Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j8dR5whUh8UPBqVX1ltqtKAxVas.roa
File: j8dR5whUh8UPBqVX1ltqtKAxVas.roa (raw, json)
Hash identifier: 4oyYOSg/RsfrmCQIVRmrqy4DptVfRLqlBndEpE3LRS0=
Subject key identifier: 8F:C7:51:E7:08:54:87:C5:0F:06:A5:57:D6:5B:6A:B4:A0:31:55:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D691D013D62CDBB4465E4C00D83A32A6C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j8dR5whUh8UPBqVX1ltqtKAxVas.roa
Signing time: Tue 07 Apr 2026 18:03:21 +0000
ROA not before: Tue 07 Apr 2026 18:03:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147003
IP address blocks: 151.242.66.0/23 maxlen: 24
151.247.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:1d:01:3d:62:cd:bb:44:65:e4:c0:0d:83:a3:2a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 18:03:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8fc751e7085487c50f06a557d65b6ab4a03155ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:00:7c:75:62:cd:ba:bb:59:e1:87:b6:6d:
84:32:00:ad:76:10:5d:57:da:de:fe:1b:d5:15:28:
a7:68:75:a9:c4:f8:bc:3a:20:7e:02:21:36:d2:52:
75:c2:8e:58:c0:b0:ae:2b:0a:19:4e:21:3a:9a:98:
62:af:db:d6:34:41:45:33:12:e2:38:c6:25:4e:55:
3f:dd:f0:e5:af:2e:de:08:88:03:06:31:e5:dd:59:
8c:c7:8a:c5:50:04:ec:e8:cd:8f:61:47:97:fd:18:
b3:4c:0e:ca:80:e5:23:39:00:35:b3:c8:11:70:a4:
83:9d:7b:04:c3:0f:b6:05:7e:04:86:b7:ff:f0:11:
fb:c5:a5:4c:f9:a2:e5:ec:9d:9f:cb:cc:59:56:6a:
1e:49:59:f9:58:f8:7f:a2:f1:0e:5d:53:a1:f9:4b:
21:8f:48:af:8b:66:ea:2a:c0:97:53:5a:6f:3a:c0:
2b:1e:40:cb:4c:91:5e:a9:ec:f5:65:2c:a0:2e:24:
84:7e:9c:4f:69:e6:9f:1d:4f:cb:60:74:d0:64:9b:
22:d3:fd:63:7e:0e:73:13:98:8d:7e:2a:95:a3:f9:
a8:e5:06:81:31:9a:87:5e:c5:28:9b:87:3d:17:44:
8c:8f:69:71:6f:84:18:2d:c9:46:77:1e:35:98:eb:
70:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:C7:51:E7:08:54:87:C5:0F:06:A5:57:D6:5B:6A:B4:A0:31:55:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j8dR5whUh8UPBqVX1ltqtKAxVas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.66.0/23
151.247.198.0/23
Signature Algorithm: sha256WithRSAEncryption
88:58:c4:a6:e1:5b:da:e9:49:0a:f6:f5:36:29:20:2c:66:9a:
19:3b:6a:5f:da:ee:ca:c3:82:4c:8e:56:b3:cf:d9:bd:3e:f1:
14:e0:0a:62:d7:7a:4c:94:56:e4:a5:e7:80:82:8b:41:f6:8d:
4d:3e:7a:93:09:d5:5d:3d:c0:f3:da:50:e2:8b:7a:0b:c9:42:
b4:50:db:74:b2:9c:e0:00:ff:c1:07:07:79:26:cb:a2:9a:41:
7b:09:41:d5:ec:b5:24:4c:6d:1a:2c:1d:a6:d1:6b:34:8a:dc:
d3:a8:5d:1a:a9:5b:84:8b:34:d3:69:d2:17:03:7f:3b:31:48:
22:95:95:e2:17:3a:9d:28:7a:e6:e2:39:0d:3d:7f:2a:05:5b:
f4:f4:ab:bf:b4:06:ee:e0:0e:14:ec:09:1c:7a:99:10:a0:f4:
ad:12:cb:56:58:ae:57:28:59:bc:fa:4d:ae:a6:05:45:c7:b5:
77:af:a4:eb:d3:64:a4:b7:cb:f8:79:65:86:73:15:2e:4b:09:
45:e2:80:d3:80:95:1e:08:e1:5d:32:89:ff:5c:af:59:40:f8:
57:3b:75:af:92:11:a7:a1:7b:86:0f:c0:d4:f2:1f:7a:19:8a:
d4:a6:87:15:81:25:98:71:fd:2b:ee:2d:5c:cd:18:a2:12:87:
02:70:06:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:38 2026 by rpki-client