Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7JCX4T3wRtvX78vQx5rG_hnmcnE.roa
File: 7JCX4T3wRtvX78vQx5rG_hnmcnE.roa (raw, json)
Hash identifier: tzKDpJZ0eFyDyvNbmY3rhioEaQauMH7lG8/2K1kyALU=
Subject key identifier: EC:90:97:E1:3D:F0:46:DB:D7:EF:CB:D0:C7:9A:C6:FE:19:E6:72:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A038ADCD71543164015138B4841434C5BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7JCX4T3wRtvX78vQx5rG_hnmcnE.roa
Signing time: Tue 25 Aug 2026 11:28:29 +0000
ROA not before: Tue 25 Aug 2026 11:28:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202118
IP address blocks: 151.247.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:38:ad:cd:71:54:31:64:01:51:38:b4:84:14:34:c5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 25 11:28:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec9097e13df046dbd7efcbd0c79ac6fe19e67271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:ef:fc:12:97:72:c0:b3:19:16:ca:9a:1c:
9c:74:c1:08:c4:d0:07:e3:94:20:24:d3:ed:f8:69:
40:9d:e5:44:17:61:62:63:bc:63:31:1f:03:f9:48:
b6:d2:5b:2f:07:60:7a:39:37:61:cf:e1:06:62:e6:
1a:c1:25:35:31:1b:46:84:dd:c6:f0:e9:2c:21:a5:
9d:e5:43:50:92:55:ca:ce:90:2d:02:b4:2f:66:04:
48:bf:b7:6f:eb:19:7e:43:4e:b6:6b:f6:47:82:30:
31:72:68:b2:0c:03:d6:84:55:c7:49:36:86:a2:36:
37:74:72:a7:88:ab:e5:25:1b:99:00:b2:d8:ad:4d:
4e:3b:7c:04:a0:4f:d0:8e:0b:5e:1e:c4:7c:5e:40:
ba:2c:f9:5c:e7:4c:6d:c4:c8:76:c4:bd:9d:5d:84:
e8:e8:37:96:77:88:e5:54:3c:71:69:a5:81:3c:3a:
58:45:66:a1:eb:60:78:c1:d2:b3:2e:c5:ae:46:ef:
e0:86:4d:24:9b:ae:e4:04:25:3f:19:37:cb:32:1c:
9a:3f:e8:39:27:9d:07:24:2a:d8:6f:a4:c1:fb:6d:
a5:22:ab:af:ca:79:ec:60:d9:1f:69:f3:f4:c9:95:
94:ab:d3:2d:32:82:f5:1b:1d:be:a1:78:7f:8c:20:
7a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:90:97:E1:3D:F0:46:DB:D7:EF:CB:D0:C7:9A:C6:FE:19:E6:72:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/7JCX4T3wRtvX78vQx5rG_hnmcnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.74.0/24
Signature Algorithm: sha256WithRSAEncryption
71:92:88:4b:5e:8b:97:a4:52:f6:48:00:56:19:86:72:10:a4:
45:7f:2c:ee:a0:55:86:02:79:a7:80:13:f6:2b:8b:1b:64:cc:
3f:d9:92:1f:52:ea:24:c6:4e:d6:72:0d:68:de:5c:c5:dd:dd:
be:1d:c2:77:cd:7b:04:de:fe:1c:c9:10:e6:ec:5e:1a:b7:7a:
7b:82:54:6d:9e:0c:86:fc:d0:ab:05:4c:4f:ab:db:1a:55:39:
30:22:81:c7:6f:12:41:48:24:b1:44:9e:c4:dd:35:28:40:53:
cc:03:73:3b:31:74:b2:6f:41:ae:5e:2b:89:15:6d:fb:3f:ea:
e8:f9:a6:36:37:4e:73:58:b0:fd:a7:10:7e:3a:6e:b4:2a:69:
a3:03:9b:e8:da:e8:8b:74:77:76:2f:95:5f:50:39:b3:6b:3d:
11:c9:e0:e3:8f:a4:b1:7b:38:e4:bc:06:57:f2:c5:8c:0d:39:
e6:d5:76:1d:ca:4e:ef:99:20:11:d6:6f:cc:da:f1:03:21:51:
2f:8d:1a:86:d1:1b:f7:e3:94:7c:a1:13:18:06:69:69:b5:b4:
dc:e7:e9:54:f7:98:72:80:b4:be:01:4b:9d:38:35:a9:11:f6:
b3:a8:ab:69:1d:68:ac:6c:3d:23:78:01:51:a1:20:db:90:08:
d7:a1:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:33:52 2026 by rpki-client