Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/behfFjfy6_E1rumQXUo-38woO6s.roa
File: behfFjfy6_E1rumQXUo-38woO6s.roa (raw, json)
Hash identifier: gSi5hz+t0emz3O68bKs+9qDFEYTOXHQyB3AytaQiH3U=
Subject key identifier: 6D:E8:5F:16:37:F2:EB:F1:35:AE:E9:90:5D:4A:3E:DF:CC:28:3B:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F60B76162AAA9324F23F48307B0DA761
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/behfFjfy6_E1rumQXUo-38woO6s.roa
Signing time: Thu 01 Oct 2026 05:59:01 +0000
ROA not before: Thu 01 Oct 2026 05:59:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214120
IP address blocks: 151.246.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:0b:76:16:2a:aa:93:24:f2:3f:48:30:7b:0d:a7:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 05:59:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6de85f1637f2ebf135aee9905d4a3edfcc283bab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:5e:57:75:bf:a7:e4:97:19:0b:92:9f:d9:
7d:c3:c4:67:c6:f8:ba:c6:cd:6a:d7:98:f4:2b:48:
d5:ed:e1:c9:53:81:4b:af:06:61:f2:db:b6:28:89:
f9:72:06:2e:27:1e:76:27:83:f6:9e:d0:d6:4c:28:
98:08:78:dd:02:0f:cc:28:55:0a:66:f8:80:3d:b5:
1a:70:6a:eb:8b:6e:d6:21:a6:86:09:2d:06:71:6b:
61:a0:e8:77:c6:29:f4:2e:b5:4c:cb:9c:f7:b9:ee:
7e:94:8c:f5:a8:da:ba:de:c9:d4:86:37:07:62:d1:
b7:2d:0b:57:27:2d:9e:f8:f3:e4:19:a5:04:a6:40:
b5:30:d3:10:99:c1:3d:46:9b:cb:30:1c:ab:80:5b:
16:1a:c7:2b:08:16:5f:8e:b3:40:c3:3c:a8:02:82:
d2:a2:cd:c5:57:de:a9:8b:dd:dd:4e:d8:c7:6d:51:
9e:c3:28:1c:5c:e2:11:60:89:a7:05:d0:ff:42:da:
ef:48:ab:ab:cd:4d:f7:c4:9b:18:1e:97:96:b7:29:
30:42:aa:bd:78:8b:65:60:13:0f:24:aa:04:7a:d1:
12:84:1e:f2:d1:0f:38:57:15:1a:29:ba:2b:58:af:
d5:93:73:cd:cb:ac:15:0f:29:e0:18:e0:73:1f:be:
03:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E8:5F:16:37:F2:EB:F1:35:AE:E9:90:5D:4A:3E:DF:CC:28:3B:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/behfFjfy6_E1rumQXUo-38woO6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.136.0/24
Signature Algorithm: sha256WithRSAEncryption
54:84:0f:09:09:88:6e:58:17:21:3e:34:60:0e:1f:7a:ce:8a:
61:b1:e4:67:93:3d:0a:a1:b2:ae:55:d7:9a:51:f0:44:79:00:
b3:54:5c:c7:e6:38:dd:14:21:57:4e:38:ee:58:fe:44:77:86:
87:4f:8a:2a:8f:59:6c:6f:e2:2a:b7:ba:a4:47:8f:5c:68:5f:
c1:c7:1d:e3:76:fa:9c:ed:e3:e3:6b:3d:47:bc:f1:3c:c4:96:
43:c8:bf:45:b6:d2:24:d1:c4:1e:53:cc:c3:cc:63:71:c0:a7:
c6:ac:21:c2:b9:f6:da:6d:6a:61:29:dc:ea:13:50:8f:cb:44:
cb:f0:3e:c7:9c:16:ea:21:3d:92:a6:b6:48:ab:9d:93:2f:ef:
45:c4:58:4b:78:98:a6:5f:7d:64:76:2d:97:99:8a:f9:80:57:
52:9b:73:cc:ab:12:ca:9c:13:92:f4:d6:4b:78:0a:24:e3:14:
f3:49:b0:76:77:33:74:9f:84:b7:be:4b:46:e2:28:df:67:c8:
c9:65:a2:68:4d:09:40:b4:66:49:0d:1e:ab:eb:f9:44:42:8e:
55:cd:b6:9b:f2:da:aa:26:91:b0:d9:bf:d0:13:f6:61:9f:e8:
77:95:07:17:57:05:69:1f:d8:42:7e:ab:cc:f1:b3:74:69:3c:
3c:35:d6:a7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaD2C3YWKqqTJPI/SDB7DadhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDAxMDU1OTAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZGU4NWYxNjM3ZjJlYmYxMzVhZWU5OTA1ZDRhM2VkZmNjMjgzYmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV9eV3W/p+SXGQuSn9l9w8Rnxvi6
xs1q15j0K0jV7eHJU4FLrwZh8tu2KIn5cgYuJx52J4P2ntDWTCiYCHjdAg/MKFUK
ZviAPbUacGrri27WIaaGCS0GcWthoOh3xin0LrVMy5z3ue5+lIz1qNq63snUhjcH
YtG3LQtXJy2e+PPkGaUEpkC1MNMQmcE9RpvLMByrgFsWGscrCBZfjrNAwzyoAoLS
os3FV96pi93dTtjHbVGewygcXOIRYImnBdD/QtrvSKurzU33xJsYHpeWtykwQqq9
eItlYBMPJKoEetEShB7y0Q84VxUaKborWK/Vk3PNy6wVDyngGOBzH74DowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG3oXxY38uvxNa7pkF1KPt/MKDurMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYmVoZkZqZnk2X0UxcnVtUVhVby0zOHdvTzZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/aIMA0G
CSqGSIb3DQEBCwUAA4IBAQBUhA8JCYhuWBchPjRgDh96zophseRnkz0KobKuVdea
UfBEeQCzVFzH5jjdFCFXTjjuWP5Ed4aHT4oqj1lsb+Iqt7qkR49caF/Bxx3jdvqc
7ePjaz1HvPE8xJZDyL9FttIk0cQeU8zDzGNxwKfGrCHCufbabWphKdzqE1CPy0TL
8D7HnBbqIT2SprZIq52TL+9FxFhLeJimX31kdi2XmYr5gFdSm3PMqxLKnBOS9NZL
eAok4xTzSbB2dzN0n4S3vktG4ijfZ8jJZaJoTQlAtGZJDR6r6/lEQo5Vzbab8tqq
JpGw2b/QE/Zhn+h3lQcXVwVpH9hCfqvM8bN0aTw8Ndan
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:31:26 2026 by rpki-client