Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xAEyOpVkLlkCdO7desU-P-9zZd4.roa
File: xAEyOpVkLlkCdO7desU-P-9zZd4.roa (raw, json)
Hash identifier: tnsmvgtaqv8UbYVayaESLTDHLcQfVZ4P0mQU3hZZY64=
Subject key identifier: C4:01:32:3A:95:64:2E:59:02:74:EE:DD:7A:C5:3E:3F:EF:73:65:DE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EBC03E7529F48B5FD2BCC9EC2B0EAFA66
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xAEyOpVkLlkCdO7desU-P-9zZd4.roa
Signing time: Fri 12 Jun 2026 13:27:12 +0000
ROA not before: Fri 12 Jun 2026 13:27:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 37.202.208.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.246.144.0/24 maxlen: 24
151.246.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:03:e7:52:9f:48:b5:fd:2b:cc:9e:c2:b0:ea:fa:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 12 13:27:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c401323a95642e590274eedd7ac53e3fef7365de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:36:6d:10:8a:c0:e2:52:8d:95:d9:1a:27:
63:a2:27:1c:fd:7e:09:74:76:27:37:05:e0:85:45:
c1:47:cd:9b:0e:6e:ea:53:e4:c2:ed:4e:16:72:84:
77:60:55:58:02:ea:41:bd:2e:0a:46:d0:f5:38:e5:
c9:57:17:ea:53:e4:a5:ea:d0:9a:d3:f5:c5:7d:72:
fa:ce:bf:55:54:86:d8:fa:02:2f:da:fb:24:6a:1a:
de:b2:8c:37:29:c6:54:4c:e3:5e:43:24:de:2b:1d:
25:b7:ae:71:62:9c:df:c1:05:84:f7:14:6d:a8:c4:
fe:2e:ac:f0:bf:f3:66:2f:6c:86:f6:00:29:ae:ff:
c6:59:70:31:06:18:2e:9a:56:fc:1f:29:dd:c1:41:
f7:71:df:97:77:93:35:54:4b:36:98:f6:66:ef:4b:
b3:a5:20:d4:ea:81:db:99:65:8d:2a:25:87:52:7a:
33:2d:d1:28:05:4a:3a:0c:1e:fe:af:dc:98:e1:f0:
77:78:c3:dc:78:58:a7:0b:29:0e:bb:39:c5:96:c8:
ca:af:e0:4a:49:06:18:5b:76:d8:c0:eb:0d:93:ad:
27:58:a1:f8:e9:c7:58:ea:eb:37:fe:4e:cd:1f:e7:
4b:0c:8c:99:3c:bf:cc:9f:67:ba:96:d3:eb:e8:83:
3a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:01:32:3A:95:64:2E:59:02:74:EE:DD:7A:C5:3E:3F:EF:73:65:DE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xAEyOpVkLlkCdO7desU-P-9zZd4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.208.0/24
151.244.129.0/24
151.246.144.0/24
151.246.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:76:ac:19:b1:20:d5:69:69:fd:59:b2:06:b7:01:71:90:91:
01:27:01:bc:69:76:32:3e:e6:91:88:2c:df:1c:9f:90:7f:2a:
e3:22:25:34:f7:4d:e1:9e:14:64:06:5e:68:5b:a8:20:ac:13:
db:29:c0:1c:28:a2:f7:71:a3:6b:2a:41:b9:cb:94:48:2f:c2:
56:f0:61:b7:19:0d:45:37:51:6f:47:63:96:10:e6:ae:09:21:
1a:95:d6:69:60:4a:4a:3d:36:e2:eb:7e:db:ad:ff:f2:a6:a4:
ee:10:3d:8b:79:0f:10:6e:04:9b:c3:3f:4a:ba:08:49:8e:c4:
88:5d:5a:3a:63:a5:b2:a0:bf:d9:76:b7:3f:30:11:40:c0:70:
64:b6:d5:fe:a2:ca:45:6c:2c:29:a4:e4:30:96:51:83:52:da:
bb:18:9a:fc:fe:99:50:94:b5:08:19:c3:d9:4f:c5:32:59:99:
77:5a:0c:46:77:9e:03:3f:f4:55:f5:4c:18:31:f2:0e:19:16:
23:2c:ad:84:09:77:a9:76:39:1e:2a:f8:aa:33:cb:33:55:49:
4c:c5:35:87:d4:15:4d:7e:9e:e3:f4:6f:7d:52:0f:f2:3d:7e:
8e:34:8e:8d:ea:58:1c:45:e9:9b:bd:07:4a:6b:47:d0:9f:5f:
da:ca:6a:60
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ68A+dSn0i1/SvMnsKw6vpmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjEyMTMyNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDAxMzIzYTk1NjQyZTU5MDI3NGVlZGQ3YWM1M2UzZmVmNzM2NWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkI2bRCKwOJSjZXZGidjoicc/X4J
dHYnNwXghUXBR82bDm7qU+TC7U4WcoR3YFVYAupBvS4KRtD1OOXJVxfqU+Sl6tCa
0/XFfXL6zr9VVIbY+gIv2vskahresow3KcZUTONeQyTeKx0lt65xYpzfwQWE9xRt
qMT+Lqzwv/NmL2yG9gAprv/GWXAxBhgumlb8HyndwUH3cd+Xd5M1VEs2mPZm70uz
pSDU6oHbmWWNKiWHUnozLdEoBUo6DB7+r9yY4fB3eMPceFinCykOuznFlsjKr+BK
SQYYW3bYwOsNk60nWKH46cdY6us3/k7NH+dLDIyZPL/Mn2e6ltPr6IM62wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFMQBMjqVZC5ZAnTu3XrFPj/vc2XeMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveEFFeU9wVmtMbGtDZE83ZGVzVS1QLTl6WmQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJcrQAwQA
l/SBAwQAl/aQAwQAl/adMA0GCSqGSIb3DQEBCwUAA4IBAQAbdqwZsSDVaWn9WbIG
twFxkJEBJwG8aXYyPuaRiCzfHJ+QfyrjIiU0903hnhRkBl5oW6ggrBPbKcAcKKL3
caNrKkG5y5RIL8JW8GG3GQ1FN1FvR2OWEOauCSEaldZpYEpKPTbi637brf/ypqTu
ED2LeQ8QbgSbwz9KughJjsSIXVo6Y6WyoL/Zdrc/MBFAwHBkttX+ospFbCwppOQw
llGDUtq7GJr8/plQlLUIGcPZT8UyWZl3WgxGd54DP/RV9UwYMfIOGRYjLK2ECXep
djkeKviqM8szVUlMxTWH1BVNfp7j9G99Ug/yPX6ONI6N6lgcRembvQdKa0fQn1/a
ympg
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:04:45 2026 by rpki-client