Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uJsgeqSjGfEjy5gw_po1zydkjFU.roa
File: uJsgeqSjGfEjy5gw_po1zydkjFU.roa (raw, json)
Hash identifier: 77S4pqMHGXIkVhwUX2W1hHBeTueaJ/qi3e+giP/dPmg=
Subject key identifier: B8:9B:20:7A:A4:A3:19:F1:23:CB:98:30:FE:9A:35:CF:27:64:8C:55
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F67112E9F2FC9B9D6BB3D9C55F192261F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uJsgeqSjGfEjy5gw_po1zydkjFU.roa
Signing time: Wed 15 Jul 2026 18:36:47 +0000
ROA not before: Wed 15 Jul 2026 18:36:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 151.242.37.0/24 maxlen: 24
151.242.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:67:11:2e:9f:2f:c9:b9:d6:bb:3d:9c:55:f1:92:26:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 15 18:36:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b89b207aa4a319f123cb9830fe9a35cf27648c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:65:be:b1:bf:6b:ed:53:b9:72:03:c3:7f:e2:
91:9b:83:28:01:6b:46:b5:85:dd:f2:46:a2:ee:e7:
d2:c4:93:18:41:bf:40:b5:32:fc:92:fb:5c:68:43:
12:b2:d7:ba:79:6f:17:1c:b7:23:3b:2f:23:a4:6a:
48:9e:11:a2:bb:db:00:df:c7:e2:21:35:57:fb:cb:
4e:ff:e1:b0:57:99:d2:2b:79:e3:56:e4:7c:d3:13:
56:6e:41:9e:3d:14:d9:3c:01:1a:4e:ad:2c:73:21:
3f:3b:93:31:4a:fb:eb:91:c5:69:eb:96:2e:ef:f4:
10:16:fb:14:ec:8b:98:d1:c2:5e:4f:eb:1a:f2:8d:
fa:23:73:08:14:2c:a9:4e:ae:96:f1:e8:5d:8f:1f:
c6:e6:a6:ae:53:a7:22:6b:b3:ea:23:63:9e:f9:4e:
02:b8:a3:7c:66:20:e0:96:73:c8:6b:23:d1:e1:4c:
34:36:55:a7:08:f3:d1:b1:cb:92:22:af:9f:7a:9a:
8a:86:26:99:e4:bc:4a:96:eb:4b:5a:4a:51:81:85:
4c:62:60:a1:50:c4:87:9f:5c:0d:47:fb:a6:cc:78:
b5:af:e9:83:45:e1:5c:40:8e:42:19:6b:6f:20:57:
07:fc:c7:2c:b5:58:57:17:e4:53:e2:ef:9c:d5:2b:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:20:7A:A4:A3:19:F1:23:CB:98:30:FE:9A:35:CF:27:64:8C:55
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uJsgeqSjGfEjy5gw_po1zydkjFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.37.0/24
151.242.187.0/24
Signature Algorithm: sha256WithRSAEncryption
90:e8:37:da:7d:13:4a:6a:6f:c1:67:62:37:e1:d1:e5:04:cb:
a6:bd:79:bd:79:3d:40:97:b6:f7:32:81:b0:f3:a8:5d:3c:68:
e8:20:07:f0:3d:68:fc:15:11:5c:66:b9:be:2d:ad:b5:0a:c9:
9f:67:3f:a3:89:75:a3:ce:16:89:3d:ee:59:a9:40:21:b8:77:
36:b0:89:9c:7a:6b:e3:b5:e4:57:68:e9:9b:35:81:31:b3:8b:
04:79:cc:d3:c4:16:1d:19:9c:f3:67:d5:22:02:7c:fe:3e:f4:
22:9b:50:e1:57:69:9b:41:fe:5d:04:0f:9e:e0:c1:dd:1d:8c:
45:4c:ab:47:0f:de:71:81:25:cf:79:b2:4d:ce:5b:a9:f2:80:
28:c0:c7:14:90:b1:8d:6e:a0:a4:ab:29:be:6e:34:bd:fc:0c:
24:2c:84:c4:0f:67:11:50:ea:24:aa:eb:3d:bc:80:44:d7:6e:
2e:3b:02:48:e3:ed:1c:f3:25:a2:ba:44:1a:af:ef:50:a8:c9:
67:5e:09:6a:12:2f:7e:76:4c:df:08:3b:1d:24:7f:0c:62:92:
37:dd:1a:b6:c5:89:0b:2f:dd:bd:be:d7:af:87:72:08:67:0d:
cc:7a:8b:16:bd:4c:8e:b2:f5:79:0f:de:67:53:20:72:23:94:
58:6d:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:24 2026 by rpki-client