Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aNqoYshBaM4npBqSzVkEsUNI8cM.roa
File: aNqoYshBaM4npBqSzVkEsUNI8cM.roa (raw, json)
Hash identifier: eJ1QJ5xa1nMsrcrptHfqBahBdOE2KBSil3YN1mIPJ6M=
Subject key identifier: 68:DA:A8:62:C8:41:68:CE:27:A4:1A:92:CD:59:04:B1:43:48:F1:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F47EF7D967F1124A2A6667DA0447AE6A9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aNqoYshBaM4npBqSzVkEsUNI8cM.roa
Signing time: Thu 09 Jul 2026 17:31:45 +0000
ROA not before: Thu 09 Jul 2026 17:31:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 151.242.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:ef:7d:96:7f:11:24:a2:a6:66:7d:a0:44:7a:e6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 17:31:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68daa862c84168ce27a41a92cd5904b14348f1c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:9f:a1:11:40:52:f6:3f:97:6a:81:ab:03:
2f:2b:a0:4a:a4:40:18:d4:41:9b:93:6c:63:e4:79:
c8:82:50:15:f1:b1:9b:81:d0:62:93:92:6e:bd:52:
c1:a1:7a:a7:bd:86:47:83:30:6e:c6:68:58:50:05:
0e:74:aa:3d:b5:cb:2b:78:3b:2c:10:da:e0:99:c1:
61:fb:70:0a:84:22:0d:84:6c:ec:47:34:1a:81:b5:
c5:53:98:f7:fc:43:fc:de:bc:36:e4:e3:d1:fa:50:
4d:d3:be:d1:aa:64:a9:f2:6c:41:9d:ea:be:c4:c5:
2e:13:0e:d6:5a:8e:05:33:03:7c:0a:18:4b:0d:c0:
e1:bd:f5:44:61:f4:a4:a4:bc:af:27:df:b2:11:72:
a6:81:8d:ca:b4:eb:65:e2:ee:75:ef:75:60:b9:26:
8c:28:13:d1:66:f9:9b:67:37:7a:53:26:c1:59:b5:
ff:21:57:3c:74:e0:b6:51:10:d4:ed:d2:94:23:25:
08:ef:74:5f:55:fc:39:38:67:33:b8:6a:44:86:46:
fb:0b:ba:f1:da:ec:44:85:a5:bf:77:49:44:ac:eb:
6e:0d:59:4d:2a:63:36:cd:7a:62:da:87:4a:7f:33:
3d:c1:eb:a4:54:39:79:a1:33:f1:5f:67:47:67:3f:
5f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:A8:62:C8:41:68:CE:27:A4:1A:92:CD:59:04:B1:43:48:F1:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aNqoYshBaM4npBqSzVkEsUNI8cM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.186.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3d:66:ed:6e:04:d1:c9:00:2f:cc:dc:25:83:07:81:70:84:
45:84:4d:77:b4:42:9a:d2:74:46:06:f8:c4:29:41:17:5b:07:
4f:c4:a3:fc:82:0c:c9:2a:89:ed:a0:b1:17:77:1c:eb:fb:70:
ae:b2:cf:07:64:f0:72:e5:11:c1:71:c8:57:a3:bd:d5:72:09:
65:0b:17:65:0f:9b:e3:8e:c6:fa:84:5b:aa:78:36:e1:62:b3:
b7:7d:87:2b:b7:01:f6:91:ed:57:a1:99:85:8c:14:32:2e:9c:
26:2f:6f:cf:ac:5e:a8:63:ef:d4:4c:06:76:c5:07:63:c4:2a:
86:a1:87:94:9d:98:2d:6c:e7:8d:ae:a4:7a:37:a4:b2:f7:a9:
00:0d:f5:50:04:6c:43:7f:c4:3d:61:17:58:6c:2f:81:af:80:
eb:5a:82:07:8a:99:12:6d:62:4b:49:86:45:f0:46:e5:eb:05:
26:0e:70:a5:e3:da:c5:33:db:41:13:b1:2f:3e:70:00:8a:f2:
f9:f5:38:b3:94:35:bb:a5:27:96:d0:ee:db:44:74:a4:ec:d2:
91:1e:05:03:eb:8f:f3:7a:1d:a2:2a:e2:aa:17:2c:5c:05:df:
c3:72:55:35:b3:1c:7b:31:ea:45:12:ac:e1:ee:86:a3:ee:ee:
45:65:1c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:51 2026 by rpki-client