Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3xQZ83lZbM77V0TbjHAIMm4I1g.roa
File: r3xQZ83lZbM77V0TbjHAIMm4I1g.roa (raw, json)
Hash identifier: nqbXHe+YonJn5/GtTPG5X00Neq4SrwKHo9gCtme/HdQ=
Subject key identifier: AF:7C:50:67:CD:E5:65:B3:3B:ED:5D:13:6E:31:C0:20:C9:B8:23:58
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F9D330CD1008AFB8374BA48573C96EF7C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3xQZ83lZbM77V0TbjHAIMm4I1g.roa
Signing time: Sun 26 Jul 2026 06:53:16 +0000
ROA not before: Sun 26 Jul 2026 06:53:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219160
IP address blocks: 151.241.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9d:33:0c:d1:00:8a:fb:83:74:ba:48:57:3c:96:ef:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 26 06:53:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af7c5067cde565b33bed5d136e31c020c9b82358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:95:e6:38:24:95:9d:4a:71:02:6e:c6:79:52:
eb:89:83:dd:f2:6e:d7:11:dc:83:e1:7d:28:7f:0a:
10:d2:5e:1d:24:31:67:f1:d7:94:57:29:db:ae:e2:
9f:68:44:64:d9:94:54:19:b0:ee:13:43:52:a3:af:
ef:1e:47:6e:7f:5d:52:12:c5:6f:45:8a:51:7e:fb:
9f:b7:cd:26:a0:60:24:71:15:04:28:06:48:de:75:
12:ca:27:e9:d4:57:7b:12:63:d7:27:c6:2b:7d:5e:
86:dd:2d:6d:71:5b:6f:9a:c7:7d:46:e6:20:95:37:
03:6e:fd:00:79:7a:96:4d:f9:3a:36:65:2c:0d:7d:
e4:43:b6:97:eb:5a:99:84:a6:00:c3:ce:0a:ad:64:
6c:93:50:88:bf:27:0f:8f:dd:e3:85:94:27:47:5a:
d8:56:91:94:92:a1:42:4d:1e:6f:6e:c0:9b:2f:12:
d5:f8:01:97:7f:cf:41:20:0a:f2:fe:1e:b0:2f:ba:
15:eb:da:a1:8f:a0:ab:2a:87:ca:e7:8d:a3:65:69:
e1:5a:60:be:08:13:ad:c8:23:5e:ed:3d:78:7b:3a:
e6:96:82:23:aa:73:86:fd:c2:9e:f6:d4:ba:d2:f3:
29:e3:5b:d1:35:b3:00:29:54:0e:07:00:01:83:7a:
bb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7C:50:67:CD:E5:65:B3:3B:ED:5D:13:6E:31:C0:20:C9:B8:23:58
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/r3xQZ83lZbM77V0TbjHAIMm4I1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.12.0/24
Signature Algorithm: sha256WithRSAEncryption
86:81:84:db:13:4e:2d:6b:41:df:94:13:76:c6:43:42:5c:c6:
a4:4f:a2:2f:63:a6:c6:c8:d4:1b:1a:61:af:be:b2:9d:1d:ea:
10:cc:b2:1c:27:00:b7:96:30:07:45:df:5c:e0:65:8c:46:8f:
ae:87:d5:58:4d:3d:cf:d3:c5:64:90:e2:4f:01:ce:b5:a7:82:
4f:6d:04:c0:d6:8f:cb:14:50:34:3f:21:fd:09:73:b8:78:57:
41:0a:6b:ba:c3:35:49:ac:5c:6a:ee:61:b1:b7:f3:a0:7c:a7:
3f:8f:f4:2e:20:2e:21:11:bb:ac:06:de:25:15:f7:bc:3f:62:
b0:0c:93:7c:b1:e1:9d:02:12:2c:3e:99:09:9f:b6:1a:26:00:
70:4c:07:df:5b:c8:3f:d6:e1:0e:e9:81:59:68:8e:c5:e7:af:
a4:ce:02:d9:69:ca:a0:f9:5a:5b:5e:d7:41:43:4d:75:0d:ae:
84:15:36:d8:d3:64:4d:3f:fc:d2:d8:57:f5:2b:71:fe:a9:24:
26:22:0d:be:4b:d5:92:3d:c2:8e:fc:27:82:50:79:5a:4a:bd:
8e:82:04:63:f3:63:04:9e:5e:f5:f9:0f:7f:23:f9:2f:06:96:
01:86:21:51:a2:f9:5e:92:0d:fc:b4:db:44:26:aa:b2:cc:8d:
6c:6e:49:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:06:53 2026 by rpki-client