Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLf5Rc_yAjx_D5NIsI7K7fvRXTw.roa
File: oLf5Rc_yAjx_D5NIsI7K7fvRXTw.roa (raw, json)
Hash identifier: oh10GFG+uLTe+0pVvvnX7RwiiSLT8tvew1CgZ9FUxyA=
Subject key identifier: A0:B7:F9:45:CF:F2:02:3C:7F:0F:93:48:B0:8E:CA:ED:FB:D1:5D:3C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E699BA4AA5196B55DCD98FEC449DFE0AE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLf5Rc_yAjx_D5NIsI7K7fvRXTw.roa
Signing time: Wed 27 May 2026 13:24:28 +0000
ROA not before: Wed 27 May 2026 13:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 835
IP address blocks: 151.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 29 May 2026 13:25:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:69:9b:a4:aa:51:96:b5:5d:cd:98:fe:c4:49:df:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 27 13:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0b7f945cff2023c7f0f9348b08ecaedfbd15d3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:51:2b:59:13:22:5f:54:80:21:ab:0e:4d:e2:
5b:04:cb:e6:57:23:8d:89:62:fc:cd:55:5f:2f:52:
9d:32:c8:fd:94:78:1e:ba:6c:f9:90:7a:bc:e4:6f:
16:fa:7e:8a:49:80:07:61:cd:b2:db:81:fa:b1:67:
f6:1d:42:3c:11:9e:09:85:4b:cb:bd:f9:77:bf:95:
2c:9e:e1:29:a4:dd:3b:9d:7a:7d:c7:95:b7:7c:4c:
b6:4b:fe:14:bc:49:12:2a:7f:4f:c7:60:c1:33:ef:
0a:6e:2b:01:4c:54:6e:4c:be:b3:fc:0f:b1:7b:70:
a8:ad:9e:87:ac:6a:e5:98:de:c6:5a:cc:e3:1d:fc:
eb:2a:b2:23:ea:5f:3b:42:f6:10:cf:a6:0e:cc:74:
b4:8b:5d:32:66:7f:64:20:75:2a:84:37:d0:b2:83:
d2:10:32:00:5e:cd:ee:c4:92:4c:e5:86:f7:36:2c:
60:36:b5:ae:62:d5:3b:40:b8:13:4b:24:c0:88:2b:
39:26:b4:46:57:49:a3:78:2b:c3:71:19:20:53:2e:
4c:42:b2:50:42:6e:9f:b0:90:74:49:62:e3:ce:f9:
43:b7:7f:61:7f:d8:6a:1a:a5:10:37:18:76:82:74:
88:db:ad:e7:b4:d1:2a:9a:31:9d:4d:c5:f6:2b:e5:
53:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B7:F9:45:CF:F2:02:3C:7F:0F:93:48:B0:8E:CA:ED:FB:D1:5D:3C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/oLf5Rc_yAjx_D5NIsI7K7fvRXTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:9d:d1:55:9c:b8:95:f4:ca:20:01:99:9b:5c:cd:ba:b8:a5:
3e:bf:ff:76:5b:57:c2:cd:30:da:8d:1c:a0:a1:de:f2:da:12:
fd:be:4a:79:48:5b:69:de:19:33:93:a4:c0:ec:4a:35:61:e6:
ee:9a:ac:59:27:b5:99:22:ec:fd:0f:2a:50:47:2c:5f:87:e3:
77:ba:93:c5:c6:48:13:25:6c:a6:68:78:ee:88:91:e5:f7:66:
f2:fd:bb:da:7b:e0:06:c1:73:01:91:7e:6e:8c:b9:a5:8e:bc:
4d:cc:8f:04:82:74:29:ec:84:7e:c4:b7:b1:3a:21:9b:de:dd:
41:69:0d:55:36:e3:00:98:e6:b3:88:3c:4e:a3:44:bb:90:76:
4e:02:0a:0e:ef:df:e1:5b:10:07:2e:1d:90:ab:d2:34:f0:ed:
69:ba:f1:7c:07:e7:72:cf:54:1d:45:54:78:34:0b:14:02:ee:
24:40:4e:dd:23:e7:a0:ab:04:02:0a:ee:02:23:f9:e5:e6:55:
70:24:29:6b:66:e7:fa:82:d4:9a:82:a1:e6:c5:a6:46:41:76:
86:ca:39:23:23:8d:72:1f:79:29:29:76:c9:56:5f:73:93:46:
28:a1:37:2e:81:66:f3:4b:8d:59:36:f8:1e:93:34:36:10:d7:
f1:5a:cb:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5pm6SqUZa1Xc2Y/sRJ3+CuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTI3MTMyNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMGI3Zjk0NWNmZjIwMjNjN2YwZjkzNDhiMDhlY2FlZGZiZDE1ZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzFErWRMiX1SAIasOTeJbBMvmVyON
iWL8zVVfL1KdMsj9lHgeumz5kHq85G8W+n6KSYAHYc2y24H6sWf2HUI8EZ4JhUvL
vfl3v5UsnuEppN07nXp9x5W3fEy2S/4UvEkSKn9Px2DBM+8KbisBTFRuTL6z/A+x
e3CorZ6HrGrlmN7GWszjHfzrKrIj6l87QvYQz6YOzHS0i10yZn9kIHUqhDfQsoPS
EDIAXs3uxJJM5Yb3NixgNrWuYtU7QLgTSyTAiCs5JrRGV0mjeCvDcRkgUy5MQrJQ
Qm6fsJB0SWLjzvlDt39hf9hqGqUQNxh2gnSI263ntNEqmjGdTcX2K+VTzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKC3+UXP8gI8fw+TSLCOyu370V08MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvb0xmNVJjX3lBanhfRDVOSXNJN0s3ZnZSWFR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/ezMA0G
CSqGSIb3DQEBCwUAA4IBAQA7ndFVnLiV9MogAZmbXM26uKU+v/92W1fCzTDajRyg
od7y2hL9vkp5SFtp3hkzk6TA7Eo1YebumqxZJ7WZIuz9DypQRyxfh+N3upPFxkgT
JWymaHjuiJHl92by/bvae+AGwXMBkX5ujLmljrxNzI8EgnQp7IR+xLexOiGb3t1B
aQ1VNuMAmOaziDxOo0S7kHZOAgoO79/hWxAHLh2Qq9I08O1puvF8B+dyz1QdRVR4
NAsUAu4kQE7dI+egqwQCCu4CI/nl5lVwJClrZuf6gtSagqHmxaZGQXaGyjkjI41y
H3kpKXbJVl9zk0YooTcugWbzS41ZNvgekzQ2ENfxWstu
-----END CERTIFICATE-----
Generated at Thu May 28 23:31:47 2026 by rpki-client