Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_FEtMltlr4I_TOJR_oqazSyFFck.roa
File: _FEtMltlr4I_TOJR_oqazSyFFck.roa (raw, json)
Hash identifier: Z9sH5hkaPSmlKqHUVoMe7gwTDW0FnLq0BxdfCe6siUY=
Subject key identifier: FC:51:2D:32:5B:65:AF:82:3F:4C:E2:51:FE:8A:9A:CD:2C:85:15:C9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09EBE2FB2CAB2CFF71CF0E34216275957
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_FEtMltlr4I_TOJR_oqazSyFFck.roa
Signing time: Mon 14 Sep 2026 07:07:39 +0000
ROA not before: Mon 14 Sep 2026 07:07:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219427
IP address blocks: 151.243.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:be:2f:b2:ca:b2:cf:f7:1c:f0:e3:42:16:27:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 07:07:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fc512d325b65af823f4ce251fe8a9acd2c8515c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:35:b7:13:18:1c:96:69:53:8c:11:a0:15:
d6:e7:a4:7b:47:f2:e6:34:96:fd:70:53:ad:be:a5:
5d:b7:2b:9a:b5:69:ec:69:d6:aa:3b:d6:55:fa:42:
09:18:4a:33:fd:c4:04:e3:c6:95:cf:0f:02:97:b6:
6c:f4:0f:31:68:b1:29:bd:80:3e:ca:62:7a:08:3f:
31:22:67:88:e6:98:fd:70:3d:21:22:63:c3:25:fc:
92:5f:09:d9:c7:65:02:5c:ee:2e:b3:7b:bd:67:50:
22:92:0e:80:da:7c:8c:53:fa:9e:18:00:9b:05:f0:
27:30:0c:fd:c3:cb:30:2d:0f:30:70:8c:3d:dc:be:
16:23:47:0a:96:4e:3c:8d:d8:ca:7d:56:91:75:bf:
77:48:e0:24:4e:37:08:e4:b5:d6:a5:c4:cd:a7:1e:
35:05:ea:31:55:79:79:ac:f0:58:1d:a8:55:fa:89:
31:9b:9d:9f:fe:d3:9d:c3:ea:0c:8e:94:3b:7c:8a:
0c:5b:1a:f1:ae:a5:bd:ca:03:91:1b:3f:dc:1b:1f:
11:b5:bc:84:51:f0:3a:c3:4a:7e:2d:27:42:f9:91:
f4:36:2b:68:2a:4f:71:a3:14:cb:55:0d:de:20:36:
72:45:70:fa:cf:9e:d2:a9:18:01:cf:dc:03:0f:c2:
83:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:51:2D:32:5B:65:AF:82:3F:4C:E2:51:FE:8A:9A:CD:2C:85:15:C9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_FEtMltlr4I_TOJR_oqazSyFFck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.9.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:d8:e5:1a:cf:22:4d:04:8a:bb:68:d6:9a:4c:92:a7:6a:cd:
74:6c:12:7d:8a:46:c5:09:1a:1d:b1:d1:81:c0:62:e9:f2:73:
5d:48:70:f2:c6:20:05:9f:dc:e3:2f:4e:bc:4b:56:be:1f:f8:
03:b5:d3:8c:36:ee:c8:97:3f:b9:a6:f6:06:73:f3:78:57:59:
b9:ec:01:f9:a2:99:e8:bd:57:64:3f:1a:ee:7c:42:3f:6a:27:
37:2c:07:49:0a:93:48:d0:b0:2d:c8:da:c2:32:8c:e6:05:0a:
3b:05:5b:89:2c:a7:c6:6d:0f:4f:c9:47:7f:f0:d5:87:4d:e6:
cf:05:39:00:1c:6d:51:0f:cd:31:e1:ea:6c:eb:9e:83:2b:ed:
10:3c:7a:99:a3:ea:57:ac:0f:c8:bc:91:c0:4e:6a:78:8e:ad:
4f:f0:d1:e9:83:1e:8e:69:3c:bd:43:77:30:51:64:1c:47:82:
cf:a4:1d:51:fe:6d:06:53:f1:4f:85:29:95:07:32:8b:be:69:
9d:5e:36:ee:0c:87:3c:b8:81:0b:3f:4d:e7:7d:d9:07:b0:60:
07:ae:f5:e0:e0:55:d4:c1:72:49:28:5c:c4:55:67:80:21:21:
77:63:30:53:3b:4b:4a:25:b1:a6:ce:8d:23:9a:ee:71:9c:ac:
5d:6e:c3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:03 2026 by rpki-client