Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sF6ohRGuSSIGFBsziSTt8FBorUY.roa
File: sF6ohRGuSSIGFBsziSTt8FBorUY.roa (raw, json)
Hash identifier: TQO6w3esoGnD/Ab9geRXKZ3kT7+P2fzU8ahQLxfJbx4=
Subject key identifier: B0:5E:A8:85:11:AE:49:22:06:14:1B:33:89:24:ED:F0:50:68:AD:46
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA089E394F2B29C886E9E56EB0963FE0A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sF6ohRGuSSIGFBsziSTt8FBorUY.roa
Signing time: Sun 07 Jun 2026 05:24:11 +0000
ROA not before: Sun 07 Jun 2026 05:24:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402507
IP address blocks: 151.247.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:89:e3:94:f2:b2:9c:88:6e:9e:56:eb:09:63:fe:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 05:24:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b05ea88511ae492206141b338924edf05068ad46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:aa:eb:2a:32:b5:8b:e1:8d:a6:c5:c7:88:9f:
a1:e9:09:ea:c1:f4:7f:b4:b0:98:cc:c8:66:6b:99:
ac:7f:6e:4c:be:36:f7:f3:62:8b:82:02:33:45:c3:
39:26:ea:0b:61:b1:8d:ed:54:01:8d:f8:94:d5:db:
37:d7:66:35:c4:37:9f:86:df:b5:30:e4:a8:79:99:
ee:d5:a5:e1:f7:8b:0d:dd:b9:b1:a1:a9:af:01:5c:
02:4d:f6:d5:5d:0d:c4:45:24:71:13:d8:29:ef:e4:
fb:35:1a:ca:37:16:48:14:53:fe:55:8e:d2:fb:5f:
a8:ab:5e:eb:12:03:a7:8f:54:b3:59:80:82:59:b2:
db:3d:e3:bc:3f:f1:57:78:04:c0:53:e6:07:49:6c:
a5:40:ec:9a:5d:57:d1:63:ba:e0:64:2e:1b:6e:ea:
40:c8:05:57:29:6f:68:d8:1c:5f:40:8d:9d:6a:6c:
47:89:d8:f6:e3:9e:93:44:c7:bf:09:9c:bd:e6:53:
ab:09:9a:76:2a:dc:d7:26:5c:74:a9:fe:bd:f0:51:
e9:03:d0:40:fa:70:ed:e3:dd:32:90:11:06:f8:39:
06:81:68:19:d2:98:76:ff:8f:e9:d5:c4:8a:98:10:
4c:6f:84:4c:9d:a1:e2:26:8a:2a:e7:2f:e3:fd:46:
89:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:5E:A8:85:11:AE:49:22:06:14:1B:33:89:24:ED:F0:50:68:AD:46
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sF6ohRGuSSIGFBsziSTt8FBorUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.116.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:0a:53:cc:7d:1b:9b:ff:e8:1d:c6:d7:e9:ff:f5:70:34:35:
61:d6:c8:60:ac:9b:a6:11:4a:59:00:f7:ba:b7:c3:ac:75:38:
fd:34:4f:ff:cf:6b:a9:bc:ba:7d:10:bb:ec:0d:4a:3e:15:6a:
49:a7:f7:70:d2:3a:c8:01:f2:90:47:db:a4:ed:aa:e6:00:b3:
02:ae:21:ac:ed:8b:bf:8c:30:1c:17:f0:0a:10:68:fa:dc:7e:
cd:72:1f:ec:4f:f8:f6:c0:fb:0a:fa:06:e6:b5:ee:7e:3b:32:
d8:67:58:84:46:5a:b0:ca:9b:b6:69:16:59:61:cc:ef:15:14:
0a:28:a3:a5:fe:64:15:7e:8f:3d:37:c5:eb:cf:c6:85:56:65:
cc:2c:af:43:48:c2:b4:47:a4:0b:78:fc:e9:7d:52:80:b7:1a:
95:9f:d1:85:70:60:4a:3c:3c:9c:42:16:24:8f:51:26:ee:4c:
50:13:02:ac:69:5f:12:5a:78:36:b9:73:6d:cf:a5:fc:11:13:
a5:d1:c2:72:95:2f:fc:26:87:da:28:25:6c:7b:af:6a:98:c5:
5d:84:08:41:1a:55:4b:78:ab:c3:15:6c:4f:cd:b1:c1:30:19:
e8:24:7b:e2:f9:48:6d:71:5a:4b:02:c3:c4:58:6c:4f:59:15:
d3:78:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:31 2026 by rpki-client