Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eEyDmIzv5bsulNfvZCDLuac9QkY.roa
File: eEyDmIzv5bsulNfvZCDLuac9QkY.roa (raw, json)
Hash identifier: A4p53qxmlmYU4c/VIjUW2jOXulqmopkRebVliEj3shE=
Subject key identifier: 78:4C:83:98:8C:EF:E5:BB:2E:94:D7:EF:64:20:CB:B9:A7:3D:42:46
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D97888E3F73EB703206961DFDB1239FC7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eEyDmIzv5bsulNfvZCDLuac9QkY.roa
Signing time: Thu 16 Apr 2026 18:23:22 +0000
ROA not before: Thu 16 Apr 2026 18:23:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 140543
IP address blocks: 151.243.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:88:8e:3f:73:eb:70:32:06:96:1d:fd:b1:23:9f:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 16 18:23:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=784c83988cefe5bb2e94d7ef6420cbb9a73d4246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e2:10:3d:98:e6:74:03:53:6f:d2:f4:a5:79:
27:6c:ad:db:e2:3a:ef:96:77:dc:31:97:10:dc:fe:
3b:5e:ad:11:37:cf:a4:01:21:28:eb:f0:c1:97:88:
3b:68:2e:15:08:52:91:c7:1b:e1:d3:c2:a6:8c:86:
28:78:aa:e3:6f:16:fa:b9:09:35:2b:c6:98:5e:e2:
d2:4e:21:89:19:fd:25:41:64:8f:25:03:ad:af:8c:
fc:85:83:67:1c:8a:10:6e:0d:96:71:5b:01:c3:7e:
b7:4f:82:3b:6d:fe:30:14:12:b0:db:33:fe:91:7b:
4e:7f:8a:32:6c:ee:83:4d:6e:df:26:a9:e8:9e:38:
cf:63:c1:d4:b8:4f:23:58:d4:17:d0:df:12:74:07:
4c:8c:9b:7a:e1:a2:96:6d:f8:6b:24:66:10:2c:dc:
e4:f3:53:02:31:1c:18:f6:2d:b8:be:78:91:0b:d1:
7a:c4:a2:56:17:2b:10:ac:d1:38:39:42:e5:87:2d:
f8:f3:a4:d4:15:bd:a6:5c:b1:0b:5b:23:e0:6b:cc:
ff:a2:4a:9f:d5:d0:8d:34:c5:ae:41:f6:22:83:19:
51:4d:c2:c3:8d:75:1e:80:56:1d:4e:97:3d:32:57:
c2:76:69:c3:f7:61:c1:79:1e:b4:c2:54:d8:dd:3d:
71:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:83:98:8C:EF:E5:BB:2E:94:D7:EF:64:20:CB:B9:A7:3D:42:46
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eEyDmIzv5bsulNfvZCDLuac9QkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.168.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:a2:15:cb:0d:5d:93:d1:a8:7c:bb:72:8d:6b:fb:3e:24:bb:
47:53:be:21:e4:a7:52:9a:b2:46:b4:35:ae:10:da:9e:24:51:
79:c3:67:71:a9:93:4a:a2:c5:6d:9a:75:92:8c:6d:38:32:a4:
87:47:2c:55:fa:41:d1:00:20:0d:74:ea:f8:c2:96:a2:b7:b6:
9e:9f:4c:0d:85:dc:f2:c2:af:df:cc:93:94:24:9e:2f:2a:2a:
86:9b:4a:28:8b:e3:76:dd:d3:fd:de:c6:06:f7:96:e5:91:6c:
40:0e:9b:43:d3:e8:bd:9a:2a:55:50:db:d8:40:bb:f6:7e:6e:
06:cc:dc:b5:ec:0b:06:8b:71:25:ea:02:ea:6b:a4:2c:22:7e:
8b:50:41:21:84:09:40:ce:b3:ef:33:64:e4:25:a4:3b:17:b7:
5e:76:28:cd:f5:51:48:18:3e:ad:1f:58:b0:34:99:dd:a3:88:
a2:99:5b:8b:8f:7e:51:95:51:fe:dc:90:75:cf:bc:dc:ea:03:
67:2e:79:57:2b:44:58:7f:aa:ee:9f:e3:f2:a9:b5:e3:9c:05:
16:53:89:63:b5:60:f0:6e:5b:dd:01:a6:53:2a:ee:32:c9:52:
b2:87:9d:ad:33:c7:e2:00:b5:90:e8:ae:20:9b:3a:0b:23:e5:
44:bf:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:31:15 2026 by rpki-client