Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x9aBve3JbWXK2okOohqNtWXsSX8.roa
File: x9aBve3JbWXK2okOohqNtWXsSX8.roa (raw, json)
Hash identifier: yIDtqjAgTdxlH3BgDPtT6vA2y8W3aASuUv/2A9DLxWU=
Subject key identifier: C7:D6:81:BD:ED:C9:6D:65:CA:DA:89:0E:A2:1A:8D:B5:65:EC:49:7F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CDB95CA1EBE0D19C8AF388910BD9C30E3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x9aBve3JbWXK2okOohqNtWXsSX8.roa
Signing time: Wed 11 Mar 2026 06:29:12 +0000
ROA not before: Wed 11 Mar 2026 06:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 151.244.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 16:33:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:db:95:ca:1e:be:0d:19:c8:af:38:89:10:bd:9c:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 11 06:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7d681bdedc96d65cada890ea21a8db565ec497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:05:64:4d:a8:64:7b:a9:2e:99:54:bf:bf:4f:
6f:aa:e0:1b:dd:2a:eb:84:9a:7e:37:82:c3:6f:be:
bb:c4:33:d3:06:13:a0:9c:11:c2:88:d6:58:cb:e5:
6a:df:7b:fe:86:8e:5e:da:a6:c6:a9:46:f8:2f:49:
cb:68:97:56:33:57:31:a6:e2:2c:d0:13:99:c6:d1:
78:54:49:7c:c9:ec:0e:ab:07:32:28:5a:40:48:c6:
b6:6c:75:79:e0:c6:5c:dc:e1:bf:d5:9a:03:31:ee:
e5:ff:07:99:4c:33:1d:73:d9:11:91:d4:29:42:ee:
15:07:c9:ef:ff:e2:97:69:e1:60:5c:86:3a:c2:fc:
14:e2:f8:46:4a:40:9a:64:d9:98:cf:8b:b3:80:32:
9e:30:f3:7a:e9:d2:27:c5:71:c9:af:da:16:3b:0a:
b3:e1:f2:22:a1:a8:bd:2b:cb:c7:7d:3b:f6:b2:0d:
eb:27:3c:0f:b1:fe:9c:50:65:1e:6d:9c:b2:4c:32:
52:3e:f8:83:d3:b7:18:bd:3f:ce:29:98:0a:c7:40:
5d:8c:af:f4:21:d3:aa:1e:d2:69:20:49:37:58:73:
62:b7:df:74:38:00:f5:9e:69:35:4c:96:5f:8f:32:
e9:c9:a7:c4:3d:e7:c7:67:fa:6c:a4:65:cd:33:6d:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D6:81:BD:ED:C9:6D:65:CA:DA:89:0E:A2:1A:8D:B5:65:EC:49:7F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/x9aBve3JbWXK2okOohqNtWXsSX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.26.0/24
Signature Algorithm: sha256WithRSAEncryption
14:f5:c0:78:3d:a1:05:8a:8a:c0:16:50:be:21:1f:49:95:91:
20:5e:bd:cb:a9:e6:4f:64:68:50:69:f7:af:3c:f9:6d:45:de:
8f:9e:f9:87:0b:35:07:4d:f9:e5:30:10:40:dd:2b:9c:3b:2f:
33:dd:2b:53:ec:21:13:9b:c6:ea:48:ff:a5:6d:e3:16:02:90:
f6:91:28:47:d3:b6:3b:35:a4:c7:57:48:ab:d3:d3:df:fe:92:
f5:f6:6f:8b:b6:2d:58:c5:c8:54:f2:71:61:8c:ad:84:d5:61:
49:fd:00:37:a0:e7:9a:5c:72:0c:ce:9e:2e:6a:b3:81:5e:8f:
7d:ca:a8:f4:40:f7:7e:c5:87:9b:63:e2:31:6e:fd:f1:1f:11:
ba:fc:fb:41:33:6c:39:a2:68:78:1f:34:81:3a:58:d4:3c:6d:
f0:b6:83:6f:f2:c6:91:51:19:1f:c4:be:ca:aa:bf:a3:3c:46:
19:6b:1d:2c:1b:39:10:45:04:d3:36:20:3f:1f:c4:81:6d:1f:
fd:a4:3e:78:83:47:44:07:98:6e:33:1f:3c:3b:cb:65:5c:09:
f1:03:30:24:99:44:90:4b:b7:75:7e:3e:55:b9:37:e0:20:93:
84:ab:7d:44:84:91:0e:d5:f0:8f:7b:8f:cf:0d:5f:a8:5e:6b:
11:39:81:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 20 02:05:48 2026 by rpki-client