Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hk7kNeb74-JCsT2fPR3MVf2GO-E.roa
File: Hk7kNeb74-JCsT2fPR3MVf2GO-E.roa (raw, json)
Hash identifier: /FGR3is7xqCTlsQWEtCqrHvslPKF3QCRaAUCipFea8A=
Subject key identifier: 1E:4E:E4:35:E6:FB:E3:E2:42:B1:3D:9F:3D:1D:CC:55:FD:86:3B:E1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C2DBB4882648E2B86AF0245C993E0866F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hk7kNeb74-JCsT2fPR3MVf2GO-E.roa
Signing time: Thu 05 Feb 2026 12:16:14 +0000
ROA not before: Thu 05 Feb 2026 12:16:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136691
IP address blocks: 151.243.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:43:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2d:bb:48:82:64:8e:2b:86:af:02:45:c9:93:e0:86:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 5 12:16:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1e4ee435e6fbe3e242b13d9f3d1dcc55fd863be1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dc:9b:61:ef:6a:c4:8c:d6:ae:d9:db:6e:0e:
28:b4:16:fa:61:bd:79:7e:03:73:6e:24:e8:8e:3e:
ab:35:26:41:d3:41:88:2b:dd:bc:aa:60:44:35:05:
a8:2a:c3:50:22:a3:0d:e6:17:d2:f0:b7:51:b1:f9:
62:6a:70:67:33:98:78:48:7b:0e:08:e5:c8:7a:68:
0a:62:16:5b:24:e5:37:37:ff:c0:3f:ac:de:1e:82:
b3:0c:81:2a:ac:9c:c8:d2:79:05:1d:cd:f6:92:14:
a2:9c:ad:fa:1d:11:65:8a:78:62:73:7c:19:c7:6f:
a9:d0:a5:82:31:ab:ca:91:70:95:90:66:ac:0d:17:
23:c1:6b:fe:ed:59:3e:7b:18:42:20:25:82:c2:1a:
8d:04:b5:ec:b6:2c:47:34:cd:6a:66:64:93:b2:41:
9b:98:77:0a:4d:a5:93:d0:ee:95:69:20:48:92:40:
1d:50:fe:82:bd:f4:b8:77:48:3f:06:48:e8:8a:97:
7f:6d:0b:f1:cb:e0:a2:81:96:3e:f2:2e:5e:5a:3f:
f3:b0:58:b1:7b:83:56:2e:42:0e:35:0a:fb:d7:78:
1d:06:57:71:08:5e:5e:76:58:8b:b6:9a:95:f9:ca:
94:cd:cb:d8:55:75:c2:87:c4:4f:2b:18:27:44:23:
33:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4E:E4:35:E6:FB:E3:E2:42:B1:3D:9F:3D:1D:CC:55:FD:86:3B:E1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Hk7kNeb74-JCsT2fPR3MVf2GO-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.40.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:c8:bf:9d:14:04:66:77:94:e0:64:e8:df:1b:eb:0b:85:38:
e2:85:f5:62:bd:00:96:b6:65:04:a7:7f:a9:39:0f:4e:2a:fd:
ba:99:df:8c:bf:b4:fa:d4:52:a7:00:d5:4d:99:ac:a4:01:83:
95:c2:66:04:15:33:f1:00:69:89:46:d4:85:1e:7b:29:97:17:
54:67:88:1b:e0:aa:b2:cb:e7:42:56:80:12:39:f1:c2:59:67:
69:c0:96:6a:bd:f3:a8:b3:bc:b1:af:2e:bc:cb:1a:45:eb:1a:
4f:fa:2e:61:aa:38:28:fe:17:f4:6e:3c:77:ce:87:13:59:0f:
ec:86:ee:88:1c:ec:b3:b4:f0:a1:5a:24:23:41:16:b2:17:8a:
82:29:59:89:fe:b6:30:0b:cc:55:69:33:43:f0:3e:0e:fb:75:
be:5c:7f:e0:26:e7:94:51:66:b6:0f:82:1e:5e:f7:91:5f:84:
29:a8:1b:e1:93:65:60:27:24:ea:8d:a4:95:4e:d5:91:5b:a4:
48:15:6f:6b:e6:82:b4:9e:1b:d7:ca:e3:19:18:ac:03:6c:9f:
e4:35:32:4e:26:82:de:46:3c:3f:4a:0e:cb:42:c7:97:5a:56:
4e:15:2b:19:83:c2:bf:34:87:bd:fb:72:ad:aa:1b:41:b9:87:
42:2e:ab:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:35:00 2026 by rpki-client