Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/he7XG3QECZoPzqIQDkTNq0Awq54.roa
File: he7XG3QECZoPzqIQDkTNq0Awq54.roa (raw, json)
Hash identifier: fKGCGFfK/DRY882P+c+IICqK/oxXVgKyQHsX9UK7LUw=
Subject key identifier: 85:EE:D7:1B:74:04:09:9A:0F:CE:A2:10:0E:44:CD:AB:40:30:AB:9E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB95C8B84E26988025E69E8A94E8C623
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/he7XG3QECZoPzqIQDkTNq0Awq54.roa
Signing time: Wed 11 Mar 2026 06:29:12 +0000
ROA not before: Wed 11 Mar 2026 06:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3949
IP address blocks: 151.242.180.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:95:c8:b8:4e:26:98:80:25:e6:9e:8a:94:e8:c6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85eed71b7404099a0fcea2100e44cdab4030ab9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cf:f0:66:0c:8c:52:c4:e0:34:cc:e5:d8:9b:
67:62:5a:78:c9:9b:3f:99:82:66:5a:f9:31:50:07:
3f:e1:d2:c4:61:25:1b:a4:23:57:33:ef:fe:ee:fd:
6a:73:56:b7:d6:e8:e1:8c:23:38:58:fc:ee:02:6d:
c1:b7:62:01:ec:b4:17:41:d8:13:03:90:99:2c:61:
c5:55:d2:72:a0:ce:bf:2c:8d:63:ee:b6:b9:2e:5c:
f8:c4:4e:90:47:73:f5:46:83:18:76:7d:04:71:c7:
a7:0c:50:f1:93:ce:bf:7c:59:59:8e:af:0b:f1:3d:
cd:7a:b1:03:40:d2:0d:a1:9e:93:f0:06:27:41:30:
0c:55:a5:e6:aa:13:9a:69:c5:79:81:22:57:1d:46:
65:5d:17:04:f7:e7:fc:55:3e:21:1e:b3:04:3d:b8:
b5:8f:af:3a:79:d3:e1:31:ae:4b:99:1d:f9:80:e9:
af:c7:eb:38:bc:2c:54:19:0e:35:da:45:71:50:b5:
12:a7:a9:85:38:2b:e3:af:df:bb:ca:e1:a2:a0:56:
5a:45:db:3d:9b:be:c5:8a:d0:83:60:f3:23:74:19:
9e:2a:e7:61:28:ce:9d:56:99:24:4b:08:f2:dd:85:
a7:bb:fb:fa:71:0f:63:e9:61:1f:e9:28:ec:eb:cc:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EE:D7:1B:74:04:09:9A:0F:CE:A2:10:0E:44:CD:AB:40:30:AB:9E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/he7XG3QECZoPzqIQDkTNq0Awq54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.180.0/22
Signature Algorithm: sha256WithRSAEncryption
78:f4:8d:2f:dd:ab:db:6d:65:9b:55:51:69:31:8b:68:82:35:
e2:95:25:50:0c:4d:60:76:b8:58:1a:d2:0e:31:aa:23:ac:81:
33:09:6c:19:57:96:e3:3c:3d:8b:5e:42:67:e0:37:f0:da:b7:
c8:35:4c:83:bb:b7:c9:a3:c0:f2:bf:80:58:8c:ad:3c:1c:48:
c0:84:e0:2c:59:4f:4c:35:38:cc:4f:a0:c5:d5:fa:63:29:55:
97:10:27:b0:af:03:0f:09:0f:73:6b:15:bc:c5:eb:ff:57:c1:
17:e3:73:04:b5:22:ef:89:81:bd:af:e3:0d:31:d9:78:c6:3f:
a3:81:e2:63:b0:58:25:50:13:aa:33:aa:16:2f:70:9b:48:fb:
a2:0a:76:36:1c:16:db:88:6e:84:71:b7:19:99:64:9f:c7:76:
a9:c2:5e:7a:93:5b:4f:7e:cb:bc:43:a9:08:4a:97:f3:fe:7d:
d4:48:b1:39:e4:0b:33:dd:f4:c4:70:a4:49:45:5c:15:c9:1e:
a0:61:24:77:20:f6:dc:9d:35:f0:05:2d:cc:25:51:fa:84:6d:
87:18:c6:56:0a:ad:51:66:f0:ff:4f:b5:dc:23:2f:7c:2a:ea:
89:be:8f:3a:01:6f:14:fc:3b:dd:80:b7:e0:21:dc:7d:01:4f:
1c:cf:f5:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 19:12:26 2026 by rpki-client