Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uzIhLnHcYMNAJuGVxyI9MIqDi5s.roa
File: uzIhLnHcYMNAJuGVxyI9MIqDi5s.roa (raw, json)
Hash identifier: Isb0yADqb8VdexBBXD0QZrDUCWwKtnDOJkQ4ozpcGz8=
Subject key identifier: BB:32:21:2E:71:DC:60:C3:40:26:E1:95:C7:22:3D:30:8A:83:8B:9B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EF850FB7D388849439030FCB3AF9B1E11
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uzIhLnHcYMNAJuGVxyI9MIqDi5s.roa
Signing time: Wed 24 Jun 2026 06:28:37 +0000
ROA not before: Wed 24 Jun 2026 06:28:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274564
IP address blocks: 151.242.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:50:fb:7d:38:88:49:43:90:30:fc:b3:af:9b:1e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 06:28:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb32212e71dc60c34026e195c7223d308a838b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:98:98:6a:bb:21:22:00:a0:c7:81:4c:07:b6:
24:bf:f9:6d:59:9e:66:86:21:b2:44:e6:2d:08:ec:
a9:f7:ae:c6:6c:84:8f:dd:1f:07:eb:52:7c:5b:35:
6b:06:7d:07:4e:ce:43:87:a7:95:b4:72:77:a6:32:
8d:13:24:5e:72:8b:c1:fb:37:d7:35:b2:2d:02:33:
0f:ea:49:61:2b:8c:c4:29:eb:f3:5b:18:cd:17:ef:
2f:42:cb:6d:e5:43:91:1d:ef:60:53:0d:30:c0:b5:
0c:95:41:2a:53:3c:6e:be:35:e8:e5:92:74:cf:a3:
28:21:82:ec:03:15:18:78:0f:25:cd:2b:27:07:55:
e3:e9:c2:45:02:45:f4:ab:da:0d:20:9a:ea:17:6d:
50:e2:b9:e8:a3:ad:7c:10:7b:1d:f8:f8:9e:6a:fc:
00:44:8e:bd:a7:6a:14:6e:9b:81:ad:b7:40:8d:d3:
47:26:b2:1b:a7:ed:fc:d6:b9:a7:ba:ac:e0:59:9d:
d7:77:b5:45:17:6e:f4:3b:5d:fc:4a:6c:b3:cd:db:
6f:2c:ad:a7:1d:40:c8:b4:3f:56:0a:9b:49:f8:9d:
69:37:dd:ee:4a:18:ac:9e:2e:4c:0e:69:39:ae:20:
8c:ac:c6:d4:66:4f:5a:0d:56:ec:69:24:eb:b0:af:
49:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:21:2E:71:DC:60:C3:40:26:E1:95:C7:22:3D:30:8A:83:8B:9B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/uzIhLnHcYMNAJuGVxyI9MIqDi5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:25:bc:20:e8:38:97:af:f7:a2:26:59:86:36:71:f3:b3:51:
ce:6d:70:8d:46:60:08:e0:ed:d9:f3:69:80:bd:3e:6b:72:bf:
f1:0f:d0:33:cc:5f:25:07:d6:d2:7c:99:97:7c:a8:7d:52:a2:
55:62:64:f9:2e:91:f0:ad:85:57:0f:25:a3:8b:c9:a8:c3:0a:
14:2c:cd:b3:8e:e8:22:7c:3e:7e:fd:d9:45:d5:ac:28:d2:54:
15:4e:b1:dc:48:d8:df:2e:a9:8d:59:21:bb:0e:d6:13:4b:64:
2e:e9:58:c1:4d:c5:63:d1:93:29:d4:a8:64:12:ed:56:fa:4d:
c8:70:94:f5:45:21:1d:32:cc:62:06:ec:a0:67:d0:3e:e6:37:
7b:66:39:e1:51:d2:0a:41:09:3e:b5:fc:09:49:d8:23:a7:0b:
0d:bc:56:5c:16:af:99:ef:f9:dc:38:c9:80:d2:21:eb:b2:b5:
dc:b0:63:54:ee:0e:ed:fc:fc:c5:78:73:df:36:5c:2d:95:5d:
8f:a4:b6:23:c2:f3:24:67:cb:16:2a:4f:1d:b0:2a:9b:95:e1:
1e:82:92:cd:7d:29:7b:16:cd:f7:9c:68:bd:9c:ca:6b:20:61:
88:15:ee:dd:5d:a2:ec:36:c7:ee:68:0e:a2:ef:78:4d:9c:e0:
2c:b8:91:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:52:18 2026 by rpki-client