Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e5h6VeggzzO6y7v8Bo9rOlwWt4s.roa
File: e5h6VeggzzO6y7v8Bo9rOlwWt4s.roa (raw, json)
Hash identifier: 4Y+i7r70AtWykS37UPElS442jJeox6HbxUf9XcYWZWk=
Subject key identifier: 7B:98:7A:55:E8:20:CF:33:BA:CB:BB:FC:06:8F:6B:3A:5C:16:B7:8B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3D514CDEB40DC72E677540EDBD99871A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e5h6VeggzzO6y7v8Bo9rOlwWt4s.roa
Signing time: Tue 07 Jul 2026 16:02:46 +0000
ROA not before: Tue 07 Jul 2026 16:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51847
IP address blocks: 151.243.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:51:4c:de:b4:0d:c7:2e:67:75:40:ed:bd:99:87:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 7 16:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b987a55e820cf33bacbbbfc068f6b3a5c16b78b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:64:2c:49:23:00:a0:5e:78:17:ea:01:52:63:
1b:90:e8:3b:c2:52:22:fd:2e:bf:3c:fd:21:14:6b:
7e:25:f6:1f:b0:61:b2:08:d6:b0:ff:30:00:38:64:
ce:f8:e3:14:61:ae:a4:38:e8:7e:9a:de:18:6c:69:
32:f2:98:78:d1:de:a7:0e:3a:99:a3:dd:69:d9:02:
2a:5b:b3:ba:88:f8:d4:8c:44:77:7a:a9:83:10:c1:
ac:b2:45:46:84:a6:18:74:43:45:50:35:c1:47:55:
40:13:d6:fc:03:c3:8c:b7:55:83:29:02:c7:55:c0:
72:19:34:b0:23:9b:a6:9f:7b:a9:2a:20:42:59:a6:
21:7f:d5:0b:c8:4d:07:77:0a:b0:8c:bd:cf:55:08:
a7:e4:41:a6:b2:3c:a0:fd:2b:25:85:2a:00:7d:68:
8d:ce:84:a8:26:89:72:eb:90:da:ef:20:46:b1:1c:
c1:fa:b1:ba:27:7f:0f:6e:e8:9a:0e:cb:43:99:a5:
ac:bc:19:c5:d8:e9:b8:57:f4:6c:04:36:bc:d4:ce:
7b:21:7e:38:47:b8:69:21:fe:4e:87:6a:cd:99:52:
c8:0d:ae:32:6f:61:62:df:36:97:e8:66:46:ee:35:
8d:8f:bd:10:89:83:bd:69:51:4c:79:e2:c0:79:1c:
a0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:98:7A:55:E8:20:CF:33:BA:CB:BB:FC:06:8F:6B:3A:5C:16:B7:8B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e5h6VeggzzO6y7v8Bo9rOlwWt4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.20.0/24
Signature Algorithm: sha256WithRSAEncryption
56:a2:b4:5a:07:31:bf:2c:d0:19:03:bb:f5:68:90:63:b9:22:
dd:dd:d6:0a:7b:0f:da:b5:d7:60:62:27:dc:23:e8:04:f3:12:
fb:41:b4:4a:c1:46:0a:35:7a:70:83:f8:f4:52:5c:e9:2f:eb:
c9:94:d9:3c:b0:6d:03:b1:f1:c9:92:8a:de:bd:35:2b:a3:cd:
b8:0c:e6:aa:7d:47:32:bd:60:06:e4:74:d2:b4:bd:c9:1d:bc:
46:82:d8:0b:d4:7b:71:d7:2b:bc:f1:4b:75:79:86:97:5d:b1:
c9:d7:30:f5:c9:ac:37:39:71:59:58:65:79:a2:f9:94:2b:61:
80:af:f7:26:78:e9:47:db:51:87:e9:28:60:42:91:03:58:16:
b4:8c:23:a6:90:96:7b:c8:43:e1:31:7b:ff:4b:57:3b:8b:4c:
5c:cc:36:ad:8d:da:83:11:23:65:8a:f7:8a:31:8e:1a:2d:16:
c9:2e:96:35:7d:5f:30:5b:4f:40:15:9c:4c:86:23:de:bc:89:
cc:a0:4c:45:68:13:b6:44:fa:09:3b:a8:b5:f7:4f:68:30:12:
21:df:33:9f:c8:55:12:9f:0a:fe:e6:18:36:96:06:3e:a8:f4:
72:15:eb:c7:e7:a9:11:4a:09:a9:58:af:1b:12:05:7c:fc:f9:
4e:62:40:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:15:08 2026 by rpki-client