Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Rl-Gm70i4662tRB83wDR3U4q_4.roa
File: 0Rl-Gm70i4662tRB83wDR3U4q_4.roa (raw, json)
Hash identifier: 0nTl3c3SG18D2fbNGFTuPi02EXdru7wK/vZHHpA9hV8=
Subject key identifier: D1:19:7E:1A:6E:F4:8B:8E:BA:DA:D4:41:F3:7C:03:47:75:38:AB:FE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F93B154665CF33CBA01DD3CE91704320A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Rl-Gm70i4662tRB83wDR3U4q_4.roa
Signing time: Fri 24 Jul 2026 10:34:59 +0000
ROA not before: Fri 24 Jul 2026 10:34:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 151.243.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b1:54:66:5c:f3:3c:ba:01:dd:3c:e9:17:04:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 24 10:34:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d1197e1a6ef48b8ebadad441f37c03477538abfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:29:43:2c:87:16:15:03:25:79:f2:b9:7e:a7:
16:33:54:1f:16:0f:71:d0:34:a4:0b:1f:6b:16:f9:
b3:19:83:f9:f0:b4:01:56:17:24:be:f0:cd:76:ac:
d9:b1:b3:4f:9f:5a:fc:37:c1:30:90:95:0a:dd:c3:
77:0f:91:dc:50:47:bb:41:fd:b1:0f:49:7a:d9:98:
42:67:2d:4c:72:57:ff:c8:35:4a:45:6b:5a:6c:9e:
1d:73:7b:23:cb:1f:20:ca:bf:4b:c6:99:b9:28:2f:
68:46:d3:c3:cf:b0:a3:9d:c9:4d:84:c2:2c:37:86:
2a:1b:7e:69:6a:22:b5:b9:6e:36:38:e7:97:a7:d8:
d0:76:c5:ed:67:84:ef:9a:eb:5c:a4:f2:cc:eb:48:
39:ff:34:2d:88:4f:92:7f:15:4b:33:f9:ea:66:6a:
b8:1a:51:7a:27:4e:f6:3b:99:52:43:f3:91:67:a9:
90:3f:69:09:28:39:97:0c:03:a5:4e:1e:e3:91:ff:
8d:7d:dd:36:1c:6a:27:ed:28:43:b1:d6:a7:99:30:
d6:fe:40:7e:bd:9b:9b:4b:76:5f:e0:7e:04:54:15:
53:38:9d:37:b8:da:3e:ce:cc:bc:35:7c:1c:f6:64:
78:89:3c:3c:87:81:4c:87:da:3e:a9:6a:eb:6f:ba:
73:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:19:7E:1A:6E:F4:8B:8E:BA:DA:D4:41:F3:7C:03:47:75:38:AB:FE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0Rl-Gm70i4662tRB83wDR3U4q_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:e4:30:a8:97:30:e1:34:19:aa:89:9a:ea:da:d9:e4:2a:62:
43:56:05:9f:02:e7:1f:0b:3d:b3:7e:c5:83:51:a7:16:46:c2:
13:50:87:5a:f3:94:ed:8a:dc:85:f1:3a:01:dc:ec:fa:dc:6f:
9e:7d:57:38:45:a5:30:60:04:f6:2b:9a:ac:e1:2f:87:4c:a0:
a9:e3:77:c2:ab:67:5d:57:33:09:85:af:2f:a0:eb:e9:c3:c4:
07:9b:f0:d3:77:6d:64:c1:d3:6c:99:91:7b:b9:65:b3:75:6e:
c3:cf:ec:95:56:98:1b:52:86:cb:57:a4:86:3e:83:62:75:4f:
9a:0b:57:6f:f3:82:df:68:2b:e4:b5:c7:a2:0a:76:d4:42:45:
a0:49:bf:63:f0:5e:c6:0e:f5:dc:f8:37:bb:f2:7d:a6:3c:76:
f6:ad:57:94:07:c0:49:b3:eb:08:c2:19:ae:e2:a3:1f:1f:a0:
1a:35:be:52:55:ae:00:cd:c4:75:4a:d0:e5:7f:b5:84:95:a0:
8f:04:3d:a3:04:d0:bf:d2:23:b9:d9:07:03:81:c4:a0:2e:74:
85:15:31:fe:80:a7:62:2e:45:80:f8:43:8f:e4:56:a4:ee:20:
7e:d6:fb:de:fb:cd:3d:b1:f8:22:ea:d6:91:37:7d:3b:2e:59:
3c:35:09:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+TsVRmXPM8ugHdPOkXBDIKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzI0MTAzNDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTE5N2UxYTZlZjQ4YjhlYmFkYWQ0NDFmMzdjMDM0Nzc1MzhhYmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ilDLIcWFQMlefK5fqcWM1QfFg9x
0DSkCx9rFvmzGYP58LQBVhckvvDNdqzZsbNPn1r8N8EwkJUK3cN3D5HcUEe7Qf2x
D0l62ZhCZy1Mclf/yDVKRWtabJ4dc3sjyx8gyr9Lxpm5KC9oRtPDz7CjnclNhMIs
N4YqG35paiK1uW42OOeXp9jQdsXtZ4TvmutcpPLM60g5/zQtiE+SfxVLM/nqZmq4
GlF6J072O5lSQ/ORZ6mQP2kJKDmXDAOlTh7jkf+Nfd02HGon7ShDsdanmTDW/kB+
vZubS3Zf4H4EVBVTOJ03uNo+zsy8NXwc9mR4iTw8h4FMh9o+qWrrb7pzowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNEZfhpu9IuOutrUQfN8A0d1OKv+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMFJsLUdtNzBpNDY2MnRSQjgzd0RSM1U0cV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/NfMA0G
CSqGSIb3DQEBCwUAA4IBAQA65DColzDhNBmqiZrq2tnkKmJDVgWfAucfCz2zfsWD
UacWRsITUIda85TtityF8ToB3Oz63G+efVc4RaUwYAT2K5qs4S+HTKCp43fCq2dd
VzMJha8voOvpw8QHm/DTd21kwdNsmZF7uWWzdW7Dz+yVVpgbUobLV6SGPoNidU+a
C1dv84LfaCvktceiCnbUQkWgSb9j8F7GDvXc+De78n2mPHb2rVeUB8BJs+sIwhmu
4qMfH6AaNb5SVa4AzcR1StDlf7WElaCPBD2jBNC/0iO52QcDgcSgLnSFFTH+gKdi
LkWA+EOP5Fak7iB+1vve+809sfgi6taRN307Llk8NQkp
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:16:17 2026 by rpki-client