Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjFPbIFwL0076Fh-2Gd5d1ij4IY.roa
File: fjFPbIFwL0076Fh-2Gd5d1ij4IY.roa (raw, json)
Hash identifier: Nqj7juXExc8JtamFad1/y3yT8BeALuDJV0RSOI2lHxQ=
Subject key identifier: 7E:31:4F:6C:81:70:2F:4D:3B:E8:58:7E:D8:67:79:77:58:A3:E0:86
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7B6AACCAFF49F49E63D5753BDD276F31
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjFPbIFwL0076Fh-2Gd5d1ij4IY.roa
Signing time: Sat 11 Apr 2026 07:21:21 +0000
ROA not before: Sat 11 Apr 2026 07:21:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153786
IP address blocks: 151.245.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7b:6a:ac:ca:ff:49:f4:9e:63:d5:75:3b:dd:27:6f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 07:21:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7e314f6c81702f4d3be8587ed867797758a3e086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:09:fd:43:3e:40:2f:1b:49:3f:b9:f5:82:
08:b3:d5:60:94:c0:4d:ff:30:a2:72:35:e4:3c:4b:
e6:8a:d6:5a:d9:fa:f1:02:58:e8:cd:a6:50:45:40:
01:6c:87:f3:32:d7:2c:08:ad:d6:a2:5e:87:9e:cc:
7f:03:60:c7:4c:09:ca:6f:a8:0f:78:99:88:52:1f:
98:ff:ca:43:f1:ba:6a:5c:2d:36:27:cd:30:80:33:
06:9a:49:04:cf:e8:22:39:74:eb:29:74:93:33:d3:
51:9f:fd:b0:82:09:64:a8:c8:95:65:ff:22:3f:79:
3a:12:22:86:30:60:43:6e:ea:af:4d:8c:d9:fe:a7:
4d:22:e4:e7:6f:cf:46:7c:04:66:15:32:3f:b5:df:
fe:0e:ca:31:2b:a8:4b:36:71:05:29:0e:55:74:09:
ab:9c:a3:eb:a4:7c:0a:4b:6e:6d:d3:55:59:32:1d:
d0:e8:03:99:12:fc:7c:d4:d1:db:2f:43:25:d6:64:
cf:7e:c7:93:25:f4:bb:a2:0f:8c:ed:b1:3f:51:cb:
cc:df:97:2d:f8:3e:37:e4:06:b6:1c:72:42:5c:0b:
56:a9:82:60:e5:ec:91:ca:7d:31:65:64:e1:0a:9a:
7e:9d:7d:9c:60:fc:e5:16:d5:1e:ee:ae:65:32:b2:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:31:4F:6C:81:70:2F:4D:3B:E8:58:7E:D8:67:79:77:58:A3:E0:86
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fjFPbIFwL0076Fh-2Gd5d1ij4IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.181.0/24
Signature Algorithm: sha256WithRSAEncryption
25:9a:75:2a:f9:62:71:e9:e0:b2:5e:ee:79:6c:58:e8:8c:d1:
c1:61:11:70:75:bd:d2:c3:54:0d:82:3e:d9:fe:07:07:53:04:
56:41:5b:92:77:c8:91:de:f3:38:16:37:04:85:03:e5:eb:73:
c6:8d:e3:d2:1f:62:25:98:ec:a6:35:b1:c7:a7:0c:71:cf:ab:
78:f3:24:fc:5c:a7:61:b5:13:a0:97:1b:cc:1b:49:06:93:99:
6c:f7:b5:ad:92:d3:2f:58:11:ac:5f:3b:14:d1:7b:e9:e5:90:
0e:fd:4b:4e:0f:ed:82:60:2a:23:c7:dc:a1:da:6e:6b:41:20:
fd:58:89:04:0f:35:0c:31:94:58:89:68:cf:83:c7:a8:00:70:
3a:a5:9a:e7:5e:f5:8a:35:be:22:a4:ff:38:c3:ed:82:72:a3:
2a:d0:8d:ff:6c:f5:ef:70:31:1f:01:bd:c8:12:e4:c7:59:6d:
e0:ae:60:a9:e6:7a:60:57:8c:8e:17:79:b3:9a:f8:bf:25:76:
44:7a:b5:67:d1:9f:c2:d3:c7:6a:21:0c:32:d8:6b:0e:04:98:
6f:0d:89:17:9f:cb:f2:e3:15:bf:6e:a7:42:be:20:5e:28:e9:
ee:88:ef:a6:bf:3e:f7:1d:83:8c:66:5d:30:8c:3e:15:e2:3d:
4a:e6:01:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:36 2026 by rpki-client