Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hot8BvXPNkDAMhktz6jRC30CTCU.roa
File: hot8BvXPNkDAMhktz6jRC30CTCU.roa (raw, json)
Hash identifier: g9GAIIsBYBKOOitYabiBHJQa+b3JFba85Xy5jrM0t2s=
Subject key identifier: 86:8B:7C:06:F5:CF:36:40:C0:32:19:2D:CF:A8:D1:0B:7D:02:4C:25
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EFFEE26006CB38E95C38B3422E262598F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hot8BvXPNkDAMhktz6jRC30CTCU.roa
Signing time: Thu 25 Jun 2026 17:57:37 +0000
ROA not before: Thu 25 Jun 2026 17:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141494
IP address blocks: 151.244.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 11:55:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ff:ee:26:00:6c:b3:8e:95:c3:8b:34:22:e2:62:59:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 25 17:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=868b7c06f5cf3640c032192dcfa8d10b7d024c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:65:80:9f:be:ca:b0:69:3e:f0:8c:82:75:
b8:da:1d:12:cc:e2:a2:6b:a2:da:5c:46:b6:a9:18:
28:02:cb:a1:f4:ac:ad:3f:ba:71:fd:8b:65:f0:36:
6f:12:b7:9e:34:40:f7:9f:13:4b:34:c2:90:23:08:
3f:5b:ee:7a:83:91:c4:f6:1e:01:77:17:86:53:0f:
e5:c1:bb:af:a9:5b:d4:be:8e:82:07:6c:64:41:73:
ad:4e:81:12:38:f6:08:1a:ab:9f:eb:b5:f6:aa:ac:
cb:e1:24:08:8b:8a:c3:ea:d6:c3:f1:28:88:39:31:
b1:c4:bd:33:8d:b8:4b:88:6b:65:b4:7d:fd:43:9f:
8c:99:02:ad:0b:90:b5:52:3e:c5:b4:1c:ca:d4:b6:
fd:6d:39:a7:bd:6d:85:26:90:e4:fc:c3:e4:dc:b4:
fc:e2:b9:4d:a4:4c:59:94:8f:3b:b0:cc:29:a1:56:
17:44:53:8e:a5:55:26:66:de:b6:90:21:9c:2e:06:
e4:2b:f1:cb:3b:71:fe:dc:70:f9:8f:14:10:20:da:
19:c7:f1:31:d9:b0:3b:29:8e:7c:67:5f:20:09:e9:
d1:f8:62:a9:5e:67:30:69:5b:3b:0a:48:ee:02:96:
09:96:55:29:3b:9c:25:1a:f4:50:63:8e:98:6e:b1:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:8B:7C:06:F5:CF:36:40:C0:32:19:2D:CF:A8:D1:0B:7D:02:4C:25
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hot8BvXPNkDAMhktz6jRC30CTCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.166.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c8:18:d3:88:da:9d:a1:64:03:aa:9a:97:29:2f:c9:f0:8b:
fd:48:e5:a4:1e:ea:62:ec:8a:87:56:d2:61:8b:09:51:b4:a0:
db:7a:34:53:89:4c:0e:0f:92:9d:20:8e:ed:49:c2:17:04:dd:
63:a0:71:8d:27:93:85:b4:42:ec:c8:58:d6:0a:b1:16:21:f0:
cd:8c:dd:e2:cb:aa:43:32:a6:32:29:0e:b8:0c:f2:cd:29:b5:
4e:a9:08:83:f6:c9:75:2b:a3:8f:c7:03:85:36:9e:96:e1:32:
5a:c1:8a:7d:d0:23:40:54:da:84:5f:fc:8b:f8:fd:e9:25:20:
36:45:b7:50:38:1c:80:f0:2e:8a:05:7d:53:d2:e4:56:f0:bc:
62:61:68:7a:0f:9a:e8:ac:35:35:d7:55:2c:8d:21:8c:5c:31:
61:25:cd:89:78:d6:f1:40:49:8f:cb:31:4d:96:80:0c:db:73:
e2:bc:9e:a3:0c:3a:4a:e1:2e:4a:e5:e6:31:34:59:c2:3a:76:
6f:c0:af:9d:4c:47:02:67:32:1b:bf:3b:b8:e8:b3:78:98:16:
06:61:06:bf:62:f1:9d:4b:77:a4:4e:2d:83:5e:2b:04:b8:bc:
fc:7d:31:b7:c0:36:4a:d8:91:a3:c7:71:36:09:eb:0f:a1:31:
a4:e6:d2:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7/7iYAbLOOlcOLNCLiYlmPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjI1MTc1NzM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjhiN2MwNmY1Y2YzNjQwYzAzMjE5MmRjZmE4ZDEwYjdkMDI0YzI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/FlgJ++yrBpPvCMgnW42h0SzOKi
a6LaXEa2qRgoAsuh9KytP7px/Ytl8DZvEreeNED3nxNLNMKQIwg/W+56g5HE9h4B
dxeGUw/lwbuvqVvUvo6CB2xkQXOtToESOPYIGquf67X2qqzL4SQIi4rD6tbD8SiI
OTGxxL0zjbhLiGtltH39Q5+MmQKtC5C1Uj7FtBzK1Lb9bTmnvW2FJpDk/MPk3LT8
4rlNpExZlI87sMwpoVYXRFOOpVUmZt62kCGcLgbkK/HLO3H+3HD5jxQQINoZx/Ex
2bA7KY58Z18gCenR+GKpXmcwaVs7CkjuApYJllUpO5wlGvRQY46YbrGlEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIaLfAb1zzZAwDIZLc+o0Qt9AkwlMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaG90OEJ2WFBOa0RBTWhrdHo2alJDMzBDVENVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/SmMA0G
CSqGSIb3DQEBCwUAA4IBAQCOyBjTiNqdoWQDqpqXKS/J8Iv9SOWkHupi7IqHVtJh
iwlRtKDbejRTiUwOD5KdII7tScIXBN1joHGNJ5OFtELsyFjWCrEWIfDNjN3iy6pD
MqYyKQ64DPLNKbVOqQiD9sl1K6OPxwOFNp6W4TJawYp90CNAVNqEX/yL+P3pJSA2
RbdQOByA8C6KBX1T0uRW8LxiYWh6D5rorDU111UsjSGMXDFhJc2JeNbxQEmPyzFN
loAM23PivJ6jDDpK4S5K5eYxNFnCOnZvwK+dTEcCZzIbvzu46LN4mBYGYQa/YvGd
S3ekTi2DXisEuLz8fTG3wDZK2JGjx3E2CesPoTGk5tJn
-----END CERTIFICATE-----
Generated at Tue Jul 21 18:00:34 2026 by rpki-client