Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/stJ5vRMwk02-beaJ22ToPebLOdY.roa
File: stJ5vRMwk02-beaJ22ToPebLOdY.roa (raw, json)
Hash identifier: nFlFfSf8tuUIKbgn9GvwbDhLA9dIm8J2e9I6sJwXTSU=
Subject key identifier: B2:D2:79:BD:13:30:93:4D:BE:6D:E6:89:DB:64:E8:3D:E6:CB:39:D6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ECA74CF93FBE1F987DACABF2035AADF97
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/stJ5vRMwk02-beaJ22ToPebLOdY.roa
Signing time: Mon 15 Jun 2026 08:45:13 +0000
ROA not before: Mon 15 Jun 2026 08:45:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212032
IP address blocks: 151.246.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 17:15:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ca:74:cf:93:fb:e1:f9:87:da:ca:bf:20:35:aa:df:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 15 08:45:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2d279bd1330934dbe6de689db64e83de6cb39d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:15:ac:49:65:57:98:39:2d:3d:7e:22:aa:
18:67:ff:27:cb:21:8f:9f:a2:6d:01:93:26:8a:ed:
3d:e1:66:b0:2c:a4:8e:74:84:ab:a0:1f:4f:2e:c5:
4b:1d:e1:06:40:9e:29:45:df:4f:f3:4b:91:b9:e7:
15:49:19:01:d5:e7:ff:6b:55:80:04:06:97:e8:14:
d2:87:30:ec:78:5f:fd:59:2b:d5:58:18:f7:46:76:
91:b8:9e:43:17:ff:fa:f4:74:d0:fd:e0:97:28:95:
48:cd:19:60:c1:74:ed:d5:dc:1c:d0:d1:5a:a2:88:
c3:3b:a8:1f:c6:15:d8:cc:3a:60:1f:bd:2f:e4:8f:
0b:e5:56:a1:fe:c0:8c:ac:17:ad:e9:b9:0f:55:1f:
a1:ba:18:39:d5:9c:36:34:40:43:54:8d:2b:50:7b:
b0:30:71:64:f2:66:0c:52:9a:f2:2c:30:1b:12:75:
80:48:73:b0:a0:52:c7:90:03:7b:95:2d:21:e4:be:
8c:7d:e9:e4:1e:48:ff:0b:f6:76:aa:66:f8:f2:d4:
0b:5b:f4:3a:96:ea:ea:4b:61:2a:28:d8:4a:1c:87:
bd:84:4c:a9:f0:7d:55:6b:3b:c5:d8:18:a8:4b:45:
2e:11:b8:41:dd:e3:9e:5e:fa:05:ee:e8:26:74:a4:
09:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D2:79:BD:13:30:93:4D:BE:6D:E6:89:DB:64:E8:3D:E6:CB:39:D6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/stJ5vRMwk02-beaJ22ToPebLOdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.180.0/24
Signature Algorithm: sha256WithRSAEncryption
01:a4:c8:87:6a:97:4f:93:54:0c:fb:16:2f:03:72:88:04:57:
21:bb:2f:6f:2a:b7:ea:fd:fa:8b:4a:7c:06:7a:5a:9b:d1:c7:
bb:7b:23:71:d4:04:c3:d5:e9:74:3f:2a:a0:52:91:c8:97:dc:
e3:ad:e0:5c:10:c5:40:06:78:5c:65:03:7a:40:13:15:05:f6:
a1:fb:b4:86:93:c1:9a:ec:e0:c2:26:f8:93:51:9f:c1:c2:50:
d5:e4:2c:3e:48:b0:6c:5f:66:23:06:03:bd:b6:96:2e:e6:17:
7b:14:e6:94:eb:a7:39:cc:85:21:a5:17:59:55:42:1d:ce:12:
04:96:d4:43:8e:ff:4a:bd:c4:24:f4:00:bc:c3:c5:37:d2:a7:
29:29:63:86:bf:8c:0f:be:73:f6:8f:bf:60:1c:47:ed:47:45:
a6:ae:15:e4:67:2c:84:7a:20:76:21:04:03:98:ce:f0:b9:d8:
2c:1d:db:92:a1:45:ed:8c:41:bb:83:02:60:4d:41:5b:be:bb:
b1:46:1e:21:8b:c9:2e:96:52:22:7c:df:74:e4:0f:54:24:a9:
22:2a:a3:c1:bc:d7:d0:55:06:12:b8:86:9a:a5:48:42:0e:ce:
5b:68:01:b9:30:8f:88:1e:fd:1f:dc:ae:cb:4d:b6:be:b8:a4:
9c:60:ea:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 03:18:28 2026 by rpki-client