Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iELvuyYvIiNOujegCq1hCYFuXs.roa
File: 8iELvuyYvIiNOujegCq1hCYFuXs.roa (raw, json)
Hash identifier: w/+lBtqArvhGO7xrkvMCJyecnfRGzLD6Ukc3TEFYwRE=
Subject key identifier: F2:21:0B:BE:EC:98:BC:88:8D:3A:E8:DE:80:2A:B5:84:26:05:B9:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E648D3E77693DC3F53D2DA572440F6CC9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iELvuyYvIiNOujegCq1hCYFuXs.roa
Signing time: Tue 26 May 2026 13:50:38 +0000
ROA not before: Tue 26 May 2026 13:50:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151380
IP address blocks: 151.243.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:8d:3e:77:69:3d:c3:f5:3d:2d:a5:72:44:0f:6c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 26 13:50:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f2210bbeec98bc888d3ae8de802ab5842605b97b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:5b:da:09:ca:fd:7e:63:1e:c8:5d:5a:f4:
e9:2c:3a:fb:e3:44:04:90:88:65:7e:13:e3:e8:be:
a4:0d:cf:f5:f7:c9:1c:d3:b7:47:ae:bf:5e:f0:af:
58:bd:14:c3:66:01:d7:ae:3f:ff:67:e3:af:e8:80:
2a:d6:7f:e2:ab:63:10:62:bc:63:db:06:29:10:96:
99:b1:34:75:16:67:25:a2:6c:d1:67:5d:38:04:61:
f6:3f:a2:98:f5:74:4b:f6:11:cd:99:39:d3:44:07:
cc:fe:9f:37:3b:7c:65:66:89:95:a8:aa:38:4d:80:
bf:87:66:d4:81:75:e0:8a:d1:3f:46:89:69:39:1c:
81:91:9b:14:c9:6e:6b:d8:aa:c8:8c:00:4c:d5:b9:
99:86:a8:15:1a:2b:50:ef:c4:22:54:eb:a6:c5:bf:
60:b1:3c:23:31:16:de:c7:90:8c:81:35:b7:a0:86:
0f:ce:24:75:be:b6:62:8e:e2:c8:92:c1:a0:ff:0c:
2b:35:25:7c:37:8b:1c:d1:9f:a5:c1:c4:e6:23:18:
76:97:0d:0c:60:5d:af:a2:74:ce:d9:55:c5:69:50:
4b:f7:38:09:49:05:af:10:e3:10:39:46:25:2a:5c:
f0:7f:70:4c:34:d9:b1:62:1b:cf:8f:b9:0f:17:53:
1e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:21:0B:BE:EC:98:BC:88:8D:3A:E8:DE:80:2A:B5:84:26:05:B9:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8iELvuyYvIiNOujegCq1hCYFuXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.192.0/24
Signature Algorithm: sha256WithRSAEncryption
42:81:dd:e4:b6:88:27:58:2c:c1:8a:d9:77:c0:d4:46:57:44:
2c:38:4b:f9:4e:05:c6:ad:fc:c8:34:56:1a:b1:47:f5:b5:45:
a6:52:cc:c1:70:c4:3c:bd:18:fa:69:96:1a:ee:6d:bd:cd:49:
e5:f1:06:05:e0:e7:c9:ac:40:ed:be:18:85:96:dd:14:4f:75:
e9:e2:0d:e6:2d:f1:bc:ee:ea:cd:01:fb:57:8f:2d:a1:38:52:
08:d9:0c:21:b3:21:4c:da:e9:6e:d4:14:7a:62:db:e8:0f:4b:
ee:b3:3c:ac:73:a4:43:fe:71:d9:fb:29:e0:54:1d:2d:fd:3a:
5d:d9:2e:29:51:72:2b:56:45:ff:f8:f7:0c:da:54:53:61:a2:
87:32:9a:79:42:bb:57:6b:88:1f:da:d9:f2:18:9d:b4:22:a0:
db:17:a4:a9:49:3a:88:ab:16:ed:4a:46:5d:54:41:92:11:e8:
c0:df:ff:35:f0:4b:7c:1f:13:e6:27:7a:0e:be:22:62:8d:34:
f0:56:87:ef:89:94:4f:7b:57:a1:74:87:bd:e1:a6:2d:29:6f:
cc:4f:22:07:a2:94:66:8a:aa:76:70:4a:f0:c2:58:2e:b6:07:
e1:f6:ba:ee:b7:58:38:9b:7e:0a:6d:86:02:61:7a:a1:3d:0a:
0c:53:65:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:40:24 2026 by rpki-client