Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nScxSuMAE2t4CjkRETLFwEoMf2c.roa
File: nScxSuMAE2t4CjkRETLFwEoMf2c.roa (raw, json)
Hash identifier: GNGfUGRILOBBjoZxNS8Gfva8CrJP3vkTprD/uR6F1VE=
Subject key identifier: 9D:27:31:4A:E3:00:13:6B:78:0A:39:11:11:32:C5:C0:4A:0C:7F:67
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DEC0DA71CD1C8B12DA7C4F7614139EE7A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nScxSuMAE2t4CjkRETLFwEoMf2c.roa
Signing time: Sun 03 May 2026 04:16:50 +0000
ROA not before: Sun 03 May 2026 04:16:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201386
IP address blocks: 151.247.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 11:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:0d:a7:1c:d1:c8:b1:2d:a7:c4:f7:61:41:39:ee:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 3 04:16:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d27314ae300136b780a39111132c5c04a0c7f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:85:0a:f7:e8:51:c4:f9:ca:58:6b:bf:a6:
ad:a1:dd:b4:5f:fe:60:50:21:2f:3d:4c:77:ce:50:
a0:d3:a6:0d:ad:5f:77:1d:60:7e:12:0c:e5:e9:6a:
4d:e7:74:5e:50:48:9f:ec:84:63:0c:6f:66:39:c5:
35:0a:66:11:59:df:57:b9:2d:21:d1:1c:48:34:a4:
0a:1a:24:e4:48:b6:cc:df:2a:1a:79:f5:25:3a:d3:
d4:09:2e:32:7c:64:cd:bd:92:04:7a:45:33:76:80:
74:db:52:79:fc:e9:9c:fb:61:19:3d:7b:2d:0f:e9:
a2:e5:de:c0:ec:ba:15:5d:e4:75:0d:93:cc:84:67:
79:71:11:33:62:51:44:56:59:d9:23:05:3a:e9:1e:
cf:c5:1f:1c:1e:e6:a2:fe:93:6b:a5:63:1f:66:a7:
ae:42:9b:c4:a6:fd:1f:c9:a7:46:32:d6:39:7c:ab:
fc:24:a0:0a:7e:f0:a2:6e:29:f0:3c:f5:2d:77:a5:
ca:8e:24:fd:d9:a5:45:24:9a:49:73:a0:d3:ba:8d:
75:f2:ee:7c:3a:f2:ab:92:63:8a:bd:df:b3:a3:3f:
5e:4a:18:ec:18:18:f7:15:80:ba:6c:d1:a2:e2:49:
a7:6c:3d:dc:bb:6e:09:1d:73:05:b7:4f:45:fb:e8:
7a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:27:31:4A:E3:00:13:6B:78:0A:39:11:11:32:C5:C0:4A:0C:7F:67
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nScxSuMAE2t4CjkRETLFwEoMf2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.142.0/24
Signature Algorithm: sha256WithRSAEncryption
67:88:18:71:1c:65:9f:95:14:ef:02:36:db:62:6b:85:ed:2b:
80:85:cd:51:1d:1c:fc:da:9d:65:16:4b:9f:85:1e:26:51:78:
5c:52:7e:5c:d0:90:8c:60:82:44:fa:ac:d9:7b:53:42:5c:f9:
66:cb:4a:36:e8:55:5e:8f:59:12:41:6b:a8:23:2b:8a:80:80:
1c:2f:a1:a2:02:07:32:ed:ad:da:f6:a6:b2:b7:b7:61:96:da:
5f:bc:55:09:1f:64:19:3f:83:56:26:60:7a:d5:67:70:af:27:
35:4c:d7:6f:23:d4:fc:14:77:0a:f9:46:77:c6:2c:3e:3a:10:
91:98:b3:df:bf:0d:e7:ab:34:16:81:8e:04:ea:65:f5:17:77:
5d:d0:c5:47:47:e1:8b:3e:7f:54:ba:05:79:7e:a5:1c:a8:b7:
c5:a7:d1:e2:55:f6:69:c4:27:e0:de:d8:71:6b:91:be:69:94:
03:12:42:ab:1c:be:1b:d8:09:5b:32:0f:1f:87:6f:a3:7d:04:
04:13:b7:1c:44:e7:79:f4:72:6c:74:b1:c4:6a:53:19:05:91:
54:b7:12:24:88:7b:89:c9:39:cb:b1:4d:a7:d1:73:d0:35:e2:
fd:06:89:fc:ca:6a:34:45:2a:17:03:9f:db:1f:3c:bb:2c:db:
fc:17:2d:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 21:21:03 2026 by rpki-client