Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h0YnpQhpZ3hlyqgafvxfZ7GMOqk.roa
File: h0YnpQhpZ3hlyqgafvxfZ7GMOqk.roa (raw, json)
Hash identifier: eEzfBKsiAJBmie8zqvrFWlNBf0DaWk3OD0ABgHrJghs=
Subject key identifier: 87:46:27:A5:08:69:67:78:65:CA:A8:1A:7E:FC:5F:67:B1:8C:3A:A9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FF5CBF5629E5955982AD5AD4C1C7DD946
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h0YnpQhpZ3hlyqgafvxfZ7GMOqk.roa
Signing time: Wed 12 Aug 2026 11:46:52 +0000
ROA not before: Wed 12 Aug 2026 11:46:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140641
IP address blocks: 151.245.180.0/24 maxlen: 24
151.245.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f5:cb:f5:62:9e:59:55:98:2a:d5:ad:4c:1c:7d:d9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 12 11:46:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=874627a50869677865caa81a7efc5f67b18c3aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:10:04:44:62:de:11:6b:67:f0:d1:65:ab:
da:25:a6:70:7b:1d:2b:32:5d:4b:62:12:d6:92:5a:
ed:d9:d5:50:3d:a6:bb:6e:87:03:14:e3:12:74:79:
9a:8d:8f:7d:ac:2f:16:88:17:94:f5:02:3e:35:fd:
38:32:8e:06:89:ab:ae:46:45:bc:cb:e1:bb:c5:2a:
f9:8e:cc:47:4d:b0:df:0a:5a:ec:eb:68:ce:41:97:
81:b3:cf:6b:de:1a:99:bd:17:b4:14:ca:71:cf:75:
a2:93:33:ed:9d:8c:13:e1:4e:73:b7:1b:33:23:d7:
91:2a:32:ac:88:31:4f:8a:5c:b0:e3:5a:ef:64:ec:
18:45:13:e2:c7:b0:81:b9:d7:bd:4c:c8:bf:51:fc:
5d:0f:d4:d1:e7:3e:15:1d:9a:eb:1e:bf:29:58:61:
23:cd:59:9e:a5:ab:b6:8b:a9:d1:42:bd:e6:93:3d:
86:d2:c7:4f:1b:86:92:83:96:12:80:e4:66:80:8c:
d3:18:7c:5c:a5:4f:6d:51:8e:c6:6d:22:cd:d2:ea:
c4:fe:14:66:e6:08:58:da:c1:4a:7d:43:96:91:e6:
08:44:32:1e:e4:00:e0:ac:47:ca:49:61:e6:bd:98:
14:ee:7e:cd:08:62:0b:ed:7f:df:25:df:9f:39:bb:
8c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:46:27:A5:08:69:67:78:65:CA:A8:1A:7E:FC:5F:67:B1:8C:3A:A9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/h0YnpQhpZ3hlyqgafvxfZ7GMOqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.180.0/24
151.245.183.0/24
Signature Algorithm: sha256WithRSAEncryption
50:1a:1f:e8:f1:3b:bb:05:b1:e6:d1:36:ab:38:fb:cf:20:97:
c5:3b:44:01:3a:57:cd:b7:fb:b8:98:47:85:9e:0f:58:ee:f1:
03:f5:83:95:11:a8:c5:56:f9:46:26:ba:b1:6c:25:0d:ba:a1:
b1:89:4a:71:59:2b:a3:30:0a:d7:7b:7b:65:40:e6:b8:d4:9b:
c9:50:fb:f7:39:eb:dd:29:9c:92:b0:89:7e:0f:07:66:e5:fe:
be:4d:8e:be:9e:3e:ea:cd:89:86:93:88:e4:2d:52:cf:d6:9e:
ae:c5:9b:af:17:07:9b:9f:10:19:b3:f2:91:1c:04:db:9b:40:
83:78:67:7b:05:95:39:af:8d:3c:f9:b8:38:db:4c:8a:34:a8:
8b:7e:63:7d:f6:d9:af:a8:fd:98:f8:79:e6:e3:a5:72:91:96:
9d:b0:d5:eb:ee:28:16:be:d6:b0:e7:c4:1a:21:0f:b8:ff:89:
c0:ff:ed:6e:c3:39:00:89:1a:7c:5e:f8:cf:94:fd:05:aa:81:
ea:c7:1d:e8:01:88:d5:6e:f3:03:50:cc:8b:f3:dc:3d:7a:b1:
be:a5:e8:67:ef:6f:25:bf:26:f1:9f:35:4f:f8:60:b9:b7:78:
d0:8f:c1:95:e3:09:39:68:4d:bb:c5:1d:89:f3:56:d7:37:5e:
42:53:5f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:26:01 2026 by rpki-client