Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EkueFB1R7LSumkHEK41Bf16NU0E.roa
File: EkueFB1R7LSumkHEK41Bf16NU0E.roa (raw, json)
Hash identifier: uvCIiravBrQKB43R/KlOZv72HIKIJO2uN//auPuzYWA=
Subject key identifier: 12:4B:9E:14:1D:51:EC:B4:AE:9A:41:C4:2B:8D:41:7F:5E:8D:53:41
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B51E2C3987A8EBF396AF68256F873F48
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EkueFB1R7LSumkHEK41Bf16NU0E.roa
Signing time: Fri 18 Sep 2026 15:24:08 +0000
ROA not before: Fri 18 Sep 2026 15:24:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40605
IP address blocks: 151.241.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 17:37:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:1e:2c:39:87:a8:eb:f3:96:af:68:25:6f:87:3f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 18 15:24:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=124b9e141d51ecb4ae9a41c42b8d417f5e8d5341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:75:e4:5e:5c:b2:4b:05:fc:95:c2:96:c7:2e:
b9:4f:68:a8:22:d9:72:bd:55:8a:1d:8c:fc:8b:27:
73:a0:20:dc:be:c2:ec:a0:98:3b:40:21:0e:63:e3:
97:02:bc:2e:e3:81:ba:f9:a2:eb:55:28:f9:f5:ae:
8c:64:b9:0c:a7:b7:28:e4:52:fd:e7:21:ce:08:97:
8e:31:61:55:91:b3:89:1b:86:3b:22:35:28:57:1d:
1b:a6:25:1d:3c:9d:39:26:d1:d8:4e:65:92:56:d3:
47:76:23:46:fe:ca:5e:29:97:70:41:5c:e8:cd:ca:
85:4a:d9:30:6c:58:94:9e:5d:cd:31:b6:06:da:c8:
ad:cc:60:31:c4:72:16:c0:7a:1d:16:94:85:eb:4d:
bf:8e:02:b3:5e:78:79:2a:67:1c:8f:ad:2a:60:f0:
9c:0a:a3:a6:71:4e:5b:97:5f:7a:b3:a3:62:25:0c:
8e:11:f1:7a:5a:4e:4c:62:de:ff:bf:ef:d9:9f:da:
4f:3a:29:1b:ea:ea:a7:5d:d0:30:d4:f2:36:a3:5b:
77:fc:d0:01:07:4a:da:08:8c:aa:40:6d:62:7c:4e:
5e:aa:c6:d1:25:7b:5c:12:a8:72:7b:73:e4:24:cd:
03:5e:99:d3:f9:0a:94:7c:7f:b2:0d:ab:67:da:a6:
9c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4B:9E:14:1D:51:EC:B4:AE:9A:41:C4:2B:8D:41:7F:5E:8D:53:41
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EkueFB1R7LSumkHEK41Bf16NU0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.40.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b5:75:00:db:23:7e:78:f6:c4:8c:51:72:a3:93:d9:12:ea:
98:e8:2b:9f:ce:26:79:d6:cd:fc:54:ec:a4:92:bf:30:9e:24:
bc:7d:db:44:bc:12:4f:25:57:3f:99:4e:75:fe:a3:e7:61:3d:
67:31:b4:a2:db:c8:5a:ef:f1:f4:e5:98:62:9d:f8:a4:b6:1e:
06:40:0f:54:98:b9:93:12:9c:71:d6:45:e6:a3:3b:96:76:51:
cd:d4:df:ce:f2:1c:5e:ce:c0:e1:1a:50:14:3b:81:33:b7:fc:
de:04:01:0a:9b:56:8a:7b:ae:6c:fd:56:1e:e6:10:99:70:67:
18:e6:93:bb:10:3b:50:d1:1e:34:a5:f2:b0:77:e5:67:17:09:
8f:1f:ac:45:e8:2a:c6:58:ab:2c:c2:38:d6:b3:0d:f4:72:e2:
e0:34:10:90:21:e6:60:f9:1c:7a:37:a5:cc:00:a3:a1:95:3e:
3d:85:68:b4:78:a6:94:a1:44:46:bf:19:a7:d9:31:bb:9d:a3:
34:28:ce:9a:6a:bd:00:27:e0:94:d3:01:f9:aa:1e:74:06:f4:
b1:5c:7e:d6:50:a6:b4:e5:40:71:21:9c:9a:b2:f2:fe:db:06:
e3:26:2b:11:cf:ce:e4:25:4b:ce:85:c5:7f:28:f5:c8:59:c9:
0e:aa:8b:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC1Hiw5h6jr85avaCVvhz9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE4MTUyNDA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMjRiOWUxNDFkNTFlY2I0YWU5YTQxYzQyYjhkNDE3ZjVlOGQ1MzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHXkXlyySwX8lcKWxy65T2ioItly
vVWKHYz8iydzoCDcvsLsoJg7QCEOY+OXArwu44G6+aLrVSj59a6MZLkMp7co5FL9
5yHOCJeOMWFVkbOJG4Y7IjUoVx0bpiUdPJ05JtHYTmWSVtNHdiNG/speKZdwQVzo
zcqFStkwbFiUnl3NMbYG2sitzGAxxHIWwHodFpSF602/jgKzXnh5Kmccj60qYPCc
CqOmcU5bl196s6NiJQyOEfF6Wk5MYt7/v+/Zn9pPOikb6uqnXdAw1PI2o1t3/NAB
B0raCIyqQG1ifE5eqsbRJXtcEqhye3PkJM0DXpnT+QqUfH+yDatn2qacNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBJLnhQdUey0rppBxCuNQX9ejVNBMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRWt1ZUZCMVI3TFN1bWtIRUs0MUJmMTZOVTBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/EoMA0G
CSqGSIb3DQEBCwUAA4IBAQC1tXUA2yN+ePbEjFFyo5PZEuqY6CufziZ51s38VOyk
kr8wniS8fdtEvBJPJVc/mU51/qPnYT1nMbSi28ha7/H05Zhinfikth4GQA9UmLmT
Epxx1kXmozuWdlHN1N/O8hxezsDhGlAUO4Ezt/zeBAEKm1aKe65s/VYe5hCZcGcY
5pO7EDtQ0R40pfKwd+VnFwmPH6xF6CrGWKsswjjWsw30cuLgNBCQIeZg+Rx6N6XM
AKOhlT49hWi0eKaUoURGvxmn2TG7naM0KM6aar0AJ+CU0wH5qh50BvSxXH7WUKa0
5UBxIZyasvL+2wbjJisRz87kJUvOhcV/KPXIWckOqouA
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:39:09 2026 by rpki-client