Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qZwHWFv3ciFttT7f5iH1TAoNnVc.roa
File: qZwHWFv3ciFttT7f5iH1TAoNnVc.roa (raw, json)
Hash identifier: c7cn8hjWCbRPoWaGRCTplevmt5wa2iq2hxj8gNDfC/g=
Subject key identifier: A9:9C:07:58:5B:F7:72:21:6D:B5:3E:DF:E6:21:F5:4C:0A:0D:9D:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DDEA5561F6DD5ABB7F64913D408F31A00
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qZwHWFv3ciFttT7f5iH1TAoNnVc.roa
Signing time: Thu 30 Apr 2026 13:47:50 +0000
ROA not before: Thu 30 Apr 2026 13:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151352
IP address blocks: 151.247.112.0/24 maxlen: 24
151.247.113.0/24 maxlen: 24
151.247.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 May 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:a5:56:1f:6d:d5:ab:b7:f6:49:13:d4:08:f3:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 30 13:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99c07585bf772216db53edfe621f54c0a0d9d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6f:bd:a7:a3:16:9d:27:e8:44:bc:3e:80:9c:
52:36:0e:5b:8d:7f:55:d6:fc:e9:9c:99:12:a4:2d:
c0:7c:a8:19:f4:1d:c7:fc:41:c0:b7:e8:b3:84:28:
d6:96:6d:7a:71:1e:55:06:4a:60:20:51:d3:2d:45:
93:c8:57:e2:14:5a:d5:cb:b8:a8:e9:8f:51:53:37:
bc:02:e2:2c:4e:76:71:2f:bd:f1:f7:b9:72:a0:90:
4a:4f:e7:ae:2e:6d:29:7e:96:7a:4a:da:e4:ff:19:
6a:9f:1e:86:bf:2f:9c:f0:5d:5e:c3:8f:66:d2:db:
fd:78:5b:cf:0d:1e:76:26:48:83:b0:4f:1f:12:71:
59:e7:8a:9f:36:7f:32:dd:00:5a:e7:3d:35:d8:24:
47:e1:05:4a:ec:16:7c:94:7e:90:20:ee:89:f4:cd:
ee:8a:56:19:15:f6:67:72:44:35:b2:e7:30:b6:5a:
fa:14:67:35:62:c3:7a:72:5b:25:02:65:81:bd:0e:
31:8d:a1:38:4f:fd:10:fb:18:b9:fe:a4:d6:a7:8b:
4a:47:28:88:ef:90:6e:89:09:81:2a:8f:4c:89:64:
b3:d3:46:03:79:0b:67:96:83:2b:4f:de:13:87:9c:
e6:53:a5:eb:bd:12:4f:9b:4f:ce:0f:43:3d:06:6c:
84:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:07:58:5B:F7:72:21:6D:B5:3E:DF:E6:21:F5:4C:0A:0D:9D:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/qZwHWFv3ciFttT7f5iH1TAoNnVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.112.0-151.247.114.255
Signature Algorithm: sha256WithRSAEncryption
38:5b:4a:5c:78:7d:00:54:84:10:cb:f7:ec:d4:c4:29:13:0a:
0c:27:f0:3a:be:1a:2b:fd:5d:04:80:d7:b5:7f:d0:ad:62:bc:
3d:1a:5f:9c:46:5d:75:31:52:0c:1b:ae:58:07:93:ed:6a:7c:
ff:3b:57:42:e8:01:ba:72:39:a1:a1:a5:43:47:be:28:08:48:
71:c7:5e:f3:3b:aa:73:cd:1a:d0:b5:8e:7c:43:15:5f:77:7d:
fb:65:6c:10:38:33:fb:ac:12:b0:91:b4:fc:98:99:a0:9b:e5:
7e:e0:37:d8:74:ef:00:4c:8f:63:f1:46:9e:78:1c:b0:33:89:
35:ae:a9:ed:ef:af:83:63:ce:9d:b6:1c:1a:3a:12:c0:16:03:
2f:70:de:3b:23:6f:b6:f2:92:48:4d:85:f4:6e:fa:14:60:0a:
8a:f5:a8:6c:eb:db:f3:91:30:84:ef:9d:d6:c5:71:a2:6b:84:
cb:89:6f:cf:92:fa:b4:a8:9e:90:02:6a:03:9a:64:72:6c:88:
88:81:1d:98:b6:0b:82:b7:88:61:48:64:b8:fa:39:2b:96:79:
a6:8d:6f:fa:d9:1b:45:9a:8c:d2:2d:23:68:b8:28:59:3e:39:
6f:02:73:c7:70:35:4e:2b:9d:18:ec:3b:ca:76:01:2d:6d:5c:
d5:89:cf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 12:31:34 2026 by rpki-client