Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eXuBemuD-C_grN_YMvmuXUJzjww.roa
File: eXuBemuD-C_grN_YMvmuXUJzjww.roa (raw, json)
Hash identifier: B5yyP7D/WU0ymBvgCu8jR0bRaqFMbkLi+8A2Oyhpi8A=
Subject key identifier: 79:7B:81:7A:6B:83:F8:2F:E0:AC:DF:D8:32:F9:AE:5D:42:73:8F:0C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D38B3775DFAA21DFF28578986226B4D40
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eXuBemuD-C_grN_YMvmuXUJzjww.roa
Signing time: Sun 29 Mar 2026 08:26:18 +0000
ROA not before: Sun 29 Mar 2026 08:26:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197537
IP address blocks: 151.242.112.0/24 maxlen: 24
151.244.3.0/24 maxlen: 24
151.246.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:b3:77:5d:fa:a2:1d:ff:28:57:89:86:22:6b:4d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 29 08:26:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=797b817a6b83f82fe0acdfd832f9ae5d42738f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:21:19:34:9d:61:f3:f4:9f:f0:63:23:fc:33:
58:f4:a9:57:71:99:a7:52:43:b6:6e:3e:95:3f:31:
bf:2b:3f:96:13:a0:2c:f7:db:ba:09:2c:fd:75:bc:
ef:d1:1d:93:0a:a6:55:82:c3:ee:5c:ee:76:d0:8f:
de:36:4a:61:db:3b:2c:80:ac:3f:51:fb:36:b0:86:
7c:d3:cf:13:56:38:60:6d:89:c8:0f:12:c8:d7:bc:
ce:d0:8c:27:9e:2a:3a:f7:f3:da:f9:14:c3:39:30:
5e:2e:d4:58:ef:b3:f6:17:f8:d3:cb:39:43:ee:ba:
e5:f8:f3:e8:9b:1d:27:dc:19:59:64:6b:01:a1:04:
3e:b9:82:16:ef:0e:c7:24:71:a9:71:fe:8d:20:6b:
d9:38:d7:53:92:a2:4c:0f:db:18:44:03:84:bf:2f:
64:ed:88:4a:a4:78:02:22:73:b1:11:1e:79:ab:28:
a5:2d:a8:44:82:ca:8f:fe:0e:8e:28:e5:82:f2:03:
71:09:e0:45:d1:aa:ed:7d:c7:d2:a0:8b:21:a3:30:
a5:3e:11:51:85:1b:02:96:cd:94:32:c2:29:75:52:
b7:ae:1c:08:51:b0:e2:0d:61:5b:b2:81:08:91:3e:
64:a7:29:56:5b:5d:a7:64:03:a4:10:07:77:80:47:
2f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:7B:81:7A:6B:83:F8:2F:E0:AC:DF:D8:32:F9:AE:5D:42:73:8F:0C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/eXuBemuD-C_grN_YMvmuXUJzjww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.112.0/24
151.244.3.0/24
151.246.130.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e8:87:d1:45:ba:90:32:06:c8:11:09:77:3f:66:b0:ef:2f:
14:ba:64:da:e0:ce:07:ca:bc:4c:3d:6b:95:fc:90:c7:97:7e:
25:26:7a:c6:22:3c:7d:97:16:d8:4a:21:92:54:4d:49:c7:1e:
86:f6:17:6c:41:34:04:85:ec:71:24:24:d8:7c:17:c8:f0:f4:
d3:09:3d:a1:c1:0e:44:7a:4a:5e:f6:f1:ac:a1:63:ac:b1:61:
99:ca:5f:93:27:b5:3d:96:a6:c6:47:a8:dc:c0:53:8b:90:ac:
bd:b0:8f:d6:7c:e6:11:e2:ca:04:6c:f9:69:a4:b7:67:af:c8:
0a:3f:72:d9:91:2a:ba:7a:70:41:a2:9b:3a:17:2b:ee:41:a5:
75:ee:7f:ad:2d:f0:95:83:8b:3b:04:70:9d:a0:59:68:f7:1e:
5a:32:43:69:a3:0b:ff:50:27:36:5c:90:56:ab:44:cd:cf:15:
e3:ab:ed:a8:69:ae:a2:e0:67:e6:38:a9:65:c5:e1:20:c1:82:
2c:ca:c2:f6:9c:d2:4a:a6:cb:e9:2b:7b:ab:ca:78:17:5d:8f:
6a:82:02:77:25:05:15:55:15:38:8e:56:5d:cb:42:86:cf:7a:
49:23:6d:a9:2a:8f:44:28:a1:e4:ca:8f:cb:42:9a:1e:57:c9:
e4:4d:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:15 2026 by rpki-client