Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v7r76q1QNQjsl52LnqmBJs_aDS0.roa
File: v7r76q1QNQjsl52LnqmBJs_aDS0.roa (raw, json)
Hash identifier: VufRj5nRi5kanTRktdFFDpRD7g3J8sssMk9qtLL3zS8=
Subject key identifier: BF:BA:FB:EA:AD:50:35:08:EC:97:9D:8B:9E:A9:81:26:CF:DA:0D:2D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A904A804A1FBB64172994FEE5CAA5447
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v7r76q1QNQjsl52LnqmBJs_aDS0.roa
Signing time: Wed 16 Sep 2026 07:00:49 +0000
ROA not before: Wed 16 Sep 2026 07:00:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 151.240.148.0/23 maxlen: 24
151.242.236.0/22 maxlen: 24
151.247.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:04:a8:04:a1:fb:b6:41:72:99:4f:ee:5c:aa:54:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:00:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bfbafbeaad503508ec979d8b9ea98126cfda0d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e4:33:7c:42:ed:44:6b:92:ff:4a:1d:93:cd:
dc:58:a6:e4:04:9b:3f:01:22:e2:19:a5:a5:d5:08:
05:fe:02:fb:10:f3:1d:d3:06:a1:55:54:7b:45:b3:
b1:d3:01:2b:97:36:27:c8:75:68:19:ac:fa:71:60:
46:16:38:6c:7f:2d:74:1f:dd:94:f5:29:fb:ad:e4:
5c:a2:4d:0c:ba:44:66:db:32:0f:35:2e:71:c8:1a:
17:30:49:c5:b7:40:00:2c:0d:e2:97:1b:7f:61:65:
ca:90:c8:6e:e7:5b:c7:a4:0c:38:56:63:8e:c2:ba:
87:bc:21:c4:6b:a8:85:49:87:b7:89:37:1a:04:32:
7d:6d:bd:64:24:b9:1c:ae:20:af:6e:40:51:6e:6a:
63:bf:46:dc:81:24:df:e0:3e:a7:af:cb:a2:92:e4:
8f:bd:55:ad:5b:65:25:d7:57:be:57:d6:98:ad:ed:
41:2e:45:0b:7c:55:b7:57:6f:1e:42:d6:87:38:b5:
52:b6:52:7f:d4:5b:ce:54:64:6f:bd:dc:72:c2:17:
9c:d3:fb:fc:20:0e:89:bd:79:6a:3f:62:55:2c:04:
c2:a1:8f:55:c0:31:41:dd:34:a1:7d:e8:11:53:cb:
01:ad:ef:30:eb:73:ec:14:49:b7:2f:7b:d8:2c:c3:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:FB:EA:AD:50:35:08:EC:97:9D:8B:9E:A9:81:26:CF:DA:0D:2D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/v7r76q1QNQjsl52LnqmBJs_aDS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.148.0/23
151.242.236.0/22
151.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:69:d3:12:3a:71:b7:e6:fd:d3:f8:ac:b7:f8:74:f6:e8:5e:
52:70:b8:96:0d:50:cf:e3:73:74:af:35:c3:39:d7:91:ad:5f:
e0:80:f2:30:d8:aa:58:77:49:35:86:3c:aa:5e:e9:01:7e:be:
53:08:e5:1b:a2:1d:ab:1d:0b:c5:77:e9:d0:1f:23:47:58:92:
04:27:f5:9b:b6:d7:37:92:05:b3:28:ce:87:82:05:8d:10:06:
e3:5e:d2:eb:35:3d:d5:4b:2d:33:4f:50:20:01:83:77:47:fa:
b5:68:81:03:11:91:5e:4f:93:49:11:bc:4c:f9:95:a0:a2:8f:
d1:26:29:40:d2:b0:13:89:50:54:c4:79:18:aa:92:a6:08:f5:
6b:16:37:78:aa:cf:06:21:a9:58:9a:44:80:65:32:b1:27:dc:
d6:08:4e:66:0b:1f:0b:87:88:7c:08:be:b1:0f:e5:65:38:ec:
4e:9e:cf:70:3b:4b:60:1c:87:66:85:ca:93:cd:51:b9:20:95:
d7:2e:89:23:45:68:f4:7d:bb:b2:2a:27:4a:5d:1c:80:77:6a:
83:a8:0a:0b:d8:de:75:df:2d:55:18:88:cc:97:54:4b:95:ad:
23:17:49:56:4f:63:41:57:60:f0:f0:a9:cc:3b:33:f8:51:63:
53:3e:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:38 2026 by rpki-client