Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HFGJuRtosL7A8fMoiHkcauVJXTo.roa
File: HFGJuRtosL7A8fMoiHkcauVJXTo.roa (raw, json)
Hash identifier: Q//kyQU/EU9KE2Uq0uZ15FrqT3ezn22R+ZkcefIsKIQ=
Subject key identifier: 1C:51:89:B9:1B:68:B0:BE:C0:F1:F3:28:88:79:1C:6A:E5:49:5D:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD748DFF49314A9B17D94AE212C25C24
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HFGJuRtosL7A8fMoiHkcauVJXTo.roa
Signing time: Sun 20 Sep 2026 06:15:27 +0000
ROA not before: Sun 20 Sep 2026 06:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137517
IP address blocks: 151.240.120.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:74:8d:ff:49:31:4a:9b:17:d9:4a:e2:12:c2:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1c5189b91b68b0bec0f1f32888791c6ae5495d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6c:f7:56:4a:0c:5d:d1:12:58:2f:1d:d8:b0:
2d:df:d9:f7:4e:22:9c:53:19:63:61:7d:78:ac:95:
05:94:9e:51:e9:39:ff:19:ce:21:71:85:04:a6:8d:
11:72:a5:91:32:f5:9c:76:ff:04:04:8c:62:db:f8:
00:8a:63:0e:e8:1c:48:d6:d6:d8:87:40:cb:58:c2:
4f:fd:7f:f7:f4:7f:e1:ab:91:47:56:d5:61:cb:73:
03:37:c3:ee:5c:c9:93:4c:e3:15:5a:38:41:4c:f2:
e6:94:f5:26:09:31:52:ae:1c:04:15:64:1f:cb:15:
36:07:a5:42:03:79:89:c9:c1:0d:dc:3f:95:80:15:
08:1e:e5:7a:62:8a:0e:e6:70:c6:d0:02:1b:69:4a:
c9:2c:03:09:97:1b:5c:40:db:63:b0:2f:7f:ea:4f:
dd:e4:2e:a8:8f:33:a2:29:9f:31:74:a9:7d:44:15:
78:f6:06:1c:8e:ad:c3:87:c5:7b:9c:95:33:4b:13:
4f:31:61:e6:d2:d2:78:27:00:68:5b:bc:cd:2b:a5:
4e:73:55:95:44:75:c0:66:d4:2c:d5:59:62:30:10:
84:92:64:8f:d8:66:2c:73:7d:16:bb:c6:3a:9b:2e:
8f:2c:98:fc:44:73:b9:71:99:bb:8c:26:f3:85:e3:
13:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:51:89:B9:1B:68:B0:BE:C0:F1:F3:28:88:79:1C:6A:E5:49:5D:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HFGJuRtosL7A8fMoiHkcauVJXTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.120.0/24
151.241.20.0/24
Signature Algorithm: sha256WithRSAEncryption
70:45:07:64:1b:1a:db:35:18:1a:55:6c:c8:75:f4:8f:7b:84:
95:fc:af:74:38:c7:f6:a0:71:f7:6f:b2:d1:e4:a1:9e:05:b2:
6b:0e:af:3c:f8:5a:40:6f:be:24:f9:19:65:d8:d1:34:3a:e1:
4d:21:ca:1e:7b:5d:7c:3d:02:b5:cf:e7:9f:49:ee:2c:91:7c:
1d:e7:91:06:c2:92:6d:8c:92:a1:91:0d:df:67:cf:c6:6b:b8:
0e:e8:9d:99:ed:9e:23:03:9c:a4:db:ea:ed:44:38:94:47:6d:
e7:9a:fb:0e:c2:3c:d2:81:f4:a9:2b:a9:8f:8e:df:bd:70:3a:
ce:c4:87:de:a9:88:95:4c:96:ce:17:1f:db:95:eb:5c:4d:10:
16:66:3d:7b:1e:e6:28:68:f2:30:25:01:26:1d:f7:e5:e0:6a:
38:3e:db:14:03:a5:01:81:c7:72:70:7f:a2:9d:c5:85:e6:c6:
28:a2:56:3b:cf:ec:36:45:df:3d:e5:7e:e1:c7:5f:e7:58:03:
b3:aa:19:d9:24:06:90:a8:dc:c7:a0:b9:d7:5b:96:ac:2d:72:
77:35:14:ec:d2:09:15:d1:29:38:bc:e9:b3:d8:fa:d4:e6:d6:
86:6c:d7:0b:2a:19:24:00:11:22:3a:4a:12:44:b2:e6:95:00:
f0:16:5e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:54:43 2026 by rpki-client