Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f1Hnbpm8TVZwMKL1qgccLmMdJyI.roa
File: f1Hnbpm8TVZwMKL1qgccLmMdJyI.roa (raw, json)
Hash identifier: LkX6YsC1A8TFxUnObHQHvQ0PL0jS4RSN+B6UdImJl5o=
Subject key identifier: 7F:51:E7:6E:99:BC:4D:56:70:30:A2:F5:AA:07:1C:2E:63:1D:27:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A14453465453B9560F3F1086CEC00F89C4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f1Hnbpm8TVZwMKL1qgccLmMdJyI.roa
Signing time: Fri 16 Oct 2026 10:47:50 +0000
ROA not before: Fri 16 Oct 2026 10:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152726
IP address blocks: 151.241.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:53:46:54:53:b9:56:0f:3f:10:86:ce:c0:0f:89:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 16 10:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f51e76e99bc4d567030a2f5aa071c2e631d2722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:48:f4:12:2e:2e:33:27:34:53:20:28:4a:34:
0c:f2:96:10:2a:e7:ab:0b:2a:1e:c1:09:48:69:c6:
f1:a7:ed:f5:c4:52:8f:1f:70:a6:fb:b1:c6:79:69:
ad:0c:cd:70:e1:ca:67:0c:2f:1d:55:f3:c7:46:15:
40:00:0f:7f:23:a5:c4:e3:c1:07:0c:8d:27:d5:6b:
3c:9a:31:29:14:7d:da:83:dc:a7:b2:bb:8e:63:4d:
e6:83:5e:76:6e:b7:88:a5:4e:6e:bf:23:a6:8f:0f:
e1:00:79:cc:15:05:69:b5:04:36:1a:b1:a2:3b:3a:
27:60:90:34:65:c3:aa:1d:7f:c3:69:fd:0f:1e:80:
fe:26:41:9a:83:10:dc:4b:1c:9d:c0:c1:25:68:18:
15:e4:c9:a2:76:6a:ea:2f:ee:e6:ba:16:0b:0d:55:
20:d8:30:20:37:f9:d2:d4:c1:34:af:19:1b:d8:5a:
5f:38:02:ac:0b:15:1d:66:5d:b5:54:0f:98:eb:ab:
a6:65:cf:93:12:98:40:a0:6e:90:1d:e2:d8:6f:aa:
d2:bd:8e:e7:3b:dc:0a:2e:94:e2:1f:0c:56:fd:b2:
d6:c2:46:84:4c:7a:ff:b0:99:40:28:44:32:63:ad:
64:17:1b:ae:e2:8f:70:77:0b:de:47:71:9b:70:31:
85:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:51:E7:6E:99:BC:4D:56:70:30:A2:F5:AA:07:1C:2E:63:1D:27:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/f1Hnbpm8TVZwMKL1qgccLmMdJyI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:8a:fc:11:10:51:04:50:ec:b1:bb:65:44:19:29:12:69:ff:
b0:d5:f7:b8:ec:c9:74:0b:f9:98:01:10:0d:8b:d5:fa:ca:b7:
82:94:a6:e9:b0:60:4d:39:34:28:bb:43:37:16:09:cc:94:81:
36:f3:b3:3c:39:b2:90:38:db:46:1c:d0:fb:65:17:81:c0:5a:
6b:8b:de:64:93:17:b6:a0:e5:d6:a3:f4:e7:19:9a:5e:18:df:
cb:2e:ec:25:e9:28:e7:40:49:20:1c:16:5c:db:9f:b4:da:5a:
5c:5b:99:51:89:90:0d:22:e4:77:cc:cb:7d:13:27:27:49:8f:
0c:b7:8c:ac:37:7f:d0:58:b7:65:a2:d9:83:76:dc:78:7a:f1:
a1:a6:42:2e:18:9b:c2:86:99:22:5f:1e:a8:3c:17:34:1e:5f:
41:78:28:65:25:40:55:22:c5:f1:a2:53:ea:b9:b7:c2:ae:0d:
a0:9f:67:cd:fa:63:3a:db:a5:17:33:5f:dd:a1:37:e1:be:f3:
fb:67:b3:fc:44:d6:cf:b0:5a:f5:ab:61:a1:ad:8d:d9:ca:11:
3b:d1:58:2d:9d:61:45:03:75:dc:dc:56:4b:d8:5d:fe:08:c1:
a4:09:ad:44:18:24:60:ba:18:8b:ac:81:94:88:04:9c:de:3e:
23:3b:94:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFEU0ZUU7lWDz8Qhs7AD4nEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDE2MTA0NzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjUxZTc2ZTk5YmM0ZDU2NzAzMGEyZjVhYTA3MWMyZTYzMWQyNzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUj0Ei4uMyc0UyAoSjQM8pYQKuer
CyoewQlIacbxp+31xFKPH3Cm+7HGeWmtDM1w4cpnDC8dVfPHRhVAAA9/I6XE48EH
DI0n1Ws8mjEpFH3ag9ynsruOY03mg152breIpU5uvyOmjw/hAHnMFQVptQQ2GrGi
OzonYJA0ZcOqHX/Daf0PHoD+JkGagxDcSxydwMElaBgV5MmidmrqL+7muhYLDVUg
2DAgN/nS1ME0rxkb2FpfOAKsCxUdZl21VA+Y66umZc+TEphAoG6QHeLYb6rSvY7n
O9wKLpTiHwxW/bLWwkaETHr/sJlAKEQyY61kFxuu4o9wdwveR3GbcDGFSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH9R526ZvE1WcDCi9aoHHC5jHSciMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZjFIbmJwbThUVlp3TUtMMXFnY2NMbU1kSnlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ERMA0G
CSqGSIb3DQEBCwUAA4IBAQBLivwREFEEUOyxu2VEGSkSaf+w1fe47Ml0C/mYARAN
i9X6yreClKbpsGBNOTQou0M3FgnMlIE287M8ObKQONtGHND7ZReBwFpri95kkxe2
oOXWo/TnGZpeGN/LLuwl6SjnQEkgHBZc25+02lpcW5lRiZANIuR3zMt9EycnSY8M
t4ysN3/QWLdlotmDdtx4evGhpkIuGJvChpkiXx6oPBc0Hl9BeChlJUBVIsXxolPq
ubfCrg2gn2fN+mM626UXM1/doTfhvvP7Z7P8RNbPsFr1q2GhrY3ZyhE70VgtnWFF
A3Xc3FZL2F3+CMGkCa1EGCRguhiLrIGUiASc3j4jO5Sr
-----END CERTIFICATE-----
Generated at Sun Oct 18 10:35:43 2026 by rpki-client