Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hygRUrwHXjtZ0q746I6-5hIH4Ys.roa
File: hygRUrwHXjtZ0q746I6-5hIH4Ys.roa (raw, json)
Hash identifier: qpspgqcZ3HRWV8FawM97WD0VvX1iUgK62VfczkzYraQ=
Subject key identifier: 87:28:11:52:BC:07:5E:3B:59:D2:AE:F8:E8:8E:BE:E6:12:07:E1:8B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4FCB844543AFED5931DE5397C7A9A2C4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hygRUrwHXjtZ0q746I6-5hIH4Ys.roa
Signing time: Fri 22 May 2026 13:06:38 +0000
ROA not before: Fri 22 May 2026 13:06:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203094
IP address blocks: 151.247.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:cb:84:45:43:af:ed:59:31:de:53:97:c7:a9:a2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 13:06:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87281152bc075e3b59d2aef8e88ebee61207e18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:e8:bb:49:aa:83:11:8e:ff:d6:1a:ca:6a:
e4:86:b2:d6:fc:68:ed:17:a7:0a:79:32:9e:5d:41:
4c:c5:ec:7d:aa:77:cc:cd:b4:1f:16:a8:14:e6:36:
d1:02:f8:c0:4c:54:35:e3:55:5a:18:4f:55:6e:bc:
33:86:07:d7:f2:a1:97:da:90:dd:8b:40:eb:c2:c5:
ce:97:9c:ce:83:86:e1:1d:0a:a0:af:2b:9a:31:ba:
ce:93:bd:df:6a:4d:c5:d6:2d:d8:01:c4:7e:d7:2b:
ad:43:88:bd:c6:2e:23:24:de:fa:55:15:d9:4b:b4:
52:ae:31:5a:66:cb:2c:3d:82:20:71:cf:2f:34:b9:
f5:45:ed:3d:4e:23:cf:f4:a6:a5:84:ed:b5:f2:70:
f0:0f:9f:f5:6b:c0:31:82:85:e3:5e:ce:77:d2:68:
54:9f:7a:0e:44:b0:81:80:b7:d4:39:93:f2:6a:b9:
e7:aa:37:7b:f0:1a:b8:23:2e:8a:36:11:5f:b5:4b:
6b:41:3f:fe:43:65:0d:a7:9d:38:82:c3:ec:e8:40:
94:46:bc:88:0e:28:a4:51:10:d3:d5:1d:65:c8:4b:
8b:7d:e0:31:c1:2b:8f:60:de:16:6e:46:96:7f:81:
47:7d:1b:58:d4:ba:38:0c:9f:43:6f:61:b4:0c:17:
89:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:28:11:52:BC:07:5E:3B:59:D2:AE:F8:E8:8E:BE:E6:12:07:E1:8B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hygRUrwHXjtZ0q746I6-5hIH4Ys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.198.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:01:6c:dc:82:dd:49:e6:8e:57:3a:32:d3:b1:33:8a:30:30:
96:90:40:46:28:f0:0b:2b:66:42:63:53:69:fa:d3:e9:0b:79:
40:54:c7:89:60:fe:bf:ec:fb:7e:92:a2:6c:cb:8c:18:74:24:
fe:64:31:5f:60:89:4d:1e:72:98:57:5f:ce:5f:fd:85:3e:a2:
81:9b:2f:8c:33:ca:a3:43:ff:c0:f3:15:70:fb:00:7c:59:e1:
4c:24:7b:b3:38:d1:87:bc:9d:06:d0:72:1d:35:33:4b:38:07:
5d:c9:6d:3d:98:27:bf:93:e7:63:b8:21:64:6e:9d:70:b4:53:
c6:76:84:eb:7a:ca:84:9d:87:3f:6f:41:45:3c:23:ea:19:0b:
6b:2c:07:68:97:9d:24:22:0f:84:e0:49:1c:44:24:cc:a6:31:
8e:55:83:2d:69:54:e4:90:a7:e8:b2:0b:65:14:23:ac:07:00:
b7:38:ea:d6:98:72:93:f5:f4:35:98:c2:8a:9c:bd:48:a8:ff:
87:62:fb:6a:a4:df:62:a3:77:26:98:26:08:2f:de:5d:80:d4:
7b:c2:27:79:5f:e2:2d:97:26:23:dc:33:d3:79:bc:a5:7e:25:
ea:f3:11:83:56:eb:4d:1f:30:04:b1:62:e9:d5:b1:d9:98:2d:
d3:ea:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 09:21:23 2026 by rpki-client