Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gfFeEkZhFg--fNPV3WpwSZFzIIo.roa
File: gfFeEkZhFg--fNPV3WpwSZFzIIo.roa (raw, json)
Hash identifier: ju+JXvG8FWRi9oWddv6kOHnBIemuXjCbgDtusUYesXA=
Subject key identifier: 81:F1:5E:12:46:61:16:0F:BE:7C:D3:D5:DD:6A:70:49:91:73:20:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C60E4D2C3DAC49EA44F690EA95AB525B6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gfFeEkZhFg--fNPV3WpwSZFzIIo.roa
Signing time: Sun 15 Feb 2026 10:42:14 +0000
ROA not before: Sun 15 Feb 2026 10:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 151.243.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:60:e4:d2:c3:da:c4:9e:a4:4f:69:0e:a9:5a:b5:25:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 15 10:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=81f15e124661160fbe7cd3d5dd6a70499173208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1c:87:21:0b:b3:5a:40:74:7d:f5:3f:51:6f:
bb:97:f6:57:01:fe:02:15:25:f1:80:fa:a6:5c:e0:
27:e8:ec:c4:9b:15:1d:af:b7:a8:b8:13:cf:27:f3:
74:c7:64:dd:b9:ca:5e:c1:a8:42:90:61:f6:4b:93:
ac:c8:89:2c:41:6a:3c:d5:58:43:10:2e:b2:ba:26:
02:60:f0:e7:9d:f2:ae:19:06:48:f7:8a:2f:e0:dd:
31:f0:0b:d1:36:e5:f6:7c:0b:12:6a:36:14:e8:4e:
a7:15:7e:8c:47:e8:38:de:e0:c0:a4:8c:fc:40:38:
bd:95:e8:f7:cb:bb:79:b4:86:c2:33:7d:34:3c:07:
ff:3e:34:68:44:cc:30:3e:c1:2c:18:45:9f:24:7e:
5a:ab:33:47:75:02:9d:29:4b:fd:9a:72:72:e2:01:
1a:ca:96:f3:cf:28:95:04:0c:c0:88:f2:0f:9a:8b:
5b:2d:b5:2c:29:42:43:25:ca:60:f1:99:da:88:97:
27:d2:cb:73:3b:dc:79:e2:ed:79:f0:65:eb:d2:fa:
14:de:c8:d3:16:9c:f2:fb:12:f1:44:99:0c:29:ea:
a0:af:94:12:de:32:85:c7:95:e3:e6:92:03:88:13:
d0:7e:46:c5:23:43:1a:ad:08:90:79:cc:9b:a9:8e:
53:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:F1:5E:12:46:61:16:0F:BE:7C:D3:D5:DD:6A:70:49:91:73:20:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gfFeEkZhFg--fNPV3WpwSZFzIIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.223.0/24
Signature Algorithm: sha256WithRSAEncryption
86:a8:50:cf:8b:07:b0:0a:3b:68:c7:57:ab:db:42:77:a5:88:
3e:0d:50:c7:ee:8b:c0:20:e1:74:a0:4c:e5:5b:a3:c9:52:d9:
e2:a5:7f:d5:eb:6a:07:56:b1:69:0a:c9:fe:ac:6d:6c:1e:f3:
e9:7d:aa:1f:92:20:ce:40:17:62:09:45:e3:17:5d:80:8a:21:
6c:9f:15:19:f2:9d:ea:67:0b:41:de:95:ac:91:dc:c6:b6:33:
f3:92:80:68:b2:44:8d:3a:f1:ea:e2:d5:99:41:30:56:3b:71:
37:d8:6c:84:db:76:3e:d6:ba:01:b1:e8:1e:93:f3:89:46:da:
a5:b1:32:8e:38:36:4b:7d:a3:3a:73:2a:43:bd:98:76:99:37:
7e:88:77:fd:b2:70:7b:48:45:e2:e2:6f:c5:5b:0f:6f:45:fe:
8f:85:82:f4:04:15:c2:a5:a9:9f:ce:08:8b:c6:f7:c4:99:7a:
6f:07:50:c7:2c:2a:7e:5b:f1:84:46:56:0e:ec:07:98:fa:d4:
ae:9b:c7:74:ff:7b:91:37:a0:c9:8c:13:f7:98:10:cc:7d:c2:
f1:1d:9c:a8:9a:1f:e5:13:96:8c:3d:31:1d:4f:67:be:9a:a9:
fb:8d:c4:d1:4d:02:86:2d:71:8e:48:70:1b:07:08:5d:74:65:
a6:60:9a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:17 2026 by rpki-client