Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UM8_ckMBy8onMJ5UNG07ZNj6rGA.roa
File: UM8_ckMBy8onMJ5UNG07ZNj6rGA.roa (raw, json)
Hash identifier: hPmcwchEJTq8NaSebAf7g97pIpblN4uZARdweLWP6/E=
Subject key identifier: 50:CF:3F:72:43:01:CB:CA:27:30:9E:54:34:6D:3B:64:D8:FA:AC:60
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A934DC6FF8912632EFD7B97452685823
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UM8_ckMBy8onMJ5UNG07ZNj6rGA.roa
Signing time: Wed 16 Sep 2026 07:53:28 +0000
ROA not before: Wed 16 Sep 2026 07:53:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 151.246.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:34:dc:6f:f8:91:26:32:ef:d7:b9:74:52:68:58:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:53:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=50cf3f724301cbca27309e54346d3b64d8faac60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:8e:fa:9c:1a:73:fa:9f:d1:95:d9:9d:a9:e6:
74:be:66:50:b1:23:ca:4f:1b:95:b3:46:44:9b:88:
88:3a:54:c4:db:d4:1c:7c:08:a3:69:72:4e:f4:4a:
b7:4a:47:a8:77:a8:02:f6:1e:c6:67:15:3e:df:7e:
c7:c1:df:d0:54:bd:1b:49:7d:54:49:f8:cf:09:05:
77:7f:78:bd:dd:35:d6:8d:8d:39:0c:73:f1:c8:02:
60:ac:72:f8:c0:18:b7:da:80:34:41:ff:e5:56:3d:
52:9b:c3:c3:4d:c8:7e:50:7a:28:5c:c5:1c:81:97:
0b:c5:57:4a:40:ba:06:12:a9:ef:48:ac:c1:3f:76:
df:26:92:e4:25:83:42:5d:69:a5:af:b1:10:53:ca:
4e:41:ad:95:6a:d0:a9:ea:84:51:04:06:84:04:f3:
0e:90:a6:79:9c:a6:a1:3f:b4:e0:b1:df:55:bf:e5:
14:9d:e3:ed:30:9c:f1:61:41:a3:5d:ec:0b:b3:9b:
a2:40:a2:e1:b7:36:32:eb:0f:9a:33:3f:40:ca:4e:
5a:e0:62:42:fc:33:f6:24:ec:5c:1b:cc:d7:4f:e3:
18:f8:f8:7e:c5:e9:c1:4b:2c:22:fc:78:25:49:85:
d1:2b:f3:31:b9:dc:85:78:74:3c:f0:ab:d2:3c:9f:
91:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:CF:3F:72:43:01:CB:CA:27:30:9E:54:34:6D:3B:64:D8:FA:AC:60
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/UM8_ckMBy8onMJ5UNG07ZNj6rGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.151.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d2:da:2c:d5:88:f4:3e:b4:9f:ba:24:08:d5:92:84:52:e2:
99:85:07:47:02:4a:51:10:27:0e:db:a4:a7:1c:85:52:11:ed:
df:f8:bc:53:3f:9d:71:36:38:42:cd:79:3f:76:f3:7c:45:ed:
06:23:eb:36:2a:e5:44:1d:c5:ce:d2:dc:64:4d:7c:04:1e:db:
36:b6:a6:8a:ca:bb:ec:71:ad:ca:3d:1e:22:77:72:b9:81:4d:
d3:c8:02:7c:02:79:d1:da:c2:29:49:e0:b8:18:90:f2:43:86:
38:9b:51:c7:d6:2c:63:c7:0c:b8:fa:e4:1d:30:7e:46:00:4c:
fd:93:bf:c1:e4:88:ef:a2:a5:51:2e:f2:21:b0:97:b9:35:fb:
b9:32:0e:c7:2b:c3:24:24:30:5d:7c:3b:29:92:16:77:5f:7c:
02:94:4a:0d:e2:f2:72:32:99:b5:2a:98:41:fe:a9:73:31:dc:
7d:c0:44:d0:6e:e2:5a:b9:16:ff:23:a9:ad:44:32:5f:a3:56:
47:c1:fe:3f:2e:16:51:97:9e:63:95:97:8b:a4:ec:8a:9e:25:
fd:c3:fa:47:d8:eb:5c:b4:4e:27:69:68:a1:a0:18:10:4b:75:
91:fb:4e:2b:81:45:52:c5:be:69:e6:88:a1:9b:af:53:fe:2a:
4a:5f:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:00 2026 by rpki-client