Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xrev_cW8R5YYXkjL87XTpkm-IYM.roa
File: xrev_cW8R5YYXkjL87XTpkm-IYM.roa (raw, json)
Hash identifier: D9l9E7nn1HbCJT2ptHF+Z4tRR0LDQQRxDoPkHygJFHc=
Subject key identifier: C6:B7:AF:FD:C5:BC:47:96:18:5E:48:CB:F3:B5:D3:A6:49:BE:21:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A176A0B7D891E9DB72194BE0B3785DAAC1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xrev_cW8R5YYXkjL87XTpkm-IYM.roa
Signing time: Mon 26 Oct 2026 05:13:26 +0000
ROA not before: Mon 26 Oct 2026 05:13:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13537
IP address blocks: 151.247.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:a0:b7:d8:91:e9:db:72:19:4b:e0:b3:78:5d:aa:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 26 05:13:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c6b7affdc5bc4796185e48cbf3b5d3a649be2183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6c:53:91:71:a9:be:af:97:8f:5d:ee:2c:99:
f3:0e:ec:47:da:e1:fd:54:bf:65:8c:fc:5e:c5:0e:
dd:5f:b6:f3:1d:de:36:d5:86:c9:76:d1:42:70:d6:
66:12:40:e4:fe:9e:46:c9:f4:21:26:e0:98:f2:a9:
5b:27:c2:ea:53:f7:37:6a:d1:c7:d1:f6:8b:77:7d:
6f:1a:3b:36:c5:9e:85:ec:21:03:00:9c:82:b0:b2:
2b:22:84:da:c7:04:a6:2d:d6:3d:26:b2:fe:dc:f0:
e8:52:6e:c2:e3:94:c9:2a:e6:13:d8:52:8a:57:e4:
fd:96:cb:66:41:fc:a3:0b:92:15:be:15:21:5f:3f:
16:3b:5a:f3:5e:ef:fb:02:46:58:3b:bd:61:70:59:
cd:91:e4:20:cf:27:cd:50:fb:b0:58:cf:d4:f0:d7:
3d:1c:df:5b:a4:68:0a:52:d1:95:f1:10:e9:ec:98:
30:37:e6:08:b1:f6:8b:8a:e3:b4:9e:4d:a5:75:0f:
f5:07:37:aa:8d:82:85:33:39:7f:f1:ca:c0:15:30:
b0:04:fc:2a:ef:54:58:1d:e3:94:0d:eb:4d:83:4d:
b5:2e:ff:f4:05:6d:e9:57:51:3d:82:7b:6d:15:aa:
6a:0f:0e:73:0e:e4:2e:8f:ea:fe:92:4b:d2:74:1f:
d3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B7:AF:FD:C5:BC:47:96:18:5E:48:CB:F3:B5:D3:A6:49:BE:21:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xrev_cW8R5YYXkjL87XTpkm-IYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.3.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:49:ec:95:67:4c:53:43:b9:7e:81:1a:4d:26:57:d9:70:2e:
32:c3:41:94:a3:03:e4:d0:22:24:62:b3:c0:50:d2:c7:b4:9d:
6a:71:60:29:a7:e3:fb:6d:63:32:1f:1a:ac:9e:aa:3c:91:1e:
a2:41:e6:e2:49:06:09:d2:66:83:88:56:ce:5c:16:c9:3e:a2:
5f:cf:49:a2:61:ee:2f:2f:2c:a1:a8:8f:ee:cb:af:e3:50:01:
27:8d:32:25:f3:7e:ec:55:4e:ee:f8:fe:bc:73:6f:97:59:bf:
ca:b0:e8:b1:07:2e:0e:36:a7:2d:19:60:0f:b0:9f:3d:a3:4a:
85:b5:b4:e5:10:32:b0:7b:d2:d9:2f:88:fb:a1:8c:5a:80:2a:
09:82:b7:03:31:c1:c7:7d:fb:c0:f5:8d:04:fa:b6:36:f3:e7:
8e:7a:86:38:89:16:a8:8e:a0:2c:f8:72:e2:91:43:27:3b:4e:
52:46:11:2a:ba:6a:f0:47:c4:1d:6c:c5:de:52:b9:b4:ee:f9:
29:20:bc:5b:af:36:05:d0:a9:a9:11:00:ce:b4:47:8a:ec:2f:
43:53:c1:1f:5f:06:cc:36:d0:b7:22:34:47:59:8b:ae:d9:55:
ac:f2:63:bd:7b:71:b7:e9:2b:e1:02:b2:9f:cb:a8:0d:8d:e1:
77:3b:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 01:42:53 2026 by rpki-client