Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gCxIlnFGZ8VhIY9VgENwwUP4R0U.roa
File: gCxIlnFGZ8VhIY9VgENwwUP4R0U.roa (raw, json)
Hash identifier: gwcpX/Lick8H+oenWe+GbQsWDpBQy7PTmgW+sFqj7us=
Subject key identifier: 80:2C:48:96:71:46:67:C5:61:21:8F:55:80:43:70:C1:43:F8:47:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A044924416C6D4DD96F7C809A1B0E310B0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gCxIlnFGZ8VhIY9VgENwwUP4R0U.roa
Signing time: Thu 27 Aug 2026 18:53:51 +0000
ROA not before: Thu 27 Aug 2026 18:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200957
IP address blocks: 151.244.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:44:92:44:16:c6:d4:dd:96:f7:c8:09:a1:b0:e3:10:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 18:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=802c4896714667c561218f55804370c143f84745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b2:29:e5:20:be:b0:a1:d6:78:54:fc:da:3d:
79:8e:fe:18:b5:68:30:ba:77:de:e8:d8:be:33:a5:
90:db:70:c9:17:8a:e6:77:43:68:d1:31:38:c8:4b:
68:c3:97:9c:4f:2d:2a:63:ba:0e:1e:e7:ae:1d:30:
b5:1b:62:73:2c:ef:e8:e1:9f:f0:3f:7a:a3:b3:ca:
0d:41:4c:e6:d6:4f:df:74:d9:ee:cd:e7:13:06:e7:
36:9d:51:5e:82:af:d4:82:f6:77:c7:b4:17:20:74:
26:a6:95:f3:22:d8:f0:a0:4e:84:dd:27:72:bc:76:
3c:4f:11:34:28:a5:3f:6a:4e:63:80:db:84:fd:ac:
b0:2a:36:27:de:8e:cb:33:a6:93:2d:07:bf:68:a4:
6b:9a:ca:e8:b1:56:ca:a6:59:e5:cf:29:cd:08:65:
48:20:ba:52:bd:ce:b1:a5:0f:28:99:63:88:6d:f5:
00:09:5c:60:54:51:d5:50:75:6c:58:81:95:42:5c:
a1:0a:4d:fc:c1:c3:3c:b6:40:e0:c6:7e:a8:7d:0d:
c3:3d:9f:5d:9d:8d:dd:1c:ab:35:45:8e:78:1b:e1:
43:61:a0:d2:4e:e9:c2:b9:03:33:d6:6c:1c:23:34:
44:11:cd:05:18:74:ef:01:73:b9:0c:f2:87:47:ba:
85:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:48:96:71:46:67:C5:61:21:8F:55:80:43:70:C1:43:F8:47:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gCxIlnFGZ8VhIY9VgENwwUP4R0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.44.0/24
Signature Algorithm: sha256WithRSAEncryption
48:86:77:da:9a:99:51:99:d5:e6:60:7f:d5:09:20:4e:ac:24:
08:b9:58:47:44:a9:ef:d1:70:f4:4e:63:fa:1f:26:40:ce:8b:
45:7f:91:75:45:49:60:85:17:9a:05:d8:99:d9:c2:69:ca:73:
a5:50:be:57:8e:69:c0:a0:5d:b5:f1:39:cb:16:34:b1:0e:e8:
1f:65:1f:cf:b0:a5:d3:f2:85:f8:d8:c8:a2:5d:d0:ea:96:61:
24:f3:a6:c0:1f:d3:7c:0d:ba:8e:83:f9:13:3b:de:16:e4:ba:
c3:db:df:a4:ab:c5:c1:2b:2f:97:1f:20:88:8a:51:e9:c2:6f:
79:64:21:3a:57:14:9d:38:da:48:37:ec:ed:c1:36:fd:a7:bf:
1d:46:6a:29:be:5f:21:2f:e3:4e:ff:c9:df:15:94:a0:79:72:
62:de:d3:62:1a:56:c8:06:a8:19:bc:69:ac:c6:c7:14:36:4f:
02:ac:26:8d:1b:a9:55:59:71:42:d7:8e:a6:4b:f9:0a:fd:b9:
23:60:03:45:69:a1:96:72:14:f2:da:43:c8:12:01:79:3b:db:
b3:1e:3e:20:34:72:87:7b:8c:a0:86:c6:24:a5:5a:54:67:05:
d3:65:05:5f:22:0d:c4:da:59:de:b9:19:54:6f:d4:8c:13:a8:
06:80:29:6a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBEkkQWxtTdlvfICaGw4xCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI3MTg1MzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDJjNDg5NjcxNDY2N2M1NjEyMThmNTU4MDQzNzBjMTQzZjg0NzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7Ip5SC+sKHWeFT82j15jv4YtWgw
unfe6Ni+M6WQ23DJF4rmd0No0TE4yEtow5ecTy0qY7oOHueuHTC1G2JzLO/o4Z/w
P3qjs8oNQUzm1k/fdNnuzecTBuc2nVFegq/UgvZ3x7QXIHQmppXzItjwoE6E3Sdy
vHY8TxE0KKU/ak5jgNuE/aywKjYn3o7LM6aTLQe/aKRrmsrosVbKplnlzynNCGVI
ILpSvc6xpQ8omWOIbfUACVxgVFHVUHVsWIGVQlyhCk38wcM8tkDgxn6ofQ3DPZ9d
nY3dHKs1RY54G+FDYaDSTunCuQMz1mwcIzREEc0FGHTvAXO5DPKHR7qFvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIAsSJZxRmfFYSGPVYBDcMFD+EdFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZ0N4SWxuRkdaOFZoSVk5VmdFTnd3VVA0UjBVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/QsMA0G
CSqGSIb3DQEBCwUAA4IBAQBIhnfamplRmdXmYH/VCSBOrCQIuVhHRKnv0XD0TmP6
HyZAzotFf5F1RUlghReaBdiZ2cJpynOlUL5XjmnAoF218TnLFjSxDugfZR/PsKXT
8oX42MiiXdDqlmEk86bAH9N8DbqOg/kTO94W5LrD29+kq8XBKy+XHyCIilHpwm95
ZCE6VxSdONpIN+ztwTb9p78dRmopvl8hL+NO/8nfFZSgeXJi3tNiGlbIBqgZvGms
xscUNk8CrCaNG6lVWXFC146mS/kK/bkjYANFaaGWchTy2kPIEgF5O9uzHj4gNHKH
e4yghsYkpVpUZwXTZQVfIg3E2lneuRlUb9SME6gGgClq
-----END CERTIFICATE-----
Generated at Sun Sep 13 23:57:26 2026 by rpki-client