Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UAuzhTVu9H-zZfFOGLS7yx9uTA.roa
File: 5UAuzhTVu9H-zZfFOGLS7yx9uTA.roa (raw, json)
Hash identifier: flPTVZmave2pQsOEGs2tU2YUncQmdVuTZKgtVZNcmnA=
Subject key identifier: E5:40:2E:CE:14:D5:BB:D1:FE:CD:97:C5:38:62:D2:EF:2C:7D:B9:30
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9B9C42E71EA13534CF8CA1841E470907
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UAuzhTVu9H-zZfFOGLS7yx9uTA.roa
Signing time: Fri 17 Apr 2026 13:23:22 +0000
ROA not before: Fri 17 Apr 2026 13:23:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 835
IP address blocks: 151.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:9c:42:e7:1e:a1:35:34:cf:8c:a1:84:1e:47:09:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 13:23:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e5402ece14d5bbd1fecd97c53862d2ef2c7db930
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:d5:cf:d9:0f:a8:81:0e:9b:ef:6b:47:ed:
fe:d9:8f:69:6f:53:0a:9f:03:b7:bb:22:0c:96:54:
df:98:47:8f:cd:19:e5:e4:f7:e0:59:cc:2e:15:4e:
9b:18:92:12:4d:63:5e:3b:61:7d:93:21:65:0f:d8:
cd:10:77:8a:ce:7e:29:7a:e1:f1:20:d3:b5:d9:3e:
46:8b:6d:ee:57:5a:55:77:ce:46:af:5e:f9:0a:64:
24:58:67:24:e0:a8:60:46:e5:46:8a:f3:d9:5e:fd:
af:f3:50:70:9f:ad:d9:d5:ce:7e:52:b1:7b:50:97:
2c:31:6c:fd:cd:b9:0a:a7:74:27:88:61:25:d4:0b:
23:34:a0:b9:ce:bb:71:86:2e:82:e4:f6:69:63:56:
cd:5a:ff:1b:12:34:f5:d9:1e:05:6e:9d:f4:eb:76:
75:b4:cb:ce:1f:5d:a5:7d:24:92:31:ab:23:e2:6b:
52:e7:4c:5c:26:7a:8d:d8:b6:12:a3:a4:39:a4:75:
10:0f:e6:b1:c3:b7:b8:5b:b5:f9:60:13:ef:51:ae:
72:a3:9b:0f:d9:81:38:1b:ab:35:b0:30:73:b7:2f:
cc:41:bb:a2:5a:5c:20:84:82:35:2e:d5:2d:2c:61:
22:c5:bc:aa:64:d9:c9:9c:c8:60:f5:10:41:c9:c2:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:40:2E:CE:14:D5:BB:D1:FE:CD:97:C5:38:62:D2:EF:2C:7D:B9:30
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5UAuzhTVu9H-zZfFOGLS7yx9uTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:da:05:b4:ef:e8:fb:41:de:91:cd:1d:8a:a3:9f:7e:9c:38:
51:ae:00:36:b1:c0:9c:2b:61:93:0c:d5:1e:13:b9:71:16:e6:
50:e9:11:0b:da:50:88:c0:61:47:ea:6b:0a:5f:2e:a7:81:63:
19:ca:69:e9:2d:79:5e:72:06:b5:32:cc:55:d4:f5:32:6f:c9:
00:1b:ba:5c:da:12:77:27:0e:3e:d9:30:25:ab:70:eb:68:22:
c0:46:05:12:96:66:25:40:0c:a6:87:48:19:22:76:d8:bb:e5:
35:4b:f8:ce:5b:bf:6d:60:44:85:2b:0a:14:7c:13:25:99:6a:
55:c0:23:16:29:1b:fb:a8:66:57:1d:eb:2c:0b:07:47:3c:ad:
3e:6c:fb:58:76:9f:93:f8:74:a2:a9:3c:86:2c:90:ce:04:5f:
8d:ef:a3:cb:3e:6f:4c:d7:3b:13:ec:9f:80:de:c2:7f:b2:45:
72:c3:7c:70:7d:b3:5f:85:b9:16:33:5a:32:bf:8f:a7:e1:c2:
fa:ba:e0:21:ab:bc:d4:ee:44:24:98:5b:21:31:14:19:32:9e:
f3:4d:3d:c9:de:a4:e8:85:56:b6:e0:29:fd:b1:cb:6c:04:46:
49:b3:a8:cb:ea:cc:5d:75:2c:28:55:e8:49:47:22:6b:f8:61:
40:04:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:47 2026 by rpki-client