Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HYhosAHtilYYaxo3JD5XBs1SrdM.roa
File: HYhosAHtilYYaxo3JD5XBs1SrdM.roa (raw, json)
Hash identifier: judiyz/Yu5k7gfV+Wlu0uNpOwrnaPxvV+XpUwgfnejk=
Subject key identifier: 1D:88:68:B0:01:ED:8A:56:18:6B:1A:37:24:3E:57:06:CD:52:AD:D3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D5EC820BBB7FB80F070F70C211A1D0825
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HYhosAHtilYYaxo3JD5XBs1SrdM.roa
Signing time: Sun 05 Apr 2026 17:54:27 +0000
ROA not before: Sun 05 Apr 2026 17:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 151.247.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5e:c8:20:bb:b7:fb:80:f0:70:f7:0c:21:1a:1d:08:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 5 17:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1d8868b001ed8a56186b1a37243e5706cd52add3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:55:79:ab:7f:2f:98:5f:a4:ef:f4:17:bd:2f:
75:47:12:1d:15:ed:5e:e8:0a:fd:b9:69:6b:b5:c3:
f0:b6:81:12:11:95:48:60:34:b9:4a:d8:1c:1d:36:
42:fe:d0:a9:72:4b:82:50:ed:07:f6:45:0a:2a:79:
c3:0c:9d:f8:c9:39:79:60:2d:e8:97:92:16:89:93:
bb:c0:f7:09:17:13:76:55:01:91:1b:27:dd:c4:0a:
a2:55:29:fc:e0:f1:99:a2:43:08:9d:92:45:0a:4d:
70:1f:57:7f:74:a6:45:0a:af:fc:41:06:5e:33:6c:
89:c3:6e:7e:aa:26:0c:80:e0:c4:cf:d8:2c:af:b6:
5d:04:d8:de:1b:bc:ec:64:d3:06:0b:bc:8d:64:6b:
c3:df:8b:e7:2e:97:aa:00:26:84:d0:1e:71:c9:b2:
5f:5a:37:2f:97:ce:1a:59:0a:95:27:39:c2:45:55:
34:c4:ea:cc:3c:2c:c9:eb:69:e7:97:27:f9:60:d6:
4b:55:f4:d2:5d:66:87:6b:48:b4:99:27:21:d4:fb:
95:5c:93:b8:3d:c9:3e:7f:e2:10:e7:53:29:33:3f:
38:8d:d9:76:d3:18:36:6d:c6:23:df:27:51:4a:71:
83:5d:62:4f:18:62:e4:c4:1c:09:91:d0:ab:76:68:
74:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:68:B0:01:ED:8A:56:18:6B:1A:37:24:3E:57:06:CD:52:AD:D3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/HYhosAHtilYYaxo3JD5XBs1SrdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.224.0/24
Signature Algorithm: sha256WithRSAEncryption
08:e4:13:b9:ab:cd:9d:ea:da:ce:e2:e8:8e:ed:f0:cc:39:1d:
77:42:f5:0c:61:5c:bb:a7:f5:1a:06:e6:fd:61:89:3b:cb:50:
02:17:50:2d:a5:b2:cc:58:31:6b:5e:aa:5b:a5:cf:b3:64:b8:
76:53:19:0b:12:3e:31:db:37:f8:d4:95:e2:5c:8f:0c:12:bb:
3d:5a:0b:81:f2:70:92:82:5d:07:8e:70:ed:c3:5a:af:1f:6f:
5f:d7:14:b6:f3:bf:a6:e7:ba:23:2e:10:18:88:1e:85:7a:9e:
a9:52:d8:e2:d6:be:2d:83:e9:b4:cf:b8:09:78:44:c2:c8:b1:
9b:21:53:22:d4:e9:98:73:89:0b:c3:cd:28:25:38:21:72:29:
72:38:ce:c8:cc:2b:db:89:c3:73:08:aa:7a:0e:c0:d7:e3:2d:
38:43:db:2b:16:23:17:02:8f:e9:21:8b:74:57:fd:e9:67:f3:
cd:7f:bb:21:9a:fe:90:52:69:e5:35:2f:ae:66:bc:49:59:7d:
50:9d:b5:12:89:67:be:e2:0e:64:dd:f6:4f:fa:23:c8:e0:ad:
95:59:4e:cc:95:b7:fd:0e:cb:05:f4:c9:b5:27:0e:ec:4d:bd:
54:6d:c1:d0:94:0b:16:8a:80:5c:cb:f4:17:54:bd:c4:18:8c:
7d:97:fe:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:35:26 2026 by rpki-client