Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fa0XAu2m2aK4PJfzNTxrjXT9KN0.roa
File: fa0XAu2m2aK4PJfzNTxrjXT9KN0.roa (raw, json)
Hash identifier: hlbG+dcNnPi+HXg+kKn1FjYIZ4EFqexdPOaiaVjeKXs=
Subject key identifier: 7D:AD:17:02:ED:A6:D9:A2:B8:3C:97:F3:35:3C:6B:8D:74:FD:28:DD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E2BB7AC5F67D4FDFEC36067F50553D2BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fa0XAu2m2aK4PJfzNTxrjXT9KN0.roa
Signing time: Fri 15 May 2026 12:58:37 +0000
ROA not before: Fri 15 May 2026 12:58:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 151.244.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2b:b7:ac:5f:67:d4:fd:fe:c3:60:67:f5:05:53:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 15 12:58:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7dad1702eda6d9a2b83c97f3353c6b8d74fd28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c3:84:ab:1b:60:1f:09:c8:c3:1d:14:18:10:
94:4e:79:3b:46:bd:f1:5f:42:ee:f6:b5:cc:1e:fc:
a9:09:c2:db:db:ef:ed:c2:0c:e9:60:b4:ea:2e:fc:
cf:f0:7a:23:6e:65:0e:04:4c:b2:9e:8a:25:97:28:
b0:0d:44:13:8c:2b:04:9a:84:52:9a:22:df:74:30:
28:be:93:dd:d0:9b:ac:28:16:55:90:90:f9:22:cd:
0c:7f:77:45:0f:3c:92:24:48:5d:97:aa:9c:c5:34:
8e:73:43:9d:b8:05:97:12:13:a9:f6:64:68:d6:70:
c3:13:b8:96:95:c8:6b:ee:32:bf:e5:b0:7f:e0:ee:
d0:e3:5b:1d:7b:3c:d5:58:7d:d7:e3:cf:cd:46:87:
f6:d3:04:f4:74:7f:26:96:5f:d6:cc:4a:62:2f:22:
d5:4a:69:10:46:65:e9:38:29:c5:db:3d:e6:cc:67:
70:56:0c:c4:48:d9:91:63:20:3d:4d:64:60:c8:db:
24:86:c0:c9:83:51:a2:e9:3b:ee:1e:4c:3e:4f:cc:
f8:7f:06:19:ce:81:72:75:42:cd:42:bc:ad:a4:cf:
82:cb:cc:f0:45:7e:0d:43:ac:4a:b0:c4:90:66:2c:
c1:ab:73:57:81:37:99:55:64:65:dd:b5:3c:02:35:
07:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:17:02:ED:A6:D9:A2:B8:3C:97:F3:35:3C:6B:8D:74:FD:28:DD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fa0XAu2m2aK4PJfzNTxrjXT9KN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.136.0/24
Signature Algorithm: sha256WithRSAEncryption
95:47:61:d6:3e:df:cf:1c:68:5a:16:c4:29:24:78:da:61:9f:
a1:93:1a:23:03:62:ac:dc:ab:7a:fc:b4:2e:80:9e:c4:df:2b:
70:04:77:c8:e3:55:53:aa:d6:51:d6:b7:81:07:33:82:8b:a6:
e3:dc:a8:ac:21:57:1e:7e:fb:f2:a3:42:bb:3b:66:04:08:f6:
06:2c:d2:ab:8f:d2:31:f5:a4:ab:78:73:f4:81:8d:51:51:e2:
5a:24:8e:ea:6a:3b:f7:55:d3:88:4c:e1:9a:14:26:82:3d:79:
8c:f3:7e:b1:93:ac:f8:09:35:71:b6:7f:62:fa:b3:82:1c:76:
26:d0:70:01:82:9e:d9:d8:a8:f4:f2:15:6d:ee:6f:a8:71:30:
8d:b0:2b:04:ca:2c:df:76:30:e0:26:58:b8:8f:48:8b:e4:22:
fb:64:07:6a:1f:f2:7a:30:57:ee:3f:a4:0f:54:1c:89:b8:bf:
a9:fd:3d:9d:82:86:6a:e3:32:30:76:72:f7:9f:7e:20:1d:4d:
ee:9a:38:0d:b4:26:48:2b:8f:3d:8c:50:5f:d7:f8:5f:65:c5:
1f:ac:19:cf:12:7b:55:54:18:2e:81:9d:8e:5d:e3:63:aa:f8:
5f:59:7c:01:26:13:3b:ac:bb:fc:e9:00:cc:9a:e6:9b:56:73:
f2:3f:8c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:31 2026 by rpki-client