Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t26Yq8QBGuocJtIcFriCu2sMYDs.roa
File: t26Yq8QBGuocJtIcFriCu2sMYDs.roa (raw, json)
Hash identifier: zrihIiJikLtYuy26sWpLe+UYj1Egh4A3Zq8+1WPHNhw=
Subject key identifier: B7:6E:98:AB:C4:01:1A:EA:1C:26:D2:1C:16:B8:82:BB:6B:0C:60:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C93CD8E84C4DF811C630885BCC4007307
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t26Yq8QBGuocJtIcFriCu2sMYDs.roa
Signing time: Wed 25 Feb 2026 07:57:27 +0000
ROA not before: Wed 25 Feb 2026 07:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209413
IP address blocks: 151.243.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:93:cd:8e:84:c4:df:81:1c:63:08:85:bc:c4:00:73:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 25 07:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b76e98abc4011aea1c26d21c16b882bb6b0c603b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8e:f5:7d:85:f0:c8:db:4e:ee:d4:20:d5:04:
11:c9:da:12:ff:d8:04:72:42:4c:e8:ca:c9:26:f2:
aa:ad:5b:78:99:5e:f0:74:bb:1b:21:25:64:63:02:
75:c4:7c:9d:e9:df:56:05:ce:95:61:d7:31:5b:51:
50:9c:5b:14:f9:1a:7d:ef:59:2d:61:14:94:0e:2f:
e8:0c:45:04:66:1d:28:71:50:9a:ce:03:f2:bd:80:
a7:a0:48:4b:10:8d:dc:26:6b:90:1f:ea:8d:ec:67:
83:31:a8:ca:18:0b:c9:4c:81:5d:60:89:1f:5d:f5:
d5:24:0f:37:5d:24:39:76:47:13:8c:a3:4d:cd:3e:
be:b8:e9:f1:01:59:e6:4e:3e:37:9a:31:b0:b9:a1:
d7:a4:5a:3f:f6:46:a6:71:7c:72:2c:ed:e6:b4:f4:
70:35:19:37:5c:f7:75:bc:28:84:13:37:39:70:4d:
20:0a:ef:cd:d5:1b:15:b4:5c:03:75:81:9b:7d:92:
94:39:5f:d7:93:ba:54:10:94:8b:56:c6:bf:47:d0:
43:4c:26:12:b6:f8:24:b5:57:e6:aa:ea:1b:bf:29:
69:73:75:a1:c2:7f:54:65:a5:5e:dd:4a:ac:37:46:
39:6f:4b:9d:7d:99:9e:b7:b4:d6:80:8d:54:ba:e2:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:98:AB:C4:01:1A:EA:1C:26:D2:1C:16:B8:82:BB:6B:0C:60:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t26Yq8QBGuocJtIcFriCu2sMYDs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.150.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:9d:27:d2:62:c8:d5:b1:2d:08:2e:f9:4b:2a:7a:87:48:e0:
9e:bd:76:75:b0:3b:1a:99:2d:4f:8e:1d:a7:6c:6c:a7:0d:f3:
d6:8b:96:ed:f6:f4:33:4e:b2:c1:c2:91:61:47:dd:ae:3b:7b:
01:b1:e0:9e:c0:a6:9b:6e:3c:c5:a0:d3:e8:db:da:e7:18:50:
f2:0b:20:9c:1a:0b:c9:5f:ca:88:de:b9:94:a8:d3:95:a0:1c:
a0:9d:53:ba:62:96:15:6b:07:26:13:50:8a:35:63:33:e1:11:
8d:e3:d7:66:61:c4:4c:fd:4d:80:a8:48:30:4c:c8:90:c6:a6:
b1:bc:79:16:e1:af:7e:ed:67:fc:3d:5d:dd:49:14:5c:c2:fc:
a9:8e:fd:d8:8c:59:74:d4:5a:f8:91:f2:f7:8c:a6:ca:88:84:
c3:52:9e:86:df:a5:db:f3:60:9e:37:8f:73:b3:a6:ae:41:61:
e9:e8:63:b4:3d:d4:1b:c6:a7:69:63:f0:9a:fb:d9:09:d1:5f:
e7:8d:b9:14:9e:a8:53:b0:ef:44:cc:c8:54:3a:5d:25:ad:65:
b3:6f:e1:78:ee:82:ea:e4:09:a9:32:3e:4e:de:3a:d8:97:a1:
4a:4f:eb:b3:45:21:8e:3c:52:38:0d:82:f1:20:73:13:55:f3:
47:f3:55:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 07:12:22 2026 by rpki-client