Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7GYOC640Ejv9vc4NIA13C-p2W48.roa
File: 7GYOC640Ejv9vc4NIA13C-p2W48.roa (raw, json)
Hash identifier: VOtAWM+raas+WOJNoEDcLjMRktFEnq97BehGdZOChxg=
Subject key identifier: EC:66:0E:0B:AE:34:12:3B:FD:BD:CE:0D:20:0D:77:0B:EA:76:5B:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD6A3411DD07902451FA64B0CCCA8971
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7GYOC640Ejv9vc4NIA13C-p2W48.roa
Signing time: Sun 20 Sep 2026 06:04:08 +0000
ROA not before: Sun 20 Sep 2026 06:04:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210162
IP address blocks: 151.241.174.0/23 maxlen: 23
151.241.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:22:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:6a:34:11:dd:07:90:24:51:fa:64:b0:cc:ca:89:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:04:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec660e0bae34123bfdbdce0d200d770bea765b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:80:dd:eb:21:23:17:12:9f:82:ea:5f:79:
41:0b:c8:54:cc:d4:66:aa:50:44:f6:52:12:42:5e:
e5:03:63:c5:b2:9a:15:64:78:7f:14:fb:d6:63:82:
f5:8c:c7:81:f0:39:34:a5:0a:f3:9e:e2:66:c9:cf:
87:58:6e:86:5d:d3:2e:d3:f2:2d:90:eb:1c:3c:86:
1a:f4:47:2a:17:1e:a7:c4:1d:76:ee:73:95:c4:46:
12:83:1d:1a:97:20:85:5b:22:98:39:74:6b:c3:c2:
24:c6:2e:25:a8:bf:b3:87:e2:a1:b9:fd:1e:85:85:
02:0e:33:77:f2:a6:91:c9:fa:10:a5:94:6d:8d:63:
00:4a:ee:98:7a:02:d6:3a:4f:e0:2e:ae:39:29:6e:
a8:25:93:fb:7d:a4:b0:fb:fe:8a:f7:9d:83:f6:d3:
3f:51:c5:c8:f3:58:64:e2:12:c9:b9:b9:5b:a1:9b:
f8:53:39:1e:c6:60:e9:69:2b:ba:f2:69:f6:94:d6:
86:aa:ae:50:a2:bb:0f:9f:f2:e7:ec:b9:27:64:b2:
a7:d8:bc:9c:ea:b6:93:f1:58:95:07:2a:ff:a9:c3:
d0:3e:f6:22:5d:23:f7:18:58:d2:c1:0c:d9:ed:d4:
b3:72:11:9d:74:4f:1a:79:58:df:33:48:ae:00:28:
3d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:66:0E:0B:AE:34:12:3B:FD:BD:CE:0D:20:0D:77:0B:EA:76:5B:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7GYOC640Ejv9vc4NIA13C-p2W48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.174.0/23
151.241.210.0/23
Signature Algorithm: sha256WithRSAEncryption
ad:a5:fa:e5:e3:d7:eb:c9:70:fd:e0:97:65:3e:67:f1:a2:e2:
3d:b9:1c:bf:1f:58:5b:54:df:fd:a5:74:81:e0:c9:08:98:b3:
89:36:e1:49:47:ab:65:b0:2d:0f:f6:09:21:b2:3c:c9:8d:85:
20:96:25:00:96:eb:9d:eb:c6:d1:32:ce:a4:90:14:e3:c5:03:
7d:20:ba:01:76:7c:cf:9f:02:1b:03:0b:52:d7:f5:3d:20:e1:
d5:4f:61:fb:6f:62:de:92:62:7e:27:bf:4b:6c:92:bb:b2:a3:
68:27:40:6d:bc:4d:b6:35:2d:70:5c:61:4f:d5:70:ea:4a:ef:
a6:75:51:81:ce:d2:12:cc:6c:71:31:e9:28:16:62:08:e7:07:
56:8b:be:55:ba:15:9b:53:9e:69:b3:23:c9:fa:24:f9:a2:88:
12:81:aa:f4:d5:2a:4a:a7:e4:0b:66:9a:7c:61:33:dc:85:2b:
6a:c8:f7:00:d3:83:b6:87:44:e0:f3:b7:5b:15:05:2e:ad:f7:
42:61:49:dd:b7:bf:74:62:9a:51:72:74:80:04:92:79:f9:10:
1c:95:ba:12:33:03:21:33:6b:24:d2:01:cd:f1:74:70:0a:e8:
9b:0a:e3:a9:a8:7e:7f:d9:74:02:08:0b:7c:cb:b5:d4:59:66:
b6:67:f5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 15:17:37 2026 by rpki-client