Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tdH51M95DKeDWJfY777WVuIAdw.roa
File: _tdH51M95DKeDWJfY777WVuIAdw.roa (raw, json)
Hash identifier: IuM0fosR4fmpku6SymQ7cUTtKZ+Zi9ZzA0n/op6lBlE=
Subject key identifier: FE:D7:47:E7:53:3D:E4:32:9E:0D:62:5F:63:BE:FB:59:5B:88:01:DC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07A85C3A1387952BD9E28CBAC583E189F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tdH51M95DKeDWJfY777WVuIAdw.roa
Signing time: Mon 07 Sep 2026 06:19:41 +0000
ROA not before: Mon 07 Sep 2026 06:19:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219075
IP address blocks: 151.243.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:85:c3:a1:38:79:52:bd:9e:28:cb:ac:58:3e:18:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 7 06:19:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed747e7533de4329e0d625f63befb595b8801dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:c2:70:04:20:ef:37:ed:04:60:c8:fc:59:
f0:c0:be:bd:7c:3d:28:81:87:a3:f7:7f:a5:b5:d1:
5e:67:b4:37:dd:9b:79:d9:84:bf:3e:41:0d:29:76:
66:20:34:68:b2:90:ec:93:48:ed:2a:01:48:7c:06:
6f:33:ab:4f:68:2d:e5:69:21:98:a9:12:b6:c7:5e:
b3:45:f4:7c:68:a7:ff:de:a9:a9:da:2c:5a:ec:e0:
06:05:e6:56:73:5e:fd:b2:dd:04:f5:95:b2:4d:ba:
4f:01:45:18:c7:d7:f7:61:54:b8:6f:f3:67:15:c8:
15:c5:c9:3c:f2:36:b3:76:a5:1e:2c:ff:87:91:ce:
ff:2e:8c:d8:01:a4:b0:c1:a2:fb:ab:9f:a3:64:57:
39:c3:c0:70:86:5f:9c:0b:31:4d:48:bf:2b:36:92:
1e:ac:5a:85:90:8b:5c:3e:e6:68:7a:25:3c:a8:89:
ba:87:57:25:6e:76:46:28:51:65:6e:22:7d:90:e9:
17:98:4e:bb:4c:8b:20:0f:c8:45:f3:b0:85:38:d0:
23:d8:ed:6e:5c:d6:b6:a9:fa:5a:ad:9f:d0:41:31:
41:bd:9e:37:90:c0:8c:bc:18:a5:f3:d8:3f:2d:33:
65:93:87:8f:9d:e8:70:13:06:d1:e1:75:a7:11:84:
f6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:47:E7:53:3D:E4:32:9E:0D:62:5F:63:BE:FB:59:5B:88:01:DC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_tdH51M95DKeDWJfY777WVuIAdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.140.0/24
Signature Algorithm: sha256WithRSAEncryption
75:15:fb:6f:05:86:99:4e:c7:b5:85:91:29:a6:f1:5f:67:02:
72:1f:0e:b4:83:51:9c:0d:44:26:52:c1:8d:d2:36:96:3d:de:
a2:b5:bd:a0:21:3a:0e:54:ad:77:83:01:2b:6a:69:d0:86:6a:
6e:c2:9c:7e:6b:61:41:8b:d2:e0:2d:a5:e9:94:73:3c:f7:5a:
85:ce:df:f6:d6:a0:ac:4a:26:e2:56:5f:ee:a5:78:06:98:f5:
65:0d:5b:06:e6:64:8c:97:21:16:e7:55:e7:12:5f:4a:96:c7:
8a:b2:61:96:ac:6f:a5:fa:b8:7b:1e:a9:0f:df:da:9d:74:e1:
1f:06:40:eb:64:d2:bf:d8:e3:1c:13:dc:c5:4e:6b:fc:9a:9f:
28:6e:74:6f:2a:78:6d:12:bf:97:8f:f7:6f:a4:c5:4f:31:f1:
40:5e:dd:d2:a3:3d:0c:66:36:b5:d5:68:57:7a:5b:3b:f2:b3:
29:f3:17:90:b8:bc:28:4d:3c:32:b6:92:a5:2e:64:86:2a:39:
8f:e8:0a:20:f4:3f:44:f2:0f:c1:35:a6:92:be:56:76:1c:ec:
12:d4:2a:a1:5c:b3:68:41:d0:1b:f5:dc:dc:84:fb:1b:1f:45:
44:88:f1:98:73:cd:52:dc:33:80:b1:eb:46:1c:74:fb:15:fb:
88:7a:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:07:40 2026 by rpki-client