d0:57:07:b4:53:47:96:a6:8d:4a:d3:40:81:01:b0:cf:
3b:8b:79:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCQUbblEcLNJc/xB484D9eWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTExMTE1NDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODkxMWNiNDJmYTZjNGYwN2FmMGFiYmIwYmY3ZDc2MGFhNmFiNTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQF40sPB8Ijw8ZKDGOSaKUZ8Od4
XjZbErD3+b93JD7UGqpnSklT0V60mKz/Ek4N59JdqY0cyqnR+ozNjaa8w7BOvfc1
uEUzZjmMhLKrG+34JQIE83Fd1oG8WZouNAK3v9xWVjFOAHacVh9h7uW7vFLfMjbf
pT1YYXPT1IYuQf5AhgWJ0MfUO8wNgt3zlvHOwdEkhvPcKgDMXeNizj0mN1RftZAN
1gesvOs2gw1P+5g6BRVyr0dgfD8o/cg5vQBaB2roxfTy/JCOn2skFVajmFL18k6Z
BFLjXta8F+b+2wkixL/0UZ3N8endwfXeNw65PHPvkv0mIyzCM9CA3tDc/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGiRHLQvpsTwevCruwv312CqarWXMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYUpFY3RDLW14UEI2OEt1N0NfZlhZS3BxdFpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/cBMA0G
CSqGSIb3DQEBCwUAA4IBAQAwB9GnuTaSec+5LLwA8iMD/VfiI55IpEB7UThZcvY5
gHTV5lVc3PWPt3dEwTb7L1x0CnH0+or+9kRGIE6Dpdm68DOuMb/8pVNqxNdKGkhU
V4F8CsbTirjEJxcePwL1g12Kx0HRWyasdkH/zPFQKA1tzPtV4Qy2XhSlEbbuBW3V
W0EkPzoyc2VRuSbojFNkJs11AfrlyZvyehY5U2Y7a86ppXKG5Yjd03S2OrteCfJY
IuQsH3P9KiPZI+0sWZYL5GW9L6zYSkRHPcaqTaHjKtI8hKSeC3vQYi6mPy9Z0ksN
7a5lPYlHh9RrherDxNBXB7RTR5amjUrTQIEBsM87i3mI
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:23:23 2026 by rpki-client