Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mEKgv0g7TWmjMmZzIXyQM8nZBXQ.roa
File: mEKgv0g7TWmjMmZzIXyQM8nZBXQ.roa (raw, json)
Hash identifier: 3DyfsUfA1l3/bZUkyWyvqrZUjd5+sYrsaFdrtvORZEA=
Subject key identifier: 98:42:A0:BF:48:3B:4D:69:A3:32:66:73:21:7C:90:33:C9:D9:05:74
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AB5FAADCC4BB35B73E6F0426FEE29FB7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mEKgv0g7TWmjMmZzIXyQM8nZBXQ.roa
Signing time: Wed 16 Sep 2026 17:59:28 +0000
ROA not before: Wed 16 Sep 2026 17:59:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211443
IP address blocks: 151.242.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:5f:aa:dc:c4:bb:35:b7:3e:6f:04:26:fe:e2:9f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 17:59:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9842a0bf483b4d69a3326673217c9033c9d90574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f2:c2:97:53:9e:96:6a:76:ca:f8:6e:ab:bb:
69:29:b4:84:ed:db:74:a2:2f:6d:6d:bb:6c:68:82:
81:0f:20:d0:c0:9c:fd:16:80:9b:b8:4e:c4:28:d1:
12:73:e4:c7:0a:11:5d:e6:ba:23:ab:6a:71:17:ef:
66:0b:3e:d0:8c:f9:4a:eb:5b:93:9e:90:0d:d8:42:
b8:77:93:d0:6a:c9:b8:55:80:dd:55:b7:0a:60:d3:
e4:dd:25:a4:4d:9b:04:e8:17:7a:43:bc:8c:c3:04:
71:c6:16:2a:a8:07:cf:de:0a:9f:cd:99:e9:15:10:
6e:ac:4a:e1:b7:bc:bc:92:cb:37:6e:f9:0c:f0:db:
10:6c:06:30:a9:16:b2:47:f7:0a:53:a6:3a:59:e7:
35:db:47:f9:0b:d0:6f:79:24:e2:f6:bd:66:79:c2:
3d:84:5b:42:58:8f:80:47:6e:03:1e:de:32:ba:b8:
03:2e:2c:dd:1c:d3:dd:1a:56:65:40:49:81:32:2d:
34:c1:5e:ac:e7:6a:ca:f1:0e:9f:e4:22:bf:72:ee:
fb:fb:c4:fd:d6:af:59:40:40:4e:b9:0b:e3:20:34:
8f:80:1b:ab:97:ba:e0:f7:ad:78:ce:a2:31:b5:42:
92:43:75:db:39:b6:e2:07:0c:19:4d:12:a1:08:fb:
3e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:42:A0:BF:48:3B:4D:69:A3:32:66:73:21:7C:90:33:C9:D9:05:74
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mEKgv0g7TWmjMmZzIXyQM8nZBXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
af:70:01:73:83:cc:9b:3d:67:4c:85:81:c6:f2:3d:cd:e6:9f:
3d:04:8d:20:75:b3:0e:e4:27:46:16:f4:4b:c7:05:44:05:89:
b2:14:3b:b1:20:28:f5:e2:84:0e:a6:b3:44:69:ef:55:12:c9:
13:85:8b:c9:87:8c:5a:1a:0b:48:93:84:10:38:3d:a0:f5:8a:
a4:bc:ee:64:8c:e1:d0:11:62:7f:ef:66:69:0f:b9:f7:8e:00:
f7:be:f9:f9:59:db:aa:6d:c5:23:d0:17:04:3f:73:aa:27:69:
36:68:b1:ee:9f:01:ab:10:20:07:18:34:e8:cf:dd:bc:f5:c8:
b0:d6:4d:88:22:eb:ce:b4:37:2b:3d:8b:bc:8f:ec:b9:3d:9d:
a8:15:a2:1d:63:d6:4c:e7:f5:da:02:d3:78:1a:74:4d:61:f8:
d5:c0:c1:b9:ae:70:b5:42:f7:b5:8c:4f:b6:a1:cf:a9:98:e8:
2a:41:6c:1c:7f:e1:71:31:9c:ad:58:f3:39:b9:5d:81:7d:0f:
a4:5b:75:09:ed:4e:ee:df:38:eb:3b:68:cd:c8:dc:36:9c:bb:
87:75:6d:da:3d:0b:85:05:2c:cc:c6:be:10:4c:f0:30:b0:d4:
19:7d:cf:ec:d7:69:e9:2d:ec:c1:05:c6:28:31:3f:62:ec:02:
2a:67:23:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:08 2026 by rpki-client