Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n4N5EfbYHjZYAcSGfipYer1zflM.roa
File: n4N5EfbYHjZYAcSGfipYer1zflM.roa (raw, json)
Hash identifier: 0gDuTe4AzodnVGVULrszCKVW4evo4muROn+yNlDtiRo=
Subject key identifier: 9F:83:79:11:F6:D8:1E:36:58:01:C4:86:7E:2A:58:7A:BD:73:7E:53
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D69178192A8178ADB1A7FD905D475E1F7
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n4N5EfbYHjZYAcSGfipYer1zflM.roa
Signing time: Tue 07 Apr 2026 17:57:21 +0000
ROA not before: Tue 07 Apr 2026 17:57:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60542
IP address blocks: 151.247.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:69:17:81:92:a8:17:8a:db:1a:7f:d9:05:d4:75:e1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 17:57:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f837911f6d81e365801c4867e2a587abd737e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:10:0d:3d:66:cc:2e:be:48:a2:33:2e:9d:8c:
e6:87:67:93:89:1b:cf:9c:b5:6f:b3:ad:a9:a3:ab:
80:6d:3f:d0:ee:97:4f:93:9c:7c:9d:16:36:ba:40:
71:6b:72:f8:44:e3:30:b9:aa:c4:13:88:37:c1:0d:
13:b2:35:26:b3:f4:70:6e:37:a2:80:bf:c8:a3:86:
dd:0d:37:0d:61:7e:38:89:3b:75:58:c3:37:cf:f8:
95:5e:8d:c0:c9:58:a4:f9:5c:47:38:47:73:d9:de:
f9:1e:f9:a3:17:ac:85:5a:a1:94:be:d7:a4:bd:18:
7a:ce:56:df:4d:4e:86:de:df:4b:d3:fc:c7:52:60:
d0:32:06:98:ac:c3:6a:31:a6:54:da:be:f6:b8:e1:
c4:9e:55:51:7c:5c:d4:8c:a7:2b:b1:94:6b:58:e2:
62:16:f0:c9:33:11:2e:cd:b0:e1:cf:1e:29:bd:55:
33:f9:8a:84:0f:54:ee:db:17:bb:4c:bb:38:45:ab:
40:bc:f5:f7:cf:b5:21:54:cc:95:1f:db:9a:2e:bd:
62:30:49:b6:a4:9d:15:e0:fb:6b:d9:a1:83:90:76:
c8:46:38:14:5b:0c:dc:14:09:a5:41:1f:ed:9a:a6:
c3:f7:60:82:76:e4:38:8c:9d:36:f0:82:e2:70:38:
88:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:79:11:F6:D8:1E:36:58:01:C4:86:7E:2A:58:7A:BD:73:7E:53
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/n4N5EfbYHjZYAcSGfipYer1zflM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:c4:5f:eb:89:ab:71:7b:e2:02:f9:4d:55:e7:e7:75:be:e1:
4e:3d:87:81:42:b6:a4:20:c8:71:ee:6c:86:94:72:79:f5:5e:
e7:15:13:ef:0f:f8:85:73:17:95:9d:eb:66:92:eb:89:35:b8:
b8:58:39:16:41:5d:bf:92:d7:f7:1a:a0:28:b0:32:8c:58:12:
19:80:55:3d:88:61:0b:1d:d3:4f:65:57:b8:29:33:96:04:c9:
de:a9:bd:05:19:83:90:09:d4:19:b5:a6:72:b2:13:4b:f4:5a:
a0:ee:a8:2b:7b:d9:55:af:4b:96:2e:5b:c5:3a:34:7f:0d:c6:
2e:54:be:29:a0:37:84:56:da:33:62:5c:b4:c8:ef:cf:65:6d:
79:ca:6b:31:0a:33:66:64:96:d3:b3:f9:54:58:1e:f8:b3:0a:
80:29:05:c2:84:c8:19:2a:80:1e:a3:d3:a7:67:17:aa:05:a6:
56:b1:a4:2a:45:a2:ee:7d:c3:5a:18:66:e2:6c:71:52:07:80:
82:1a:5e:e4:65:20:48:40:4a:d4:bf:06:6a:34:89:af:76:68:
1b:98:78:86:68:00:a7:bf:51:f4:ce:dc:ad:24:1f:27:76:34:
10:1f:d1:d2:9a:9e:f1:eb:c0:94:64:64:3b:02:16:95:97:27:
68:ab:17:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:02:02 2026 by rpki-client