Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Kp_iI_BCuP5r2Bk-HH6xndnzWw.roa
File: 9Kp_iI_BCuP5r2Bk-HH6xndnzWw.roa (raw, json)
Hash identifier: VkgZqu/haQkQbSJynVw7PQKJUNFHxAvGwdLu8zsmbMM=
Subject key identifier: F4:AA:7F:88:8F:C1:0A:E3:F9:AF:60:64:F8:71:FA:C6:77:67:CD:6C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D48E51B2C048FCD7B15457233E811097C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Kp_iI_BCuP5r2Bk-HH6xndnzWw.roa
Signing time: Wed 01 Apr 2026 11:54:27 +0000
ROA not before: Wed 01 Apr 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 267121
IP address blocks: 151.247.210.0/23 maxlen: 24
151.247.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:e5:1b:2c:04:8f:cd:7b:15:45:72:33:e8:11:09:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 1 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f4aa7f888fc10ae3f9af6064f871fac67767cd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:3d:91:65:1e:64:2c:a1:49:84:8d:25:54:
e3:0d:b4:bd:7c:47:99:33:dd:f9:76:a5:49:91:00:
59:3b:77:31:07:e2:c9:98:32:bd:7c:fe:c0:52:a7:
e2:fb:d9:f5:3b:59:ba:1a:23:53:1e:d0:be:91:96:
85:c8:92:a7:12:d3:16:c9:4f:6b:49:ec:f9:04:e2:
b2:b9:09:2e:ed:dc:92:d9:29:d6:ba:37:c2:0e:1f:
d6:8e:85:a8:d7:31:c7:c0:ee:2f:fc:6d:93:ac:ec:
b0:bb:2e:d9:fb:6f:a4:54:cb:d2:90:40:49:b4:aa:
59:4c:ef:81:09:3e:28:b4:ad:eb:a0:2d:3a:a6:ec:
1f:5d:99:bc:de:46:f7:09:2b:3f:af:81:88:9a:de:
76:dd:7e:1c:3f:3b:35:bb:be:84:35:04:07:c7:14:
1a:f3:8d:96:46:8e:3d:21:11:74:ee:d7:3e:fe:d5:
9d:8a:c0:59:36:b5:02:a2:03:61:44:1f:4d:d2:7f:
bd:31:f3:2d:8e:d4:7b:af:a1:18:96:54:69:5b:59:
1c:f1:73:cc:c8:46:3f:e6:c8:ef:fc:29:8a:a2:70:
ed:f8:6d:de:f2:88:00:a8:53:d2:2d:56:1e:04:c2:
a5:b6:ea:d9:db:c8:b0:58:56:6d:fe:85:c4:9d:60:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:AA:7F:88:8F:C1:0A:E3:F9:AF:60:64:F8:71:FA:C6:77:67:CD:6C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Kp_iI_BCuP5r2Bk-HH6xndnzWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.210.0/23
Signature Algorithm: sha256WithRSAEncryption
48:5a:bb:65:0c:68:0b:5d:f7:21:62:4e:bf:40:ee:ed:42:d0:
34:1b:5a:e2:61:8f:ca:10:de:fc:57:75:e3:5d:e3:e3:93:30:
d1:ed:70:0c:22:32:92:4b:16:80:9c:e8:3e:d6:ac:d4:81:1c:
ee:21:61:cb:9c:2f:38:93:52:84:cd:42:eb:6d:d2:a5:45:dd:
cb:ce:2e:32:b2:c3:91:30:4f:c7:1b:9b:65:26:22:d2:01:13:
cb:13:b0:bd:18:5c:72:b1:ab:79:a9:7a:7d:b2:43:f7:a1:f1:
09:2b:0f:2f:4b:89:76:fe:ac:46:80:f7:da:75:b8:b3:87:62:
04:76:31:91:28:41:ae:3d:e1:31:62:10:e1:27:c9:58:97:a4:
e0:10:7b:c4:ff:34:f3:b5:fd:c5:a5:3c:a8:84:b6:8c:f4:e5:
1e:fb:e6:26:0a:9d:bd:aa:ea:11:bb:d6:4e:86:3c:af:e8:d7:
b9:e7:ad:0e:bf:15:85:8a:33:9a:6e:5c:36:e6:c3:fb:06:79:
2c:b4:69:c3:ac:94:91:12:91:d1:5a:b8:c9:be:7d:74:05:14:
f2:ea:28:7f:20:56:70:09:55:f8:d3:21:a9:f6:79:53:d2:bf:
11:db:a3:03:77:25:be:2c:16:45:2e:7a:e4:a2:69:a4:cc:67:
bc:3c:8c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:55:33 2026 by rpki-client