Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vVqfQRZW1NF3QeP-bZvn6Z0lDs.roa
File: 9vVqfQRZW1NF3QeP-bZvn6Z0lDs.roa (raw, json)
Hash identifier: SMLatJqIX+ptgj10rw10lJI5flonp1BGBjAE2wcVzwc=
Subject key identifier: F6:F5:6A:7D:04:59:5B:53:45:DD:07:8F:F9:B6:6F:9F:A6:74:94:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A47D49BBBB4E496908661C3376A6517E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vVqfQRZW1NF3QeP-bZvn6Z0lDs.roa
Signing time: Tue 15 Sep 2026 09:54:29 +0000
ROA not before: Tue 15 Sep 2026 09:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135682
IP address blocks: 151.242.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:7d:49:bb:bb:4e:49:69:08:66:1c:33:76:a6:51:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 15 09:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6f56a7d04595b5345dd078ff9b66f9fa674943b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:ef:57:c1:1d:23:88:0b:f4:ad:10:51:cc:
5a:0a:e8:10:1e:f5:f9:26:ca:79:92:ed:c8:5a:32:
99:ee:85:d2:1e:3a:5f:9d:d1:4e:bc:95:72:10:00:
c8:86:bc:e7:59:89:6c:f6:e0:79:6d:bb:46:58:53:
ac:88:f3:d3:f9:8d:af:a2:66:90:9a:85:5b:a2:9e:
1b:6d:08:16:62:0c:30:c0:f7:cc:00:3d:11:9b:f8:
eb:c0:d8:5b:9e:72:49:8b:e3:c8:a3:cc:80:72:72:
09:d5:cb:77:3f:f1:eb:d1:60:96:ae:d3:46:f4:64:
93:8b:a7:d3:5d:e6:ac:6b:ea:2c:34:3d:1f:ea:00:
2b:cd:eb:b5:49:e1:ff:bb:65:bf:b2:54:c7:15:2b:
43:07:34:58:94:0d:f3:d2:0f:1f:f4:1b:68:13:8a:
78:a9:eb:fd:3b:34:27:a7:20:2c:9b:ac:c5:dd:ed:
df:a2:46:d8:33:8d:40:d0:84:b9:9b:5d:be:2d:88:
7f:fd:f2:c7:24:64:40:00:de:e9:6f:33:e5:c3:e3:
cf:82:98:4d:a6:6e:08:65:a5:6c:fd:35:df:2d:57:
73:31:45:34:76:08:18:63:fd:2c:20:df:8c:4d:32:
8a:fe:c2:24:15:c8:7c:9b:f2:47:83:6c:df:e2:41:
5c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:6A:7D:04:59:5B:53:45:DD:07:8F:F9:B6:6F:9F:A6:74:94:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9vVqfQRZW1NF3QeP-bZvn6Z0lDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:ce:d4:40:b5:f2:6f:31:29:43:7c:f6:f9:06:5f:73:fa:c4:
be:f2:f6:5c:98:8c:cd:3a:95:86:8e:1a:3e:8e:1c:74:fc:3e:
86:bb:4f:3f:1a:99:74:90:f8:a0:7a:16:74:00:01:9c:be:b1:
b4:d2:f8:8c:d7:86:8f:02:64:78:80:f2:f3:67:2d:8d:f0:54:
92:6a:5c:67:40:5d:5b:cf:e3:39:b2:95:dc:24:c2:bc:30:e3:
fd:59:3f:7d:cd:03:5c:5f:22:2c:69:58:96:c3:ce:15:d3:a4:
a9:19:f1:70:82:9b:93:6a:55:2c:59:fd:f9:c1:5b:e4:23:9b:
ac:3a:4e:8c:50:90:4a:85:8f:05:38:46:da:7a:8c:83:4f:76:
8a:23:2b:d0:c6:38:c1:29:c6:95:d8:12:72:3b:43:59:3d:20:
e7:88:fa:5d:94:22:60:03:b0:8a:58:e6:16:c3:54:fd:d0:4d:
33:96:a4:9a:67:e7:ab:28:62:e3:da:85:af:33:6f:83:86:8f:
7b:25:32:c4:0b:9c:d3:52:e6:a6:0b:7a:fa:7f:db:cf:09:88:
59:3c:74:a9:18:c5:18:8b:5d:ad:d1:68:71:4a:d1:aa:7c:76:
5d:a7:5b:b9:02:79:e9:bc:34:b7:94:f1:43:fa:f0:a3:75:e5:
35:06:95:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:28:50 2026 by rpki-client