Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5irgRBdSamtbDp5osKcA-SkHfVc.roa
File: 5irgRBdSamtbDp5osKcA-SkHfVc.roa (raw, json)
Hash identifier: Lq8U9X7cB1hsZH0Wgtw/M4tQ7nbGGakY41hiAsz8koo=
Subject key identifier: E6:2A:E0:44:17:52:6A:6B:5B:0E:9E:68:B0:A7:00:F9:29:07:7D:57
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD6B1E82100A498E44D2E34A50BC78F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5irgRBdSamtbDp5osKcA-SkHfVc.roa
Signing time: Sun 20 Sep 2026 06:05:08 +0000
ROA not before: Sun 20 Sep 2026 06:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214024
IP address blocks: 151.241.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:6b:1e:82:10:0a:49:8e:44:d2:e3:4a:50:bc:78:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e62ae04417526a6b5b0e9e68b0a700f929077d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c5:8c:68:86:42:68:70:81:65:7e:c1:dc:cd:
a0:fb:ee:7b:ea:8b:da:2a:32:b6:a3:3f:c4:a5:87:
b8:b9:21:03:c9:72:b0:7a:a7:62:a7:36:d2:32:eb:
53:69:5f:b1:11:99:9f:47:e1:2f:dc:b9:b6:7d:c6:
83:99:c2:4d:a8:36:6c:65:ae:c1:0f:bc:65:c1:9e:
53:60:60:24:a4:48:23:fc:ad:4f:e7:c9:ec:29:51:
9b:9a:2f:ce:f0:5e:f1:9c:09:5b:0a:00:13:64:e4:
9a:e2:57:3e:a6:a6:80:9e:e2:b4:f4:fd:4e:ef:77:
ab:77:b2:80:29:f6:b7:2b:a6:a3:ca:0b:fe:a1:79:
d5:e7:bd:d5:62:f0:0a:3d:8c:d5:4c:ea:1d:57:66:
ae:45:b5:84:82:7f:75:d3:11:c8:ab:b8:7e:62:15:
51:e5:b9:3f:44:85:fa:f0:19:91:05:80:a8:f9:13:
04:45:02:c0:4c:10:32:e4:f1:da:3a:94:e7:e5:e5:
7e:7b:45:e4:5e:38:68:87:c4:c1:f1:ff:cc:74:93:
99:54:b4:9e:df:46:54:49:8a:f8:31:9c:72:15:17:
bc:fe:16:30:a3:16:40:54:82:17:2c:45:6c:8f:0f:
d4:a0:57:a5:f9:7f:53:f3:a8:ff:8d:f0:5a:c0:f6:
46:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2A:E0:44:17:52:6A:6B:5B:0E:9E:68:B0:A7:00:F9:29:07:7D:57
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/5irgRBdSamtbDp5osKcA-SkHfVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9d:d6:6c:27:95:1a:4b:e2:a6:27:1a:37:47:64:07:61:e2:ae:
e8:3a:da:91:46:ce:d2:a4:e7:3e:31:73:9c:98:f2:b2:69:09:
9c:39:7d:f4:e4:10:72:6c:ed:ca:b2:d7:07:19:26:87:fd:f1:
4a:81:1c:48:87:37:44:91:e3:f4:d0:0c:a5:8a:1b:77:33:d7:
61:81:be:d4:10:bb:fd:b3:d6:e0:46:e6:80:ac:58:ff:2f:c7:
13:94:2d:14:70:8f:5e:28:df:e7:62:cd:2b:67:d3:3c:67:1c:
c2:6f:43:e5:48:3f:89:1b:a5:8f:e4:ca:94:08:a5:3c:48:86:
d7:4b:ac:10:40:ee:34:3b:c4:23:67:3a:f2:29:fd:29:3b:d0:
17:23:37:33:ca:21:d4:d0:c4:d9:59:a4:14:4a:b7:e1:ca:a6:
29:e9:12:bc:e1:de:bf:bb:e3:12:17:b2:69:f4:32:41:77:da:
06:7d:70:fe:ea:fb:70:b3:4b:ea:4a:c4:65:a6:53:0c:dd:7d:
19:57:f8:64:36:78:e2:31:03:e9:df:b7:5c:1b:d4:16:d4:18:
62:07:55:fd:fe:8f:5b:2d:ae:56:9d:e2:c1:d6:98:96:3f:79:
c5:01:00:43:9b:a8:8a:f7:57:71:b2:01:47:39:eb:4f:e4:62:
9b:ec:2d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:54:21 2026 by rpki-client