Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fAeMJ5UOCbqaFRjFWPVMBIwgMWU.roa
File: fAeMJ5UOCbqaFRjFWPVMBIwgMWU.roa (raw, json)
Hash identifier: FCIWpYrqT3Lf7aohPi+YcFLv/uZ0rK3BjhIvjxGMUp4=
Subject key identifier: 7C:07:8C:27:95:0E:09:BA:9A:15:18:C5:58:F5:4C:04:8C:20:31:65
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A47C5F02C18CC0CCD4385CF5E45FF4AE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fAeMJ5UOCbqaFRjFWPVMBIwgMWU.roa
Signing time: Tue 15 Sep 2026 09:53:29 +0000
ROA not before: Tue 15 Sep 2026 09:53:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 151.245.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:7c:5f:02:c1:8c:c0:cc:d4:38:5c:f5:e4:5f:f4:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 15 09:53:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c078c27950e09ba9a1518c558f54c048c203165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:2b:f2:e7:75:5d:22:9a:0b:f1:e4:7f:09:
0f:86:2b:23:7a:44:49:57:06:32:df:87:38:d4:d5:
3d:21:26:2a:f8:7a:a1:bd:05:56:1f:e0:15:6e:6c:
70:91:1f:8a:e7:f0:6b:f7:71:50:fb:bd:ed:8e:8b:
94:dd:47:93:e2:5e:93:3b:07:9f:ef:0d:7c:36:a8:
78:d2:b2:49:e7:4c:96:54:97:61:28:e2:4c:52:b4:
f6:84:bc:35:c0:6e:5a:1c:e3:cb:42:60:92:47:a4:
50:5f:e3:24:da:cb:a8:20:34:48:f2:d3:ec:37:ca:
36:6a:fb:24:60:d3:71:c7:73:da:7e:f2:7d:1c:9e:
b5:09:f9:de:a9:af:b9:31:06:ab:77:db:69:77:a7:
87:89:64:f0:88:77:23:47:39:e3:e5:07:4d:3a:ce:
6c:a8:6b:7f:6d:64:be:84:cc:fe:ff:2d:a1:98:a9:
f7:c5:2d:65:8a:2f:01:01:d1:0c:77:05:bd:f9:79:
a2:87:02:7f:aa:9c:50:6c:15:bc:7c:d1:93:f3:5e:
42:eb:2f:5e:5a:09:3a:a8:53:e2:b7:ee:b6:85:d9:
84:e8:56:ac:1c:99:72:cf:03:de:34:72:2f:16:6f:
e1:85:df:f8:de:7e:a9:71:ed:55:ba:12:e9:44:46:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:07:8C:27:95:0E:09:BA:9A:15:18:C5:58:F5:4C:04:8C:20:31:65
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fAeMJ5UOCbqaFRjFWPVMBIwgMWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.172.0/24
Signature Algorithm: sha256WithRSAEncryption
10:23:6b:b1:2a:5d:cd:2c:2b:63:6c:6a:a6:09:a6:7b:de:ae:
ca:7c:a7:f5:92:43:17:b0:ca:01:9b:78:4e:b1:c8:d2:34:8c:
f9:c2:cb:5f:4d:78:8c:0f:01:6e:22:65:92:11:10:f7:dd:52:
47:39:e8:cd:7c:99:5c:64:6d:2b:0c:85:df:d2:a8:a6:6b:88:
5b:49:57:c9:b4:eb:3b:b3:41:43:9c:63:31:7f:1e:fd:5f:75:
f0:ee:12:88:b2:88:52:bd:dd:91:10:b6:98:72:b5:49:15:2c:
63:0a:0e:63:11:60:01:0e:59:60:2a:ba:a6:7c:ee:6a:e2:41:
2c:12:73:b9:18:e2:fe:54:db:d9:e1:ec:bd:8b:da:9b:4e:5d:
94:16:9f:ae:7b:a1:5a:fb:37:2c:f0:ad:81:9f:d6:61:27:d6:
cf:0e:e5:b6:46:d2:a4:4a:ae:5e:b4:88:3c:47:f5:42:ab:16:
87:aa:e5:05:8b:ea:d1:7d:b4:3b:74:29:06:f7:5b:9e:29:9b:
bf:ca:c7:9e:e9:dc:9a:63:fd:ac:ca:66:6f:06:84:b7:ae:4e:
b7:8a:13:dc:d7:e1:a2:50:55:54:59:30:a1:11:15:62:c6:6d:
4f:0b:dd:af:f6:c3:6c:5c:36:61:bf:25:02:b5:fe:8a:6a:47:
46:3e:d3:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCkfF8CwYzAzNQ4XPXkX/SuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE1MDk1MzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzA3OGMyNzk1MGUwOWJhOWExNTE4YzU1OGY1NGMwNDhjMjAzMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8Er8ud1XSKaC/HkfwkPhisjekRJ
VwYy34c41NU9ISYq+HqhvQVWH+AVbmxwkR+K5/Br93FQ+73tjouU3UeT4l6TOwef
7w18Nqh40rJJ50yWVJdhKOJMUrT2hLw1wG5aHOPLQmCSR6RQX+Mk2suoIDRI8tPs
N8o2avskYNNxx3PafvJ9HJ61Cfneqa+5MQard9tpd6eHiWTwiHcjRznj5QdNOs5s
qGt/bWS+hMz+/y2hmKn3xS1lii8BAdEMdwW9+XmihwJ/qpxQbBW8fNGT815C6y9e
Wgk6qFPit+62hdmE6FasHJlyzwPeNHIvFm/hhd/43n6pce1VuhLpREZymQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHwHjCeVDgm6mhUYxVj1TASMIDFlMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZkFlTUo1VU9DYnFhRlJqRldQVk1CSXdnTVdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/WsMA0G
CSqGSIb3DQEBCwUAA4IBAQAQI2uxKl3NLCtjbGqmCaZ73q7KfKf1kkMXsMoBm3hO
scjSNIz5wstfTXiMDwFuImWSERD33VJHOejNfJlcZG0rDIXf0qima4hbSVfJtOs7
s0FDnGMxfx79X3Xw7hKIsohSvd2RELaYcrVJFSxjCg5jEWABDllgKrqmfO5q4kEs
EnO5GOL+VNvZ4ey9i9qbTl2UFp+ue6Fa+zcs8K2Bn9ZhJ9bPDuW2RtKkSq5etIg8
R/VCqxaHquUFi+rRfbQ7dCkG91ueKZu/ysee6dyaY/2symZvBoS3rk63ihPc1+Gi
UFVUWTChERVixm1PC92v9sNsXDZhvyUCtf6KakdGPtMl
-----END CERTIFICATE-----
Generated at Mon Sep 21 13:17:46 2026 by rpki-client