Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_HKhEkQ7t47tSFfgmZaav1TYsE.roa
File: m_HKhEkQ7t47tSFfgmZaav1TYsE.roa (raw, json)
Hash identifier: dnzqGJFjyytMf3ZrT0pOEswcaK/x+GiWq6npAuP9RZE=
Subject key identifier: 9B:F1:CA:84:49:10:EE:DE:3B:B5:21:5F:82:66:5A:6A:FD:53:62:C1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0CF237FB59238A98531A7EC3A21141DF9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_HKhEkQ7t47tSFfgmZaav1TYsE.roa
Signing time: Wed 23 Sep 2026 16:40:05 +0000
ROA not before: Wed 23 Sep 2026 16:40:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 151.242.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 17:30:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:23:7f:b5:92:38:a9:85:31:a7:ec:3a:21:14:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 23 16:40:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9bf1ca844910eede3bb5215f82665a6afd5362c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:c1:97:43:16:62:4d:48:36:db:27:b0:1e:
79:44:f6:83:fa:fb:2f:41:f6:bf:3c:ad:3b:8e:c3:
72:16:70:a4:dc:4a:e5:40:9a:5c:48:8e:87:79:87:
52:e7:ec:a3:9c:f8:9a:f1:17:e9:09:d2:f1:88:9c:
46:8b:89:ef:78:54:71:4e:15:40:e4:e4:f1:6c:ec:
d9:39:89:46:03:c1:28:7d:08:37:7e:88:aa:65:e9:
ac:ee:f8:ef:87:e8:67:8e:60:99:6f:52:af:f6:43:
99:3a:23:16:42:0a:8c:56:8b:ec:64:b8:3c:d9:a9:
30:b6:89:f2:5f:88:43:a4:be:81:65:62:e0:8b:51:
aa:c9:67:a8:f4:08:65:0b:f5:ad:ff:40:bd:ed:51:
46:ed:e2:06:e7:42:cb:63:59:1b:61:cc:cd:a0:66:
a3:a4:71:45:fc:6f:4c:53:b6:f6:c7:50:7f:e4:de:
f8:8b:cf:3a:16:84:e3:ff:3e:a9:7c:10:c5:12:b6:
ae:92:40:5e:03:5f:ba:42:58:d9:7c:47:7f:05:57:
ab:37:76:02:79:2f:1c:18:79:c6:98:e2:eb:fb:48:
3f:82:01:4d:6f:cd:de:25:86:ab:f0:e9:d1:13:26:
20:2a:58:25:dd:3e:a8:91:f9:90:df:28:ae:36:01:
6f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:F1:CA:84:49:10:EE:DE:3B:B5:21:5F:82:66:5A:6A:FD:53:62:C1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/m_HKhEkQ7t47tSFfgmZaav1TYsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.37.0/24
Signature Algorithm: sha256WithRSAEncryption
30:08:fe:88:a9:1c:2b:41:8c:02:20:f2:17:7a:bd:8e:da:a7:
da:4a:e6:67:65:3f:61:5c:83:f3:7d:34:a1:e7:ea:49:e7:20:
2d:70:87:7c:a3:4c:30:2c:57:f3:37:3f:1d:d5:1b:02:74:87:
4c:db:fa:0d:ca:84:e2:90:37:f8:fc:04:f6:4b:06:f7:11:c0:
9d:ac:22:39:be:0e:ab:70:58:59:6b:30:4e:32:fe:84:cf:80:
8a:a1:56:20:7e:4e:fe:2a:0e:b3:35:cf:00:a3:82:a8:a5:2b:
d8:86:3d:5e:f0:2a:5b:7d:3d:dc:36:ef:35:02:13:b4:7e:5e:
02:44:07:73:bd:18:57:ee:cf:f3:4a:a1:9f:d3:87:cf:2b:18:
ef:05:bf:d2:38:fe:31:8a:55:1c:16:e5:26:ec:8b:fa:83:c8:
14:af:bf:bb:f3:86:a5:ad:d2:c7:ab:91:9b:51:b3:02:4e:3f:
3b:30:50:db:23:5a:8d:8e:3f:8e:5d:3e:dd:83:cd:25:34:82:
66:13:16:77:1a:14:bd:54:17:c4:f3:2a:18:10:07:fd:f0:8c:
68:3f:e7:d6:db:dd:df:94:45:2a:3b:b3:64:7b:a6:37:5c:76:
8c:58:65:59:ad:af:ad:c0:10:82:4f:89:9d:3c:3f:ff:b8:90:
69:c9:5f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 05:01:34 2026 by rpki-client