Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_FOzfIKYZCazBAH8r27Q7w4BXw.roa
File: w_FOzfIKYZCazBAH8r27Q7w4BXw.roa (raw, json)
Hash identifier: b2JZ+SvwITd4bgREzzcA7ufJT5xrs4tQDGz4Fg9byUY=
Subject key identifier: C3:F1:4E:CD:F2:0A:61:90:9A:CC:10:07:F2:BD:BB:43:BC:38:05:7C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1154419B9D94E6A018B84C8FBC22EFD91
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_FOzfIKYZCazBAH8r27Q7w4BXw.roa
Signing time: Wed 07 Oct 2026 07:29:06 +0000
ROA not before: Wed 07 Oct 2026 07:29:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 151.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:44:19:b9:d9:4e:6a:01:8b:84:c8:fb:c2:2e:fd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 07:29:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3f14ecdf20a61909acc1007f2bdbb43bc38057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:79:4e:3e:e7:73:d6:b4:75:8e:3a:62:10:89:
b8:3a:e6:89:e7:1e:bd:fc:cb:65:d0:cb:c4:ce:ee:
08:47:4b:77:3f:ec:06:d4:4d:07:71:03:63:54:c5:
00:16:b7:00:d3:ad:dc:25:94:01:79:4d:4e:1b:08:
1b:b4:c5:bd:ee:9b:99:2e:c4:eb:3a:3b:15:ae:38:
f4:f6:4a:ad:94:a9:35:6a:b6:b7:73:d6:7c:a8:06:
08:15:de:59:7f:dd:d6:8b:1d:49:f3:d6:03:61:23:
4f:87:8f:cf:47:03:b9:fe:08:c1:13:af:ab:9b:e4:
7f:66:da:5b:fe:c2:00:e9:b0:a6:4d:31:53:1d:75:
e2:85:82:76:9f:d2:3e:51:1e:d9:32:d7:80:7a:b5:
7f:20:ce:1f:16:60:96:f0:77:27:7e:49:aa:1e:69:
ff:62:a2:d5:57:9a:88:fc:52:98:9c:77:b1:b0:2c:
d2:7f:e6:30:48:98:7c:01:83:3a:0c:f9:81:a8:37:
b5:ee:e2:af:0b:43:40:93:67:24:f7:a4:5f:5c:cf:
dc:1d:40:13:8b:7e:b3:36:1a:30:eb:d2:c6:60:eb:
e7:ca:d7:b1:6d:60:24:79:19:df:82:5d:c3:4e:8f:
7b:a7:01:07:6a:da:5f:f1:04:89:a0:ed:63:ff:bf:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F1:4E:CD:F2:0A:61:90:9A:CC:10:07:F2:BD:BB:43:BC:38:05:7C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w_FOzfIKYZCazBAH8r27Q7w4BXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
70:51:ab:2e:fb:93:73:46:7b:fb:74:77:94:27:6f:2e:86:42:
d6:a0:9f:44:6a:d0:3e:f3:87:08:26:37:11:24:d7:f4:23:ea:
5d:c6:bc:0d:8a:81:b2:84:66:0a:d4:c4:a4:0c:ef:20:54:a4:
eb:6d:d3:99:ee:d0:6c:3d:2e:af:2c:db:c0:ef:51:0c:5a:e8:
af:2e:e7:19:81:7e:c2:9f:d1:0f:06:df:42:2f:99:5b:02:d1:
7a:b4:d2:e2:eb:86:05:e9:93:ee:44:45:f2:3f:56:05:c2:af:
68:d5:39:04:7d:47:03:c3:4e:bd:1a:1a:95:63:e9:7a:f2:c5:
21:78:e6:dc:b9:d5:10:42:2a:94:a6:ef:f2:32:99:f2:3e:bb:
71:c4:f2:ff:49:80:2e:62:0b:57:78:36:0c:40:1b:9f:65:ac:
e6:7e:33:66:01:2a:bf:a2:3f:ea:22:fb:af:de:c5:53:b2:0d:
5e:e1:f5:b4:90:64:bc:9d:57:18:9b:95:dd:a5:5e:4a:1d:1e:
ed:51:d6:f3:0b:9f:e5:bd:dc:5a:03:9d:91:bc:87:cd:6a:b9:
04:a8:c5:d6:ba:a3:9f:9a:7e:e1:a1:22:b6:a0:58:4e:8a:4d:
99:07:5f:1a:fb:08:ed:b4:21:9e:1b:81:d0:8c:3b:ad:66:e8:
61:06:31:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:45:52 2026 by rpki-client