Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQHyIsxaa1ZyCAcFdubg7yd5Crc.roa
File: bQHyIsxaa1ZyCAcFdubg7yd5Crc.roa (raw, json)
Hash identifier: axzw0Wspg+4BPApC3CpxDHsNlTBVPo1MSrs2aS0ywjw=
Subject key identifier: 6D:01:F2:22:CC:5A:6B:56:72:08:07:05:76:E6:E0:EF:27:79:0A:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D6CB9AECA91C5278980BC0E8FC24638AA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQHyIsxaa1ZyCAcFdubg7yd5Crc.roa
Signing time: Wed 08 Apr 2026 10:53:21 +0000
ROA not before: Wed 08 Apr 2026 10:53:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13122
IP address blocks: 151.242.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 15:43:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6c:b9:ae:ca:91:c5:27:89:80:bc:0e:8f:c2:46:38:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 8 10:53:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d01f222cc5a6b567208070576e6e0ef27790ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f6:26:96:ad:ec:d9:74:13:cc:7d:0b:d2:45:
57:8e:b3:25:0f:c3:05:bf:09:c0:5c:43:34:76:8d:
52:60:b4:e5:96:1e:26:ce:4c:f2:e1:ca:16:8a:23:
81:cb:93:a3:20:0b:1d:f9:04:8e:c4:ff:cb:16:a3:
ee:26:72:04:55:da:92:74:8a:95:5d:77:95:f4:65:
32:d6:f2:08:7e:51:05:f7:fb:86:dc:54:29:f3:11:
ae:40:75:9f:c8:67:2e:30:ca:b1:89:d8:27:ff:96:
98:03:af:28:80:ab:61:1e:20:00:54:af:ba:83:55:
93:07:ce:64:28:48:55:e3:8e:6e:36:06:59:af:c3:
25:ce:33:19:ba:8c:a1:13:a8:64:bd:94:1d:89:ed:
4d:3e:7e:d4:25:b1:b4:1e:20:8c:e5:33:38:27:1c:
63:20:13:78:2b:38:d8:12:d2:ff:a0:85:18:74:f4:
c2:05:75:81:54:7e:05:7c:3e:ae:c4:cf:0e:ea:6d:
00:70:f7:49:1e:69:80:db:47:29:fb:45:2f:42:3c:
cb:f3:1a:ab:5f:7e:9e:50:7f:16:bb:e1:2b:c9:d6:
5e:24:ad:98:ba:a6:9c:2f:21:b9:76:e9:c2:5a:ad:
54:30:af:d6:b2:34:9f:ba:04:c3:1d:1e:0e:fd:c4:
c9:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:F2:22:CC:5A:6B:56:72:08:07:05:76:E6:E0:EF:27:79:0A:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQHyIsxaa1ZyCAcFdubg7yd5Crc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:88:ce:a5:87:04:92:03:0d:a3:e5:27:7e:c3:11:9c:a0:35:
93:28:e5:1f:9e:8d:52:f1:6a:6c:1f:0d:34:0e:45:a0:1c:f2:
ea:54:46:b0:af:a6:d3:56:21:49:e8:08:c7:40:77:1b:4f:33:
19:cd:5d:ef:3a:4c:e0:b0:54:d3:4c:9e:e8:80:04:bd:d8:dd:
2b:fd:52:16:ef:da:80:ff:f6:52:fb:cc:44:e5:d5:80:e4:61:
28:16:aa:2d:65:27:9b:c3:78:21:78:cf:b6:8c:ca:5f:89:2f:
ab:f5:6c:04:81:08:06:37:1b:4f:6b:e8:d5:e5:4d:0e:98:bb:
d7:4d:ae:5b:5f:da:0a:2a:da:b8:0e:81:0e:dd:e2:d1:bb:c3:
4c:54:6b:d4:17:b4:a6:22:07:34:de:5d:b0:49:bf:57:a9:04:
45:31:23:4e:aa:8c:84:ce:e3:11:57:d3:f8:78:ea:9a:9a:c1:
fe:f1:ec:2d:dc:9b:00:19:81:87:0b:fe:9b:fe:e9:8d:1c:62:
4c:90:51:ee:cc:a7:89:8b:f3:b2:1e:65:17:bc:69:94:b2:5c:
29:5e:5d:02:c8:44:38:81:55:1f:b8:4c:9d:d2:ae:0c:19:8f:
3e:cd:c1:14:c9:7c:89:36:27:e4:1a:51:ab:69:de:82:85:c0:
2b:84:ec:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 22:20:28 2026 by rpki-client