Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c8ceFWkkL_IqpxcVv28r0lAHKsc.roa
File: c8ceFWkkL_IqpxcVv28r0lAHKsc.roa (raw, json)
Hash identifier: 21ik53DP7CQtPzmZKVoclEa9mY1QysBqkTOHfVfVUZQ=
Subject key identifier: 73:C7:1E:15:69:24:2F:F2:2A:A7:17:15:BF:6F:2B:D2:50:07:2A:C7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C95A3D32EE7EE85D2592FF29A7C69728
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c8ceFWkkL_IqpxcVv28r0lAHKsc.roa
Signing time: Tue 22 Sep 2026 13:42:09 +0000
ROA not before: Tue 22 Sep 2026 13:42:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63793
IP address blocks: 151.245.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5a:3d:32:ee:7e:e8:5d:25:92:ff:29:a7:c6:97:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 13:42:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73c71e1569242ff22aa71715bf6f2bd250072ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:f5:39:dd:fe:41:4f:5a:23:1d:c4:da:ea:
21:59:08:b9:8b:45:a0:6c:18:7b:7a:c2:4c:5e:9f:
3c:05:82:7d:14:f4:75:f7:08:86:88:77:14:9e:45:
21:5a:c6:75:e6:ae:b1:2a:ba:14:ef:5c:b5:6a:a0:
9e:cb:fb:08:0a:da:a3:f5:55:fd:5c:85:6f:52:fa:
fa:12:ae:6c:65:eb:26:2b:9d:c4:61:83:62:59:47:
34:5e:e0:61:ae:c2:f7:de:ff:53:e6:b7:0a:56:82:
59:b4:9f:45:23:18:f9:0c:d3:f2:f6:f1:6b:cd:99:
2c:d7:47:6f:1a:4d:9d:72:c7:56:c2:08:48:75:6e:
16:99:bd:ad:b1:64:72:1b:85:9d:f8:82:e0:f4:e4:
c3:18:2b:85:13:3a:94:25:1d:c9:8c:84:f4:22:5a:
4e:ab:fb:59:34:98:c2:28:e3:58:cc:50:a1:30:16:
6e:85:80:36:2d:41:53:46:d0:6d:82:07:b9:70:97:
46:f0:f3:12:46:3e:54:25:03:fa:2d:63:ec:7a:52:
4a:45:47:a7:e1:5c:79:0b:bb:be:b0:d1:1c:84:33:
0e:42:d4:fc:33:1e:8a:41:8d:e3:6e:9a:12:68:4a:
cd:5d:e1:c4:16:d4:75:9e:fb:ed:5b:81:a7:41:31:
db:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C7:1E:15:69:24:2F:F2:2A:A7:17:15:BF:6F:2B:D2:50:07:2A:C7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/c8ceFWkkL_IqpxcVv28r0lAHKsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.255.0/24
Signature Algorithm: sha256WithRSAEncryption
99:7a:27:ba:f1:9f:41:79:af:4f:49:eb:39:95:83:78:87:d0:
8f:d1:4c:f2:ed:7e:03:a3:9f:21:18:78:59:c1:e9:c5:85:72:
de:cd:22:10:e5:80:3e:1f:0d:f9:7b:4d:7d:f5:54:ac:13:2b:
3c:db:fd:91:3f:3e:af:de:56:24:69:14:81:18:87:08:03:ab:
55:45:14:3c:b6:29:17:64:b4:b2:18:ad:a2:b9:f7:e9:08:05:
ca:9b:f0:21:0c:71:86:20:bc:3d:be:dc:d0:f0:80:e8:20:2f:
41:01:84:25:60:67:6d:b6:d6:ac:e8:ca:3e:e1:16:a6:2e:28:
5e:9c:1a:45:e4:8f:bd:12:12:bd:a2:d8:62:62:fd:18:4c:3d:
35:84:6e:dc:1b:fa:1f:b2:fc:6b:03:d9:a3:09:9f:e9:de:54:
69:03:31:3d:be:d0:8f:54:9a:09:f1:34:33:4e:c1:57:c7:29:
c2:f3:a2:e5:d5:19:b2:65:60:5c:4b:35:b1:01:f5:ae:bf:92:
df:7d:59:2d:90:3f:6b:10:b5:95:64:b2:8a:b7:fb:87:23:b0:
92:bc:fa:ff:81:7d:45:bc:40:90:c3:21:66:1a:61:f7:a4:c8:
9c:44:17:d9:f3:e6:e2:32:36:83:d8:03:51:4d:98:f2:df:96:
1c:aa:e9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:27:04 2026 by rpki-client