Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADd1BfhDxm7oPiY2_WzpfBtPWM0.roa
File: ADd1BfhDxm7oPiY2_WzpfBtPWM0.roa (raw, json)
Hash identifier: sBTFw/dWHuJdNZlkyvkeJtXF8YpgF7RD/VXpwuOfiIQ=
Subject key identifier: 00:37:75:05:F8:43:C6:6E:E8:3E:26:36:FD:6C:E9:7C:1B:4F:58:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D3322E97594E7924E031E30EAB3760137
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADd1BfhDxm7oPiY2_WzpfBtPWM0.roa
Signing time: Sat 28 Mar 2026 06:30:19 +0000
ROA not before: Sat 28 Mar 2026 06:30:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205772
IP address blocks: 151.247.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:22:e9:75:94:e7:92:4e:03:1e:30:ea:b3:76:01:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 28 06:30:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=00377505f843c66ee83e2636fd6ce97c1b4f58cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:59:c4:7a:f6:e7:10:51:a5:96:09:91:9d:78:
b9:b0:66:f8:08:55:3b:96:d8:1e:f7:40:59:db:70:
2a:32:3f:35:c9:94:01:7a:65:7d:cf:56:f9:43:c1:
3f:c6:70:42:fd:f8:db:dc:61:b3:02:85:a8:46:c8:
c6:da:16:4b:ca:03:08:34:b0:e7:fe:53:8e:74:dd:
40:f8:7b:d3:93:53:31:1f:b8:9a:60:3c:7c:55:1f:
d2:ce:e5:b7:de:06:d5:8f:cc:cf:ca:ca:67:ad:ef:
cc:2d:b8:a0:e3:68:ed:2e:d9:2e:86:3d:b1:aa:cf:
91:2f:54:65:3d:a8:6a:9c:af:22:fe:c6:29:82:11:
7f:da:e2:7d:1b:df:1e:57:ed:d3:60:0e:6d:62:42:
38:1c:bc:42:f1:8b:5e:b4:27:9a:2b:bd:47:02:ac:
a2:90:59:7d:0a:75:77:34:bc:df:9b:e3:ea:2b:10:
23:da:91:b0:d3:9d:7b:6e:7b:3e:9c:0f:f3:59:1c:
eb:b9:14:91:3e:67:f8:24:d4:bb:a1:ef:15:6a:15:
97:df:fc:b8:0e:9f:85:49:79:71:17:10:96:8d:ba:
08:1e:6f:f6:a0:18:af:cb:5d:a6:d2:7a:cb:45:83:
8b:e1:e0:5f:a1:19:52:8c:19:fd:bb:df:9b:24:a7:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:37:75:05:F8:43:C6:6E:E8:3E:26:36:FD:6C:E9:7C:1B:4F:58:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ADd1BfhDxm7oPiY2_WzpfBtPWM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:a1:d3:c6:9d:76:b0:64:83:0e:1b:2e:fb:0d:c7:bf:e7:7b:
38:11:5b:51:39:a4:6c:7f:c6:68:96:42:47:78:72:cf:b6:c5:
83:b6:a6:4f:fe:52:0d:cf:3a:03:34:3c:b2:61:fa:f5:ae:f3:
67:63:1c:bc:27:a6:17:82:43:29:39:63:b2:8c:d5:09:65:b9:
5e:82:d4:8c:94:16:1b:5d:31:97:a5:d1:30:1a:de:19:b5:80:
8c:72:ec:86:78:59:b0:a4:3f:d1:95:10:6f:4d:2c:b7:17:32:
52:03:5d:f9:eb:fd:be:0b:ee:05:d8:53:9d:80:5c:5e:6f:60:
c4:a7:cb:26:80:63:ec:b3:48:24:6c:65:f2:99:16:55:57:1a:
20:32:f1:f1:78:23:40:e0:59:94:f6:71:a1:8a:e0:51:cd:20:
89:ff:70:02:24:0d:36:85:c3:c7:94:e1:73:57:9f:70:1a:f3:
aa:64:f3:bd:f9:1d:c7:d8:f5:b7:8f:41:a7:51:79:14:ec:57:
1c:9b:b4:90:bd:40:a9:da:db:8d:2e:0e:0e:44:64:5e:1c:dd:
62:4e:65:1f:6b:1a:25:5b:06:21:ac:fd:b5:18:3c:26:6c:b1:
c7:36:9b:6f:a6:92:35:97:b5:57:b6:2f:61:8a:af:21:8e:4c:
f2:0e:7e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:30 2026 by rpki-client