Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aIcL3r9IejtWp86HnwjIr6W5bOw.roa
File: aIcL3r9IejtWp86HnwjIr6W5bOw.roa (raw, json)
Hash identifier: 40eWYmO+mciVKJrP3gOH8qKmtZYLvNki0x7xzLtoqeo=
Subject key identifier: 68:87:0B:DE:BF:48:7A:3B:56:A7:CE:87:9F:08:C8:AF:A5:B9:6C:EC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4FCC6DBB766A4FAD13E3CF1DB23B90C0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aIcL3r9IejtWp86HnwjIr6W5bOw.roa
Signing time: Fri 22 May 2026 13:07:38 +0000
ROA not before: Fri 22 May 2026 13:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 151.242.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:cc:6d:bb:76:6a:4f:ad:13:e3:cf:1d:b2:3b:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 13:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=68870bdebf487a3b56a7ce879f08c8afa5b96cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:99:4d:15:9f:36:7b:f4:3b:55:94:6b:5d:
9a:8b:72:39:e8:80:1a:8d:06:a7:76:3c:f1:b6:90:
0b:11:5a:f0:3c:15:07:09:b0:98:98:c7:0d:8a:e4:
df:ae:9d:1a:14:f8:b2:75:5a:0d:44:16:43:ef:78:
dd:f3:f8:c6:f0:61:c5:21:b9:86:84:e8:57:db:25:
a7:34:82:5e:59:36:67:a5:96:c4:82:a5:68:f1:38:
55:d5:fb:e3:09:78:8c:07:3a:90:b0:4a:25:dd:7c:
bb:10:ca:d5:77:e6:5f:77:cc:ab:dc:3e:33:1d:23:
a9:09:6e:32:f8:85:7e:de:b0:4f:4d:55:7c:38:f8:
11:54:38:40:21:24:7b:e0:0c:68:70:62:72:58:7b:
6d:44:6a:33:8f:47:b5:aa:9a:52:3d:24:f4:d3:4f:
91:bc:23:b8:1f:c6:be:27:4a:94:69:cc:6d:c5:bf:
f8:8f:58:c1:a1:51:00:dd:c5:2e:89:f0:a6:d8:09:
ee:db:98:89:80:c3:4d:13:31:72:9d:fb:12:c8:0c:
7a:a7:88:b8:1a:3a:89:09:2c:73:bf:9d:e1:76:fd:
fc:f6:4d:75:b6:92:0d:35:98:9f:5e:59:40:1a:46:
91:49:a5:57:63:ec:27:aa:de:69:ad:f9:49:e0:58:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:87:0B:DE:BF:48:7A:3B:56:A7:CE:87:9F:08:C8:AF:A5:B9:6C:EC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aIcL3r9IejtWp86HnwjIr6W5bOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
67:ee:f9:cc:0f:39:23:c1:92:5f:a6:88:5f:01:5d:f0:23:6d:
07:d0:5f:86:1e:f0:a7:a1:94:7d:29:8d:5e:70:dc:f9:fe:4a:
49:5f:6f:1d:61:af:38:4b:51:d7:0e:09:22:87:04:1c:55:2d:
05:cc:c8:0f:cc:ee:e8:32:90:51:a8:0a:e6:fc:68:c7:ec:60:
8a:d6:95:36:79:57:1b:d9:97:dc:70:38:10:cf:38:10:ac:45:
3d:c2:52:33:0f:fd:43:28:52:32:6a:62:cd:3c:20:53:a4:86:
b3:e5:89:0f:6c:1c:0a:f9:92:74:c3:2a:ba:6e:3e:80:18:62:
04:0f:0c:43:56:24:86:f7:d3:4d:b9:28:86:16:4b:4a:a3:75:
15:6d:c1:80:8b:0d:d0:f1:ca:c3:bb:28:73:c9:d8:2e:aa:87:
6d:f7:23:2f:88:b4:da:9c:85:e4:02:8d:cf:71:db:88:14:e9:
ba:3a:94:74:ec:14:45:53:ef:63:3a:dd:23:8a:f3:93:9b:3e:
c7:6f:a5:e0:35:6e:94:48:b6:c2:25:ad:54:07:06:8c:41:aa:
51:59:a1:b7:f2:e0:62:d3:fe:01:00:a4:7b:41:e2:0a:e8:84:
57:20:7c:4f:4b:b9:02:2f:08:fc:6e:b3:9b:6b:cd:64:46:5c:
f7:15:4c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:31 2026 by rpki-client