Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvbBl9-7MUJjCzzRkXvDZbYYbh0.roa
File: jvbBl9-7MUJjCzzRkXvDZbYYbh0.roa (raw, json)
Hash identifier: 3Cwhrn50TEEVLNO7Yff0HRCe1BJjhuZYMNpiAE2+D0I=
Subject key identifier: 8E:F6:C1:97:DF:BB:31:42:63:0B:3C:D1:91:7B:C3:65:B6:18:6E:1D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A034992D4BCEDAEC5DB94BE893D799B429
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvbBl9-7MUJjCzzRkXvDZbYYbh0.roa
Signing time: Mon 24 Aug 2026 16:27:28 +0000
ROA not before: Mon 24 Aug 2026 16:27:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201861
IP address blocks: 151.247.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:34:99:2d:4b:ce:da:ec:5d:b9:4b:e8:93:d7:99:b4:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 24 16:27:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8ef6c197dfbb3142630b3cd1917bc365b6186e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9e:d0:17:c0:f7:1b:d7:c1:dc:9c:99:78:5f:
e8:7c:87:d4:ab:a1:f1:d6:4a:51:05:0e:28:a9:66:
c8:8a:fc:e6:87:a4:61:8a:13:59:f7:da:8f:19:d0:
99:81:a2:88:2d:6e:57:bf:7b:a4:6b:38:bc:1a:1d:
cb:62:33:c0:f3:b6:7a:2d:ba:32:c9:47:29:b2:35:
c8:3b:40:7d:87:18:5d:e8:94:fe:e4:b8:91:70:64:
39:19:2e:80:ab:92:d7:6e:75:2c:b7:86:48:62:57:
c9:9a:ee:bd:f5:e2:b8:5f:10:8e:36:10:47:81:33:
64:79:44:c6:73:23:b9:24:75:f0:04:24:5d:cd:b5:
d0:ed:e0:96:91:7e:1a:d1:6b:54:a6:d2:4e:8d:2a:
b8:8c:d8:e5:0d:94:15:de:39:32:5f:80:15:6e:3b:
86:c6:6a:14:06:73:9f:ee:e3:40:fe:36:fb:6f:53:
a3:79:2e:aa:0c:54:e7:81:f3:db:3a:36:00:55:dd:
7a:af:5d:41:39:3b:b2:ab:bb:95:b7:67:1c:f5:c4:
08:d7:8d:78:05:20:0c:b1:ad:41:52:ae:00:ec:d1:
cb:e0:db:c1:ff:97:0a:ac:db:79:5c:9a:8a:d9:5c:
73:2f:65:ab:da:20:0f:0e:35:da:ce:47:6f:7d:08:
fd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F6:C1:97:DF:BB:31:42:63:0B:3C:D1:91:7B:C3:65:B6:18:6E:1D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jvbBl9-7MUJjCzzRkXvDZbYYbh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.169.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ed:f1:34:b0:cf:f8:bb:f4:69:42:1d:23:97:be:16:7a:e0:
e6:2a:f7:18:59:e2:b3:9f:77:a5:be:81:dc:57:ef:98:45:7a:
9c:f0:f4:7b:05:c2:86:d6:74:5d:3d:f4:b6:32:bc:e2:1d:8e:
d7:68:27:39:bb:fd:e5:14:6d:e1:d1:27:72:78:89:df:c6:98:
dd:29:1d:86:1d:11:cc:05:89:15:d6:c2:9f:92:01:17:d8:4a:
0f:98:73:46:83:13:b9:13:83:2b:a1:f5:06:d2:e4:de:b4:fe:
d9:17:19:5f:a4:2c:1d:76:65:24:5f:64:ee:e7:eb:0b:4a:29:
a2:85:71:2d:18:d6:5c:2f:68:bb:02:ac:74:22:69:1d:0e:f7:
6d:7d:d2:72:fc:c9:bb:eb:7f:25:eb:75:74:db:bc:b1:8c:8d:
2c:7e:48:e9:ce:a9:3f:49:d0:c1:4a:77:2b:0d:5d:4c:76:a0:
8c:93:ef:54:c6:bb:de:50:43:77:d7:04:b2:48:b1:29:bb:b8:
b3:be:30:54:c2:d9:a2:13:f9:ab:6d:7e:a6:44:25:2f:df:fc:
ef:dd:07:b1:7f:c7:40:b0:d4:6c:6b:4b:de:71:32:a1:b6:cf:
bb:a0:82:30:0c:34:32:cd:89:39:ec:89:eb:8d:55:f0:1a:4a:
25:73:a3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:10 2026 by rpki-client