Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sOqZXbq92xSyMk1oJyji9V-FWYM.roa
File: sOqZXbq92xSyMk1oJyji9V-FWYM.roa (raw, json)
Hash identifier: Ocgc7D6T/xEtycsVywoOyr4ze0VqgIua3Gu8H+b81Xs=
Subject key identifier: B0:EA:99:5D:BA:BD:DB:14:B2:32:4D:68:27:28:E2:F5:5F:85:59:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E73B9ACC0402BB5548C1FF6FF572405DA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sOqZXbq92xSyMk1oJyji9V-FWYM.roa
Signing time: Fri 29 May 2026 12:33:28 +0000
ROA not before: Fri 29 May 2026 12:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25369
IP address blocks: 151.244.79.0/24 maxlen: 24
151.245.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:b9:ac:c0:40:2b:b5:54:8c:1f:f6:ff:57:24:05:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 12:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0ea995dbabddb14b2324d682728e2f55f855983
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:aa:9f:f3:33:49:18:61:7a:10:aa:8f:1f:
75:c6:b4:e6:86:52:b1:a9:ab:33:5a:76:97:b1:ee:
da:1c:99:52:67:b2:36:aa:e6:58:2f:2d:97:ec:e4:
2b:6d:35:d9:bb:98:79:e4:90:f5:31:27:f6:22:d6:
75:25:79:86:74:21:84:84:13:91:f7:c6:08:ce:21:
05:44:d5:57:7c:a1:47:a4:2d:09:f9:27:d2:83:44:
86:de:1a:7e:07:80:12:9a:03:fc:28:42:85:39:5d:
4a:64:db:58:d0:c9:75:37:ef:ad:57:63:69:d4:a2:
06:2f:9a:27:89:7c:79:23:f7:ac:2f:1f:72:b1:35:
73:6d:fa:15:89:f6:1e:5a:d0:c6:3c:89:24:18:e0:
8a:12:04:36:f6:fb:f0:c4:af:c6:56:86:9e:51:7b:
ee:0e:6f:0c:34:79:d3:44:cc:b3:bf:8c:e5:38:71:
96:d2:b8:8e:ce:d2:b4:27:ca:61:bf:92:c4:24:00:
b0:e7:f8:e7:ba:c7:21:b6:8d:cf:77:b2:22:26:a7:
00:97:30:1c:a7:62:81:ba:6c:79:5d:bd:c6:2c:87:
64:86:dc:32:64:1f:63:73:63:fd:57:2a:8e:12:70:
c7:20:58:1c:2a:db:70:ed:d0:a3:32:a7:cf:67:a2:
8d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EA:99:5D:BA:BD:DB:14:B2:32:4D:68:27:28:E2:F5:5F:85:59:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sOqZXbq92xSyMk1oJyji9V-FWYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.79.0/24
151.245.77.0/24
Signature Algorithm: sha256WithRSAEncryption
81:98:67:62:b9:de:f8:f1:e6:ff:03:28:35:d7:41:0b:d8:96:
c2:cc:fe:ea:f8:9a:3c:e7:c7:d7:e8:40:d8:17:0b:79:a4:b8:
ff:d3:ff:61:7c:b7:b7:68:a9:e9:11:16:a4:2f:c8:36:d7:5d:
e3:5b:14:56:37:c6:5e:a2:44:71:c6:cf:04:6f:23:90:0a:e9:
5d:91:47:42:63:82:2c:61:5a:99:ec:e5:42:f5:29:5e:49:c0:
f8:3a:01:4e:ad:c2:c9:28:52:92:3e:5a:8d:e7:a0:65:6e:b7:
7a:e7:51:c5:36:a0:4e:28:be:c8:41:14:8d:97:bf:11:55:d0:
97:c2:57:5f:d9:34:6b:a4:a2:f7:ab:7e:93:2f:59:8e:c8:a1:
e7:81:d2:53:99:e7:b0:01:a0:0b:6f:1d:65:0d:0b:bd:2f:d1:
0c:a2:6b:43:89:a5:df:08:53:f6:99:73:d3:73:a2:4a:8a:74:
ee:8c:2c:a6:93:c4:ae:d8:85:d1:cf:99:77:23:73:49:9b:7e:
db:3e:55:14:36:67:92:b7:70:af:f4:9e:b3:7f:bc:9b:c9:e2:
fc:9c:f0:1c:10:9c:f2:3c:b3:80:5f:8e:56:6f:30:27:68:04:
c5:0f:8a:8d:23:07:45:53:2c:05:6d:4d:8e:ab:cf:73:3b:de:
63:d8:39:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:05 2026 by rpki-client