Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDHeoqQUEr9okvqkpA3BG4fgApA.roa
File: cDHeoqQUEr9okvqkpA3BG4fgApA.roa (raw, json)
Hash identifier: CeCe218qk2zYFTIzn8S0dALUjxpWXR0+w1LdjzqgHtE=
Subject key identifier: 70:31:DE:A2:A4:14:12:BF:68:92:FA:A4:A4:0D:C1:1B:87:E0:02:90
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A195D4B24658FAB192C56456EF782590D4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDHeoqQUEr9okvqkpA3BG4fgApA.roa
Signing time: Sun 01 Nov 2026 06:38:26 +0000
ROA not before: Sun 01 Nov 2026 06:38:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208063
IP address blocks: 151.247.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:95:d4:b2:46:58:fa:b1:92:c5:64:56:ef:78:25:90:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 1 06:38:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7031dea2a41412bf6892faa4a40dc11b87e00290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4f:8e:5d:20:93:35:5e:18:59:e0:d7:59:8a:
46:db:c6:0f:e7:d9:cb:ab:80:92:b9:b2:85:2c:71:
26:c6:c0:7b:3d:ff:9d:01:e6:d7:99:86:e6:e5:cd:
cd:60:ca:d2:37:2f:4f:eb:b2:b3:62:3c:95:fd:3b:
29:b1:bc:5a:86:ce:69:b7:d5:b1:c8:35:33:9f:f5:
5a:26:aa:89:3c:bf:2d:b4:64:04:19:3a:48:02:11:
3f:55:d2:26:cd:a5:26:20:ed:e0:17:f2:70:10:18:
6d:70:22:65:55:2c:0c:0c:82:63:7c:33:7e:e7:4c:
fa:0d:39:79:cd:33:8e:b4:8d:bf:89:fb:5e:1f:f4:
b1:78:13:ff:00:1b:54:a2:fd:97:90:4c:f7:f0:e8:
cb:c9:79:31:84:e0:d3:4e:14:18:d0:fc:9d:a4:8b:
15:f6:bb:61:87:46:fb:22:19:8f:04:90:80:74:81:
16:59:38:70:16:a7:5f:fa:09:cb:e4:ce:9b:03:8e:
e2:1b:ef:28:46:1a:1d:50:21:da:fe:41:22:76:d6:
3c:b1:be:c6:9a:7f:ac:88:3e:00:b5:66:a8:70:f0:
dc:ec:08:b9:ab:b6:1e:34:e7:92:05:7e:1c:9f:f0:
94:4b:17:99:77:92:f2:6e:aa:11:30:6e:46:84:39:
f1:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:31:DE:A2:A4:14:12:BF:68:92:FA:A4:A4:0D:C1:1B:87:E0:02:90
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cDHeoqQUEr9okvqkpA3BG4fgApA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.17.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:41:3b:42:90:b4:d9:99:bd:5d:87:eb:e4:c0:3f:3d:e9:fb:
ee:92:3b:81:04:5f:79:36:af:57:86:79:89:4a:29:e8:5d:79:
fb:74:e1:41:4f:05:ba:0d:e7:b7:fa:ca:c2:8b:24:d6:61:9a:
d5:0c:8a:ff:cb:5e:21:8a:5d:ba:3c:87:e0:fc:ea:19:26:ad:
0f:5c:5c:6f:fb:b9:96:80:d1:30:c4:62:fc:28:a8:8d:3b:59:
00:d2:3e:1a:35:f0:4f:2b:f4:2b:bf:6f:4d:d5:72:07:82:aa:
25:51:4f:2a:78:ca:cb:31:3b:9b:a9:05:a1:ee:36:e6:61:c1:
f3:3a:cb:0c:d1:71:54:4e:e4:f0:25:37:aa:77:01:1b:02:b6:
e2:98:23:71:8a:e5:b4:02:c3:ac:47:7f:7d:f0:53:68:3c:ae:
1d:2e:61:41:af:fc:b8:8a:da:93:77:47:a8:1b:48:b5:90:c4:
63:f8:d0:29:04:ee:9e:46:35:91:75:78:02:a6:e2:32:ac:d9:
ec:11:3e:72:9e:5f:4c:fd:83:58:6b:0b:fc:d6:fe:31:9c:4e:
1e:4f:6f:ff:d4:83:e1:ed:5a:e6:0c:8b:fe:33:67:e8:04:5c:
13:5d:b8:cd:26:e1:54:3f:d6:b3:6c:d4:7f:63:05:6b:f8:f4:
0f:42:7f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 15:00:22 2026 by rpki-client