Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8QxFxwC70NeBFoVSpfN8fYddM84.roa
File: 8QxFxwC70NeBFoVSpfN8fYddM84.roa (raw, json)
Hash identifier: fHldGGO17BKkxWgJkXTWccMAiQ9cs+iLDoftk5IUeR8=
Subject key identifier: F1:0C:45:C7:00:BB:D0:D7:81:16:85:52:A5:F3:7C:7D:87:5D:33:CE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D72210B2B66D489E3ECF24BE9C6C684F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8QxFxwC70NeBFoVSpfN8fYddM84.roa
Signing time: Thu 09 Apr 2026 12:04:21 +0000
ROA not before: Thu 09 Apr 2026 12:04:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202051
IP address blocks: 151.245.163.0/24 maxlen: 24
151.246.238.0/24 maxlen: 24
151.247.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:21:0b:2b:66:d4:89:e3:ec:f2:4b:e9:c6:c6:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 12:04:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f10c45c700bbd0d781168552a5f37c7d875d33ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:75:75:a3:2c:1b:79:95:b9:6f:bd:aa:4d:
4d:dd:bd:0a:c7:c2:bf:f0:2a:d5:16:23:13:66:30:
34:09:ef:68:ad:97:85:5c:75:ab:de:c6:1b:40:3e:
41:70:2a:f0:f6:63:54:eb:c5:1b:2e:62:da:d2:d2:
7e:cf:1d:b9:67:e5:c2:72:9e:8d:32:73:65:99:5b:
be:c3:6d:d8:1d:a5:9e:f1:e7:41:3e:74:c0:06:5c:
d0:fc:74:8d:d2:2c:f0:86:2c:9b:fc:03:89:58:34:
5c:3b:dc:20:c0:c9:5f:ed:28:e1:12:f2:f3:9e:6f:
4e:1d:a9:7e:11:66:f2:87:a6:ff:2c:b9:ba:4b:d6:
5f:0a:86:54:f6:a4:23:27:b9:ef:0f:e5:6e:1c:35:
bf:ed:10:60:42:f5:e9:1f:5f:37:a1:c8:37:88:19:
57:15:f6:68:15:2e:08:61:3e:90:b6:b8:73:1e:6a:
e9:8e:e3:fe:60:d2:ce:ea:a6:3f:c8:ba:6a:b7:46:
cc:e7:70:72:62:a0:8b:da:9a:67:76:13:60:80:ce:
c4:56:c1:3c:98:79:2c:60:2d:ef:de:91:a2:9d:6c:
64:6b:f4:90:68:49:30:48:d1:e7:1b:7d:04:d5:2f:
c8:97:17:6f:07:b8:7c:6c:b7:36:4d:97:f6:fd:1a:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0C:45:C7:00:BB:D0:D7:81:16:85:52:A5:F3:7C:7D:87:5D:33:CE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8QxFxwC70NeBFoVSpfN8fYddM84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.163.0/24
151.246.238.0/24
151.247.25.0/24
Signature Algorithm: sha256WithRSAEncryption
36:c1:37:19:36:cb:83:f3:9e:4f:1f:10:4c:52:ef:17:3b:4d:
03:6e:ad:34:65:d0:a2:d0:81:42:65:3c:9b:6b:e7:66:94:a5:
18:3a:78:8b:ea:18:16:c5:f5:5c:9e:f6:14:36:bc:ea:5f:5f:
68:1b:c5:0b:24:5d:d4:49:fb:2a:e9:21:e9:2d:91:3b:7f:14:
a2:ac:a4:93:50:5b:68:8e:a4:7d:d0:25:c6:04:83:4b:6c:24:
07:61:ec:13:51:a3:c0:2d:60:1e:66:ff:67:3f:79:c5:36:8f:
df:5a:97:3b:ad:63:dc:5c:0a:1f:25:08:60:3d:18:2c:2a:06:
6e:92:18:b6:c3:37:c0:54:6b:86:23:bb:2a:64:f4:e0:e7:d3:
a8:0d:4b:ac:dd:29:dd:06:41:35:e8:a3:fa:24:d3:08:ae:3f:
cd:2c:ee:da:ac:7d:e5:2e:cf:30:50:64:b4:17:5d:f5:ee:64:
4e:c9:bf:3c:98:00:a0:f9:9b:a4:04:f1:4b:ea:6d:e9:25:a8:
5b:89:5d:1d:a8:e4:1b:43:dc:1c:66:37:22:80:c4:33:36:7f:
cc:25:04:97:11:7f:fb:d6:ed:c8:6f:0b:2c:e8:21:a3:94:d8:
d9:f3:05:61:44:db:fc:94:97:3f:53:c4:73:e1:a0:bc:e2:ff:
65:cf:3c:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:08 2026 by rpki-client