Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fDALYQe1Ochrtf65Xf9jRJCBaEE.roa
File: fDALYQe1Ochrtf65Xf9jRJCBaEE.roa (raw, json)
Hash identifier: CIfFIf/eWdDK2SNJ2mFPIfGFzckRcQAN1/paAHmAFnQ=
Subject key identifier: 7C:30:0B:61:07:B5:39:C8:6B:B5:FE:B9:5D:FF:63:44:90:81:68:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1445137165F6B4569402F8C84A3AB537D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fDALYQe1Ochrtf65Xf9jRJCBaEE.roa
Signing time: Fri 16 Oct 2026 10:45:35 +0000
ROA not before: Fri 16 Oct 2026 10:45:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 151.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:51:37:16:5f:6b:45:69:40:2f:8c:84:a3:ab:53:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 16 10:45:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c300b6107b539c86bb5feb95dff634490816841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:c7:0e:30:ee:96:a0:84:de:65:9f:49:ab:
3c:1e:c2:ff:ab:10:2a:a0:50:18:92:ad:99:77:21:
ab:80:0a:0a:83:11:28:19:2a:5d:7b:b8:f6:b9:ca:
2a:c8:95:15:d3:97:ed:e6:c3:fd:4d:4f:ae:a2:02:
7c:4b:64:47:4e:cf:99:d8:32:f1:1f:08:6a:0d:dc:
0e:8a:df:c4:1f:f1:91:1c:f6:fe:39:be:46:5a:fd:
a9:e2:fd:9f:88:ec:45:bb:f3:65:3e:c6:df:31:90:
87:bb:7b:4f:63:1c:9a:39:6e:62:4a:14:33:2f:6c:
9a:b1:24:8d:13:5d:a0:a8:ab:ed:86:59:8d:ac:51:
3b:41:2f:82:4a:d5:bd:81:fb:51:75:42:fd:b8:42:
28:45:01:9c:6e:ba:75:bf:b5:53:65:ad:eb:12:77:
08:de:3d:05:ee:16:8f:29:48:f6:0e:26:7d:6e:50:
87:4a:3c:31:5b:18:d9:7f:30:09:dc:fe:8e:ef:c5:
42:ce:98:2a:84:15:2a:9a:23:2a:dd:8d:8f:4c:a0:
82:2c:df:67:eb:c6:92:cd:1a:75:b5:db:3e:4d:f7:
a3:52:86:90:1a:9f:97:cc:0c:ac:68:dd:98:1a:88:
38:6c:18:90:1a:02:17:b2:91:7a:e9:43:cb:ff:83:
f6:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:30:0B:61:07:B5:39:C8:6B:B5:FE:B9:5D:FF:63:44:90:81:68:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fDALYQe1Ochrtf65Xf9jRJCBaEE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:7a:5a:41:31:a7:80:66:42:47:42:e2:4c:2d:87:18:5a:d2:
e7:ec:93:56:7c:68:5d:64:c2:3d:6f:d1:a2:f9:bb:d1:bb:b7:
49:73:e6:f1:8f:7d:5f:ac:75:a8:c4:a1:10:13:49:f7:a9:75:
2b:83:c4:c7:64:78:77:a8:d2:68:46:73:e8:69:51:45:9e:b0:
81:04:50:b4:0c:ef:89:11:80:ff:da:14:8a:60:b9:5c:d4:5e:
84:e4:24:3c:13:8f:d3:da:7b:4a:42:33:3c:32:e7:c4:65:46:
97:3a:ef:92:45:92:44:9a:6c:91:31:8b:14:be:bb:92:8f:83:
7e:4f:50:5d:5b:40:5a:d7:e3:c1:07:70:52:81:0b:63:4a:3c:
b1:b6:5c:77:d1:9d:cc:2a:56:6e:ba:07:ca:b0:5e:06:45:4b:
ea:56:18:44:36:a5:91:07:15:c8:39:65:c8:45:09:af:83:85:
8b:f8:48:c7:9e:73:fd:ea:0a:a6:36:0c:7f:42:aa:c8:db:1e:
a8:54:45:42:8d:40:fd:37:52:0c:3a:1a:37:07:3c:d5:fc:ee:
c6:a8:6a:b1:27:d1:3a:33:76:96:3f:13:8e:6f:be:af:c4:8d:
8d:8a:89:31:f9:d5:bf:66:0b:ef:db:05:0e:3e:7e:29:d9:d5:
d9:f8:42:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:48:22 2026 by rpki-client