Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mfmMg-yF85O2XD0hairp89nvaDs.roa
File: mfmMg-yF85O2XD0hairp89nvaDs.roa (raw, json)
Hash identifier: 5xafsMAyu/ilsox1Z8HX7bPdPw7+N3j77MXwJpjQ4H4=
Subject key identifier: 99:F9:8C:83:EC:85:F3:93:B6:5C:3D:21:6A:2A:E9:F3:D9:EF:68:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F31965ACF35C2B1C5B7BFE9443CF1B41C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mfmMg-yF85O2XD0hairp89nvaDs.roa
Signing time: Sun 05 Jul 2026 09:22:45 +0000
ROA not before: Sun 05 Jul 2026 09:22:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138288
IP address blocks: 151.245.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 Jul 2026 07:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:96:5a:cf:35:c2:b1:c5:b7:bf:e9:44:3c:f1:b4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 5 09:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=99f98c83ec85f393b65c3d216a2ae9f3d9ef683b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:10:70:a1:c8:db:4c:04:c3:6a:4e:6f:ed:
1c:a9:12:ec:8e:58:61:4a:45:a1:94:b4:43:9f:4c:
99:cd:08:56:da:7a:13:79:94:63:6c:c1:e4:e5:84:
2d:94:70:97:a8:96:ac:9e:a4:d6:fc:b6:c8:d5:7c:
2f:c4:8a:72:fa:93:b7:21:4a:6c:7b:5a:80:a7:a1:
4a:cc:59:3e:a6:46:b1:93:6e:4b:be:b8:95:71:3e:
53:6b:f9:bf:74:1a:b2:6d:ef:22:d1:69:4f:27:f6:
c4:48:e6:e4:f0:64:18:4b:d9:80:14:34:3d:eb:95:
c1:e4:93:0b:8f:3a:8c:fc:1c:3c:0a:20:8f:53:ef:
c8:c7:10:a3:26:c8:39:23:a2:e2:8f:6b:11:12:b7:
11:86:4c:29:fc:d6:59:4c:33:e2:c8:5c:ed:a6:7c:
56:78:e5:56:76:04:1c:58:65:2a:d8:af:dd:41:0e:
14:91:51:24:ec:53:98:4a:3c:ab:a8:18:f6:79:c7:
b3:3f:3e:22:2d:ff:dd:62:c0:e8:9a:33:9b:1e:f0:
de:1c:89:75:c2:c0:fa:c7:d7:8b:4c:b4:bb:89:27:
57:3f:36:1c:0c:49:5c:a4:a7:95:39:c5:98:d4:bd:
4f:75:91:d9:49:3f:6a:76:5e:33:4f:f5:d2:f9:96:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F9:8C:83:EC:85:F3:93:B6:5C:3D:21:6A:2A:E9:F3:D9:EF:68:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mfmMg-yF85O2XD0hairp89nvaDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.161.0/24
Signature Algorithm: sha256WithRSAEncryption
59:56:a1:4c:cf:09:b6:38:8b:8a:05:ce:80:f0:80:c1:fd:ec:
15:7c:77:cf:91:95:70:88:ba:77:f7:14:22:f6:24:3f:92:92:
7f:07:d8:bf:4b:d4:84:f3:22:5c:f8:48:c4:0a:4d:15:7c:d1:
37:40:7a:89:08:33:e9:ae:20:40:c7:0c:dc:5e:db:87:3e:b9:
3c:c3:40:2f:b9:e5:5c:a4:49:b2:5a:02:0c:ea:72:17:57:1a:
7c:88:25:84:de:10:08:c9:cd:58:77:f1:1f:c3:25:63:80:e8:
50:5e:18:de:b6:29:53:95:ac:0a:d9:50:50:84:a8:9c:b6:ff:
49:66:cb:f4:c4:d2:17:2d:fa:43:1d:1c:2c:86:77:89:c2:d2:
d2:42:6b:31:cf:66:7a:d3:8b:bf:a8:b2:3a:73:44:67:a5:f3:
2d:e0:ff:e7:e6:63:64:61:8f:13:c4:b2:be:61:fa:72:a7:87:
88:78:65:bb:2c:a0:9d:03:36:60:7b:84:18:ba:15:55:6d:63:
1f:ea:80:95:81:69:44:a5:3a:45:29:ac:d9:62:a6:27:f0:19:
15:6c:b8:3f:7a:a0:d3:6b:af:58:a8:5e:d3:a4:5e:04:13:ab:
c8:da:ed:c6:7f:1a:1f:6e:46:06:d0:40:dc:f2:dd:5d:4c:75:
9f:15:4d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 5 13:38:34 2026 by rpki-client