Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3cYXKGoYlR644wSGZ71t-e8SfH0.roa
File: 3cYXKGoYlR644wSGZ71t-e8SfH0.roa (raw, json)
Hash identifier: yETw5fVVBLdHvwxNPKuT+D9WoeB4M+i6xuSeiikS9CA=
Subject key identifier: DD:C6:17:28:6A:18:95:1E:B8:E3:04:86:67:BD:6D:F9:EF:12:7C:7D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07FE1397416ABF62376D4E4F5CD127C65
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3cYXKGoYlR644wSGZ71t-e8SfH0.roa
Signing time: Tue 08 Sep 2026 07:17:41 +0000
ROA not before: Tue 08 Sep 2026 07:17:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218956
IP address blocks: 151.244.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:e1:39:74:16:ab:f6:23:76:d4:e4:f5:cd:12:7c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 07:17:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddc617286a18951eb8e3048667bd6df9ef127c7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e7:83:e1:a5:4b:5d:1b:eb:cc:b8:fc:69:47:
92:54:03:1a:90:31:92:c5:2f:99:3b:60:99:db:dd:
13:03:e9:98:3b:f2:62:d8:ef:90:9e:b5:66:ec:ab:
72:61:97:14:da:e2:b4:19:18:0f:06:04:0a:65:b7:
b5:f5:c4:a3:71:23:bf:00:96:15:cd:bd:70:de:34:
05:0b:e1:a7:07:6a:62:c5:3e:68:14:62:df:cf:09:
cd:5a:3f:29:8d:69:85:76:e6:75:36:15:27:c5:9a:
e2:e3:38:99:84:34:49:47:80:b2:d1:37:54:d7:74:
99:dd:b9:17:c9:de:f6:15:20:6e:b7:4b:14:c2:c7:
4a:bd:e1:00:22:1d:76:7d:e9:80:69:d1:fc:d9:c8:
0c:52:0d:9f:8d:14:1e:ba:52:35:d9:4c:d3:bc:1d:
56:15:4e:90:cb:ea:61:3b:75:cb:fa:34:cd:5c:9d:
b3:6e:38:d2:1f:24:7d:a6:0f:42:cd:65:05:71:3d:
01:a4:b9:21:86:6e:86:3c:c3:94:95:80:d2:67:f8:
c5:b6:41:11:70:b2:90:1e:1e:78:2c:b4:0e:ba:70:
71:90:3f:bd:42:69:e2:02:93:7f:26:a1:40:c3:70:
bd:e7:ff:b7:57:9a:ca:e9:62:b1:46:d6:0b:9d:38:
20:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C6:17:28:6A:18:95:1E:B8:E3:04:86:67:BD:6D:F9:EF:12:7C:7D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/3cYXKGoYlR644wSGZ71t-e8SfH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.4.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a7:1b:b8:c4:44:ed:41:b1:9f:c2:3a:c8:22:82:69:df:f3:
1c:2c:28:f1:75:61:52:37:20:da:d2:8c:7f:a3:18:15:55:ba:
3b:1e:de:f1:9a:01:dd:c3:48:d9:27:95:10:45:60:63:b9:7b:
1a:48:33:02:e9:ef:91:14:68:63:4e:13:2c:6f:9e:5a:55:bb:
02:7f:30:2d:d6:d1:55:67:03:54:b8:0c:7c:48:23:a4:77:8e:
29:b6:ad:d9:94:b2:70:d5:5a:42:b7:7f:44:66:01:49:a0:94:
0b:e6:9c:a0:9d:f5:8d:b6:d2:d8:8b:e1:64:cf:d3:59:dd:d4:
26:a9:94:28:82:1e:76:5e:92:df:7b:61:a6:03:f1:7c:10:51:
a4:d5:60:2d:19:9b:06:eb:98:50:81:e7:01:ee:38:5e:e9:eb:
91:92:17:2c:28:2a:cd:37:e1:7d:46:7a:78:91:c2:15:a8:06:
9c:a7:af:f1:e8:2f:81:c5:8a:af:eb:b2:fe:5d:91:16:af:87:
fe:fc:d2:da:9f:e2:a8:16:bd:f9:5c:e5:56:9c:ce:45:dd:69:
f4:92:ae:64:e7:62:2d:35:f8:9d:c2:43:db:86:83:67:dc:52:
db:ca:75:b5:b0:49:87:55:3c:5a:86:85:81:a8:2b:17:ea:1c:
e6:f6:3e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:51:40 2026 by rpki-client