Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3qfNbnwv2dS7jeDYMOrvL2a3z4.roa
File: e3qfNbnwv2dS7jeDYMOrvL2a3z4.roa (raw, json)
Hash identifier: q7Okatwr0uu3nYG2b3zS5HNJzesoInFu3+kGLe7Zr40=
Subject key identifier: 7B:7A:9F:35:B9:F0:BF:67:52:EE:37:83:60:C3:AB:BC:BD:9A:DF:3E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F93B15552C1EAA6B1483ECA5D122D900E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3qfNbnwv2dS7jeDYMOrvL2a3z4.roa
Signing time: Fri 24 Jul 2026 10:35:00 +0000
ROA not before: Fri 24 Jul 2026 10:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400342
IP address blocks: 151.243.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b1:55:52:c1:ea:a6:b1:48:3e:ca:5d:12:2d:90:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 24 10:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7b7a9f35b9f0bf6752ee378360c3abbcbd9adf3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:a5:de:31:59:45:18:54:d9:59:60:24:f7:
b3:99:79:a7:03:b2:2c:7f:9d:e3:ad:42:8b:17:f4:
73:49:72:c9:03:28:d8:dd:c8:10:0f:17:ec:9c:67:
a8:a5:23:e7:4e:29:f1:90:93:2b:7f:c3:84:7a:c8:
da:a7:ef:8d:6f:22:9d:84:74:fa:3c:96:41:a2:6f:
4b:3b:12:f9:b7:39:4e:de:12:62:28:9d:5b:0d:d6:
06:65:10:af:03:01:1a:ed:92:08:ab:24:68:89:ab:
70:d8:66:d8:82:e9:85:e8:ea:25:fd:40:71:be:ca:
12:d0:1d:6b:ee:14:b1:77:59:e6:8f:9f:1b:39:8b:
89:1b:da:f7:57:b5:c1:b5:03:1a:c7:d4:23:41:78:
05:09:8f:92:b5:d4:ec:24:82:73:a1:e1:3f:c9:d3:
a9:d9:60:18:4b:19:7d:1e:13:b2:b4:9a:af:10:5a:
d0:75:03:cc:d6:e9:a8:b4:4a:95:f1:9f:5b:21:d1:
4a:2e:96:b9:15:0b:e1:6f:ce:bf:6d:2d:5d:dd:b1:
ef:b1:23:fb:a8:51:d9:6d:17:12:07:15:d9:82:e4:
e3:51:7a:24:57:9b:49:88:d4:21:4b:2e:54:0d:46:
0c:c2:ab:e6:3c:29:ae:bf:37:d1:33:c5:02:65:ee:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:7A:9F:35:B9:F0:BF:67:52:EE:37:83:60:C3:AB:BC:BD:9A:DF:3E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/e3qfNbnwv2dS7jeDYMOrvL2a3z4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.95.0/24
Signature Algorithm: sha256WithRSAEncryption
09:ac:7d:86:8f:67:2f:4a:e3:66:48:36:6d:db:fa:ad:bd:ab:
f8:56:be:d7:66:b6:e7:96:69:9a:d4:c2:57:86:c0:9c:ab:db:
49:d4:1b:9e:32:62:5c:35:f3:74:5b:22:ff:f1:78:ad:e4:f7:
f7:e7:ac:3a:3e:ea:8e:a0:b6:10:45:28:5a:d3:d3:8e:31:4a:
69:a9:c6:29:19:e8:b4:f3:07:b3:11:99:ed:32:00:df:d3:ae:
3e:66:2b:a4:02:ce:25:c4:40:83:11:f2:31:db:39:52:68:14:
57:32:2d:44:2d:37:98:6d:91:a1:ac:13:26:83:11:8b:4e:e3:
f6:25:bf:91:5e:18:41:04:e4:e2:1c:c8:6c:98:88:e3:f2:81:
fe:0d:29:4b:7a:e8:f9:a6:3e:9f:14:48:ee:4c:6b:e3:db:0a:
08:22:4a:8b:ab:53:dc:15:6a:ed:a1:e3:4a:2f:ce:92:17:6e:
00:3e:c7:0e:64:0d:07:9c:ca:43:e7:30:2a:68:b2:f6:52:5d:
e1:98:12:8d:ca:89:78:60:f7:9e:c4:b4:2e:45:3e:3a:2c:da:
17:7a:ce:d5:f2:b9:d7:06:d0:85:5c:9d:c9:f6:dc:fa:16:94:
71:7e:c8:85:f1:cf:0d:5f:87:51:ba:ff:d9:af:6e:ba:c9:6a:
03:b3:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:54:47 2026 by rpki-client