Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Gw6NardSH202qGr02P_oks8dWY.roa
File: 7Gw6NardSH202qGr02P_oks8dWY.roa (raw, json)
Hash identifier: dJupokdh8vTGk7c3WmvY0dFYp8b/A2Pbe5Pjin+GqEI=
Subject key identifier: EC:6C:3A:35:AA:DD:48:7D:B4:DA:A1:AB:D3:63:FF:A2:4B:3C:75:66
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E8C8914751BEC67C1A4DABB75B30AAD4B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Gw6NardSH202qGr02P_oks8dWY.roa
Signing time: Wed 03 Jun 2026 08:10:54 +0000
ROA not before: Wed 03 Jun 2026 08:10:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215355
IP address blocks: 151.246.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:13:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:89:14:75:1b:ec:67:c1:a4:da:bb:75:b3:0a:ad:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 08:10:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec6c3a35aadd487db4daa1abd363ffa24b3c7566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3e:e8:11:33:eb:12:df:dd:fc:53:31:86:38:
08:33:e9:cf:b5:0a:9d:fc:47:a0:07:80:46:5a:a1:
14:ba:cd:1e:bd:ff:30:a8:7b:00:29:52:42:a7:39:
59:78:6f:7b:f7:6c:84:0f:cb:a8:eb:c2:94:7d:1a:
69:0f:9e:82:bb:7f:e9:91:1e:cc:44:7e:17:9b:d2:
9f:0f:f2:53:13:78:06:33:0c:c7:08:ca:c6:64:3e:
91:84:c2:c2:8b:83:71:fb:4a:fc:38:3b:fd:88:3f:
5a:8a:d2:32:b6:60:6f:d5:46:d1:ec:12:c6:b4:ce:
5c:53:98:1b:0b:30:15:a0:00:cc:5f:22:8a:f7:0b:
0f:f6:ef:e8:ee:35:a7:b8:1e:3e:0f:3e:1a:b4:8c:
5a:ea:d8:52:33:30:f2:5a:b5:dc:f3:07:fa:b3:5f:
c4:54:22:7a:e6:7d:4a:97:d8:50:cb:44:0c:4d:de:
c7:15:03:66:ae:da:2c:1d:66:92:35:38:66:92:0a:
33:58:5f:03:01:6d:ac:66:c1:e3:a7:d8:ff:58:40:
71:4d:ca:46:25:69:f4:ac:35:1f:c8:37:89:ba:7b:
41:e9:34:cb:4b:e8:95:1a:b3:61:32:71:13:20:ce:
aa:d0:33:8c:fc:81:f3:19:56:9a:37:dd:42:ca:70:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6C:3A:35:AA:DD:48:7D:B4:DA:A1:AB:D3:63:FF:A2:4B:3C:75:66
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7Gw6NardSH202qGr02P_oks8dWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.186.0/23
Signature Algorithm: sha256WithRSAEncryption
41:4b:b0:24:4a:9c:96:c6:c2:7d:80:ee:aa:b0:2c:f3:78:81:
33:c0:70:31:0c:77:82:fa:ac:4d:64:cc:3b:3a:03:af:40:aa:
20:cc:31:55:91:d6:89:0c:30:e9:81:9a:c2:55:6c:99:c1:11:
ec:55:28:07:db:40:b5:9a:51:9e:0d:88:df:a0:67:c5:7d:02:
52:99:25:78:fd:a7:fc:0a:b2:88:b8:f7:ed:95:b7:5a:61:91:
64:47:7e:19:60:50:4f:37:42:80:e9:b2:41:1d:eb:cd:dc:52:
50:8f:42:30:ce:b6:40:93:a3:59:9d:ee:82:e8:76:48:15:68:
46:ea:d3:5c:44:ad:fa:71:a5:dd:fb:de:19:63:a4:ff:57:c4:
93:ec:e7:4e:7b:41:2d:e2:09:40:31:04:a3:14:af:6c:11:29:
7b:a3:a9:38:f8:f8:0e:69:e6:38:bf:af:48:8e:c5:b2:fd:a6:
90:47:67:4d:ea:f8:3f:bb:76:7f:00:85:4a:c7:39:b2:50:a0:
96:fc:16:f4:b5:45:89:0a:78:ff:0e:b7:82:7b:6a:76:eb:5a:
3b:d8:9b:c2:49:16:a6:80:f1:ed:40:b7:5b:30:31:d9:ea:c1:
df:5c:c8:a0:e9:83:3b:a2:d5:8c:24:65:37:c5:55:63:90:e3:
4f:8f:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:23 2026 by rpki-client