Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhpSTPZozhc2np4vi1p3Y2a6Lrc.roa
File: fhpSTPZozhc2np4vi1p3Y2a6Lrc.roa (raw, json)
Hash identifier: xLsP3Dk89gJgWzKomLM1lOTGJqO5iHSlfy1zjYpborM=
Subject key identifier: 7E:1A:52:4C:F6:68:CE:17:36:9E:9E:2F:8B:5A:77:63:66:BA:2E:B7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A10F87BFA22E5287CCB22117C278661E1D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhpSTPZozhc2np4vi1p3Y2a6Lrc.roa
Signing time: Tue 06 Oct 2026 04:45:17 +0000
ROA not before: Tue 06 Oct 2026 04:45:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154820
IP address blocks: 151.240.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0f:87:bf:a2:2e:52:87:cc:b2:21:17:c2:78:66:1e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 6 04:45:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e1a524cf668ce17369e9e2f8b5a776366ba2eb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:28:86:5b:19:05:cc:05:3c:48:60:71:67:4c:
4e:6a:42:b4:9d:a7:ed:98:79:08:4c:79:cc:25:49:
0d:9a:3b:0e:76:0d:44:30:b8:cf:4d:75:79:77:8e:
f0:35:46:cb:9b:ca:5b:86:ff:fc:73:ec:2b:a3:59:
61:87:c5:d0:d5:4e:35:80:61:40:82:ce:b6:21:67:
f6:3b:6f:ce:e0:f3:e8:7b:14:2f:08:d5:f3:54:1a:
44:38:f9:c3:23:f9:f4:39:62:c4:3e:70:7a:09:a6:
94:09:5d:b5:d2:f8:ef:6c:89:cc:b7:a5:fc:9f:15:
e1:78:1a:38:1e:70:47:76:73:0d:6a:9a:1e:39:ca:
74:c8:ab:ba:28:3e:f2:f7:2e:89:78:e7:ce:62:03:
76:5a:76:1f:7a:b5:e2:f7:67:f9:07:3e:2d:92:a8:
ec:3a:fc:cd:36:55:43:7c:e0:29:43:51:66:41:be:
4f:4c:1a:13:97:7c:aa:09:5a:42:6e:75:e6:1b:53:
b1:95:57:e7:51:99:c3:db:8f:60:a0:dd:3a:85:79:
2d:7a:9d:89:3c:92:6a:65:c2:23:b8:78:55:8a:14:
1c:67:c1:d6:f8:32:0f:88:f0:18:5c:29:3d:92:d2:
38:fa:df:d5:f4:ec:93:09:44:ff:ba:62:bd:c6:87:
60:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1A:52:4C:F6:68:CE:17:36:9E:9E:2F:8B:5A:77:63:66:BA:2E:B7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fhpSTPZozhc2np4vi1p3Y2a6Lrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.226.0/24
Signature Algorithm: sha256WithRSAEncryption
56:f0:75:ae:05:b6:43:ba:d7:26:27:a8:27:42:cc:76:2d:ab:
96:0f:f5:18:a4:f0:15:cb:fe:bc:6a:c0:2a:c8:66:ba:a8:bd:
8a:21:5e:7b:d2:c7:59:c3:4b:80:f4:55:c1:0e:e8:2f:ef:1c:
e1:f1:98:80:41:8e:84:17:0a:c2:a4:c4:f2:1c:5a:8d:26:c1:
3c:62:1a:32:38:c8:06:90:a8:a6:7e:e5:dd:76:52:70:35:7a:
4e:7d:a7:2a:46:72:9d:95:c8:94:24:ff:7c:6a:19:7b:65:dd:
80:c4:b3:c2:ef:d3:b5:37:e1:21:73:49:e4:43:85:1a:56:00:
14:ad:ff:d9:34:99:92:7b:f7:5f:6d:10:6c:3c:ff:64:19:1b:
71:f5:07:78:26:36:fc:12:0d:85:7f:26:2d:2b:d1:dd:bf:57:
5b:c2:32:60:7e:07:de:2a:95:52:18:ec:c4:e3:ee:c2:14:89:
ec:f2:f2:20:77:30:f5:20:cf:ef:c2:36:2f:6d:5e:8a:22:12:
32:25:27:fa:ac:20:87:80:34:a7:a8:ec:96:fe:a6:51:3a:72:
31:21:42:d0:12:3f:09:73:49:55:18:3f:d3:a8:a6:80:04:94:
09:23:67:4e:53:d4:c8:5b:d1:b0:6f:30:54:00:91:84:27:66:
ff:0a:ea:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:30 2026 by rpki-client