Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iMnkhaNFxHOOksUFEGN2D2q_2eo.roa
File: iMnkhaNFxHOOksUFEGN2D2q_2eo.roa (raw, json)
Hash identifier: eJ7Gr5BEz+uo2riy20SoMuGTjDBnJYFTxKW0vcX1QWo=
Subject key identifier: 88:C9:E4:85:A3:45:C4:73:8E:92:C5:05:10:63:76:0F:6A:BF:D9:EA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DBAB5C5577927865FBAFFBA92533F9B79
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iMnkhaNFxHOOksUFEGN2D2q_2eo.roa
Signing time: Thu 23 Apr 2026 14:19:27 +0000
ROA not before: Thu 23 Apr 2026 14:19:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202791
IP address blocks: 151.246.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:b5:c5:57:79:27:86:5f:ba:ff:ba:92:53:3f:9b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 23 14:19:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=88c9e485a345c4738e92c5051063760f6abfd9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d8:cf:4e:71:dd:2f:59:fc:6e:9d:74:a3:d8:
5e:73:42:af:b2:53:74:ff:bc:41:cd:47:0a:18:d3:
ca:6b:e7:d4:02:d4:dc:27:60:02:89:8f:91:a8:1b:
df:c0:3b:4a:f0:c3:e6:22:42:09:ad:38:db:4d:a9:
20:5a:58:be:43:94:81:f1:e6:3a:dc:0c:f9:bb:ad:
c2:86:26:ec:06:d6:13:a6:dc:a1:33:9a:af:13:1a:
c4:82:72:1f:45:23:d8:8b:ea:be:94:12:a7:0f:58:
89:14:d4:17:cd:99:6a:59:2e:3f:3d:f5:76:16:b2:
52:f8:dd:d2:d5:bd:57:db:61:b1:5b:97:fd:72:6a:
99:26:93:eb:63:45:d6:fc:42:25:44:c6:d2:d7:8b:
f7:ad:35:8c:88:07:6f:11:8f:35:e5:46:23:fd:9b:
91:ee:81:51:50:80:a1:c3:c8:fc:f7:26:a6:a8:7a:
02:86:a3:45:bb:97:34:54:fd:d5:49:63:c6:1f:93:
1c:60:f8:44:36:71:27:c4:cf:b1:b4:31:16:d5:a7:
4a:9a:b1:3b:1c:c2:c2:6d:48:f3:09:08:5c:d6:5d:
e8:37:dd:81:56:88:a9:25:6f:51:85:ab:a1:d8:d0:
88:0b:44:09:ce:fe:5a:9c:4e:04:f6:d1:c8:4d:7b:
17:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C9:E4:85:A3:45:C4:73:8E:92:C5:05:10:63:76:0F:6A:BF:D9:EA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/iMnkhaNFxHOOksUFEGN2D2q_2eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.155.0/24
Signature Algorithm: sha256WithRSAEncryption
54:75:ca:26:c9:b0:e6:3e:cc:f0:92:bd:f2:1b:73:7d:ef:c4:
77:46:57:11:66:a1:db:67:54:c9:c6:cc:a9:b8:9a:f1:ab:35:
a4:1d:00:15:41:0d:37:45:1e:ac:d5:da:a7:a2:51:cd:2c:8e:
04:e2:b9:d0:92:0c:d5:f3:b0:84:79:bd:5f:04:a5:8f:dd:da:
92:91:41:7e:21:bb:c1:8f:11:4f:d0:aa:53:fb:5c:c9:c5:eb:
2b:c7:55:41:5b:9f:69:01:6c:99:13:28:7b:29:15:43:15:4e:
b4:78:a9:41:48:e8:90:76:d5:f3:b1:06:eb:fa:d4:da:9d:6e:
35:02:6a:90:06:1c:03:c9:13:f5:9d:0d:e4:69:dc:64:51:9a:
9f:7f:91:fe:30:de:b4:0a:ef:61:7c:9c:b7:36:fc:38:26:a3:
fe:6e:2a:ce:d4:dc:b7:51:32:42:b6:36:e3:3a:7b:f6:af:68:
43:89:ce:3f:25:9f:c0:9a:de:1a:c8:1a:59:c9:1f:d6:6e:e5:
5e:a9:72:0c:46:92:9b:ce:7c:fa:e5:6d:f1:5e:97:9b:d7:65:
4b:4b:0d:43:f7:d2:92:e8:f1:a0:c3:22:40:a1:43:29:7f:25:
3e:30:d6:79:a3:69:6c:97:fe:57:3f:b1:1c:16:48:f6:d0:d8:
e9:7c:ae:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:35 2026 by rpki-client