Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLvq1ssfJCJXv3kw_vAESMXU51k.roa
File: cLvq1ssfJCJXv3kw_vAESMXU51k.roa (raw, json)
Hash identifier: xKkk+WwMrT+lHNuAcNtCOJ8e1auWODoxzpowkOLHlfA=
Subject key identifier: 70:BB:EA:D6:CB:1F:24:22:57:BF:79:30:FE:F0:04:48:C5:D4:E7:59
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0ECF087C8C4B564EDB5562D939D2AAE8E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLvq1ssfJCJXv3kw_vAESMXU51k.roa
Signing time: Tue 29 Sep 2026 11:33:01 +0000
ROA not before: Tue 29 Sep 2026 11:33:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218583
IP address blocks: 151.247.85.0/24 maxlen: 24
151.247.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:f0:87:c8:c4:b5:64:ed:b5:56:2d:93:9d:2a:ae:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 29 11:33:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=70bbead6cb1f242257bf7930fef00448c5d4e759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:6a:a5:55:39:40:1f:e3:3e:3c:a8:8f:03:da:
0a:bc:25:ef:f9:0c:cb:95:ab:91:ae:49:e0:a1:e4:
8d:f9:b1:19:fb:85:49:fc:4d:28:de:c4:90:70:59:
6d:ca:7f:77:db:e3:5e:e7:61:1c:e0:68:db:b3:a8:
2f:a1:b0:de:b9:ba:94:c8:7f:ed:6e:21:60:3d:f6:
f2:6f:98:e0:29:7d:15:ab:31:49:99:e3:56:3d:d8:
4b:f9:fc:7f:2d:cd:54:7a:54:a5:eb:a7:c5:c8:e2:
fe:4b:ce:58:7f:ca:c8:80:b4:41:8c:f1:25:4c:89:
48:53:9b:d9:eb:b8:ec:37:01:c1:e8:de:58:f3:5e:
da:4d:9e:31:13:4d:6a:e1:1b:12:f3:c7:cb:24:22:
fc:a5:82:cd:90:f7:b5:dd:0f:c5:4e:d1:a5:16:9a:
c9:39:39:48:4d:51:5c:90:1f:eb:91:8a:9f:2d:90:
4f:f6:1c:56:b6:0b:a2:aa:5e:6b:3e:19:36:af:f4:
8e:70:ff:49:25:d7:e6:21:0c:87:c0:22:f6:03:4c:
26:d3:2c:c6:ae:f8:2a:f4:5d:16:28:73:17:79:8f:
35:f2:a9:19:9b:e6:ae:6f:5e:e3:04:78:45:92:67:
63:1c:22:2f:3a:e5:d4:e4:14:ff:23:b0:e6:64:2e:
46:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:BB:EA:D6:CB:1F:24:22:57:BF:79:30:FE:F0:04:48:C5:D4:E7:59
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/cLvq1ssfJCJXv3kw_vAESMXU51k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.85.0-151.247.86.255
Signature Algorithm: sha256WithRSAEncryption
51:63:86:c9:a0:df:ef:03:4d:3a:dd:84:8e:cb:f1:95:5f:8b:
ae:7f:20:e9:2e:72:98:3f:52:fa:c0:e4:df:6b:16:91:b7:77:
b8:1e:72:a6:35:fd:53:54:1d:9b:29:76:98:5e:ef:19:11:d6:
32:72:2f:f6:cf:28:94:87:ef:6d:b8:88:d7:47:b3:c9:28:45:
e7:64:81:f9:ae:2e:e9:7a:5c:50:68:25:73:42:0d:d9:a3:2b:
d9:07:44:ed:bd:f3:a5:ed:f1:74:75:10:5e:4d:30:ae:2d:73:
30:71:2c:bd:43:6e:b2:db:b9:07:3e:e5:56:be:4d:0d:9c:9d:
6f:0a:c0:f9:40:46:e8:88:5d:a1:ae:af:81:ab:5e:76:ff:36:
a3:80:02:90:2d:a6:ce:fc:ac:1b:67:0d:4b:8f:0a:7b:30:8e:
88:05:e2:fa:16:d8:0d:99:8d:2b:c3:51:02:e3:19:b5:94:df:
70:5d:a0:5b:e9:78:58:f0:e9:32:6a:05:60:4a:15:3b:48:a0:
44:2d:27:d1:14:e1:f3:c3:3a:fc:fe:ea:d4:ef:8c:fa:2f:71:
8d:ba:c7:9e:02:c2:24:b9:8d:44:3a:20:55:c7:e0:d8:3f:62:
b9:7a:4e:bf:b1:ed:30:8e:e3:f4:21:14:c8:50:91:ac:af:96:
e1:54:49:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:02:15 2026 by rpki-client