Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9pGKpgkB3HmcLhmC2OwzM-RLJ8Q.roa
File: 9pGKpgkB3HmcLhmC2OwzM-RLJ8Q.roa (raw, json)
Hash identifier: CXxbcK/myw3FAXGSOwGJIZWxWcYX4A2P5LiFdy3a2BQ=
Subject key identifier: F6:91:8A:A6:09:01:DC:79:9C:2E:19:82:D8:EC:33:33:E4:4B:27:C4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA0FFFE1483D97E815CF68DD61A3A5CA5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9pGKpgkB3HmcLhmC2OwzM-RLJ8Q.roa
Signing time: Sun 07 Jun 2026 07:33:11 +0000
ROA not before: Sun 07 Jun 2026 07:33:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400308
IP address blocks: 151.247.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:ff:fe:14:83:d9:7e:81:5c:f6:8d:d6:1a:3a:5c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 07:33:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6918aa60901dc799c2e1982d8ec3333e44b27c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3e:11:10:5e:88:e3:06:d8:ad:df:9d:6f:41:
f2:e1:f5:aa:5a:c4:ca:62:49:ba:a5:b8:37:6c:ae:
cc:3e:ef:6f:25:71:8e:e8:8c:60:7e:35:3b:e9:dd:
80:0c:75:e9:6b:f7:45:c1:41:6b:83:25:ea:4f:d1:
d4:cf:88:68:5d:64:af:62:88:d4:3a:05:23:dd:11:
ca:f1:77:36:3f:8c:22:fc:4e:dd:f1:8f:d0:8a:20:
0c:7e:91:ad:c0:f6:ff:6e:68:c9:12:07:4b:43:57:
90:b0:b0:58:a1:d9:d8:66:59:bc:35:44:4f:d0:d7:
ea:cf:b7:10:37:ec:99:6e:ad:9e:29:17:a9:24:a5:
56:22:6b:c2:c2:00:92:3b:d2:16:5b:e0:53:6f:62:
69:c7:25:e4:62:bb:d9:cc:73:25:80:df:58:16:46:
a7:2a:38:66:1d:b0:1f:47:66:3c:aa:4d:48:6d:e2:
4c:1a:9d:d5:1e:1a:db:57:dd:69:5c:c3:50:39:5b:
7b:ca:ae:ae:01:07:a0:a7:0a:ed:6d:4f:b2:c5:f4:
7a:af:21:51:c9:db:a8:67:51:7c:53:b3:bd:5e:df:
24:3c:99:c2:85:47:f6:b8:98:4e:93:6c:ee:68:65:
09:40:0c:a0:06:84:ce:c8:ca:9c:e0:0d:a9:84:e7:
2e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:91:8A:A6:09:01:DC:79:9C:2E:19:82:D8:EC:33:33:E4:4B:27:C4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9pGKpgkB3HmcLhmC2OwzM-RLJ8Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.3.0/24
Signature Algorithm: sha256WithRSAEncryption
54:a0:bf:82:0a:3c:70:23:f6:6a:de:be:c4:d6:fa:33:38:08:
d3:88:09:78:9a:a4:8b:90:09:a7:15:83:ea:21:ed:b3:ed:6a:
86:91:2d:fa:ef:e1:ae:91:23:70:6f:9e:68:02:71:29:7c:0d:
5a:55:c3:a1:65:26:12:cb:e9:58:e8:22:f6:29:4c:06:0e:a3:
0e:a2:7c:b8:36:20:25:2a:bf:ad:d1:0c:d4:06:b9:5a:ee:78:
95:fe:af:7a:93:82:cd:b8:c9:c1:19:37:7f:2c:74:47:c9:0c:
9c:04:d8:cf:a8:d6:a9:66:72:51:89:44:a3:3e:82:d0:10:d2:
e6:9b:31:e5:70:77:27:1f:b8:74:8c:cd:ca:93:2b:b8:30:9f:
69:be:6f:34:d2:6c:fa:26:ab:4e:dd:17:c5:85:a2:86:6a:d2:
5c:f9:11:6c:e4:a5:9f:79:54:87:1a:97:cc:e9:77:a8:12:3f:
55:0c:6a:4c:ee:98:f7:58:77:61:79:cb:65:66:c4:67:26:81:
45:93:bb:86:aa:64:66:8c:a1:b4:a0:63:df:df:5a:66:42:75:
bb:d2:a9:a3:e1:7c:7c:ac:b6:71:75:04:91:22:a8:36:e9:9e:
60:51:03:59:1b:6e:40:2b:44:f6:f8:3b:54:cb:3d:7c:33:58:
db:78:4f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:03 2026 by rpki-client