Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xoyKvNWewdotmwCkt-UQa2jCa8w.roa
File: xoyKvNWewdotmwCkt-UQa2jCa8w.roa (raw, json)
Hash identifier: Aw1QZeohpZ681RUXHHYuJ+jTd325zmEpO/3X9P4s6+g=
Subject key identifier: C6:8C:8A:BC:D5:9E:C1:DA:2D:9B:00:A4:B7:E5:10:6B:68:C2:6B:CC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EABEA35A3A1743EBEB682EDF0555A7772
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xoyKvNWewdotmwCkt-UQa2jCa8w.roa
Signing time: Tue 09 Jun 2026 10:25:13 +0000
ROA not before: Tue 09 Jun 2026 10:25:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395089
IP address blocks: 151.244.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:ea:35:a3:a1:74:3e:be:b6:82:ed:f0:55:5a:77:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 10:25:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c68c8abcd59ec1da2d9b00a4b7e5106b68c26bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:92:c6:3e:71:f9:53:43:76:9a:c1:c3:69:
de:69:1e:70:19:e6:ed:ef:a6:71:17:fe:27:4a:0b:
32:e5:31:f7:d9:c9:9a:72:1b:fd:a8:ed:2d:ed:53:
c3:13:de:ef:b6:5a:da:06:4d:86:e8:ed:f0:9a:af:
e9:1a:0b:ba:c1:70:9f:9a:1b:00:f3:d8:86:27:00:
c2:a6:62:34:bb:6d:fe:eb:06:42:a8:19:49:14:63:
9f:71:44:ed:69:aa:32:3b:4c:18:b6:53:42:ff:dc:
20:3d:2e:55:f2:a3:bf:47:2a:e1:e7:d1:4a:d4:4e:
d0:b9:8b:e0:b1:a4:e0:9e:21:c8:dc:4a:c8:f5:3f:
82:14:6d:c3:1c:48:10:91:51:d1:8c:27:25:2a:a8:
b0:ab:d0:37:d7:7d:9f:58:c0:17:88:2b:d2:1c:7e:
10:34:79:26:a4:f0:61:fe:0f:57:6e:38:10:20:aa:
9f:88:af:96:9e:25:7d:6b:13:7e:f2:d2:22:b8:cc:
90:8c:37:13:27:5d:8d:5b:a4:0e:8a:13:d6:f2:90:
4f:41:23:c5:d2:41:62:d2:30:db:5a:9a:8e:96:77:
c3:d6:fe:4f:1a:c3:3c:ae:ee:51:6d:56:71:c7:f8:
9e:ff:a6:4b:d0:5e:9f:d7:24:b1:89:aa:09:a6:f8:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8C:8A:BC:D5:9E:C1:DA:2D:9B:00:A4:B7:E5:10:6B:68:C2:6B:CC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xoyKvNWewdotmwCkt-UQa2jCa8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:38:9a:c8:1c:9d:6f:ad:09:d6:86:ea:f5:40:0b:40:8e:d1:
f2:00:5d:d7:7d:0b:c9:39:b8:43:88:b2:2f:6d:20:79:71:a3:
b7:09:d1:51:3c:d7:41:8f:7e:56:9b:12:52:4d:f3:2c:b0:90:
f4:0d:2a:c7:0c:9b:b0:a0:35:ab:dd:93:fb:4e:90:81:d6:b1:
14:8b:3d:fb:8e:a8:52:50:34:21:8c:0f:a1:b9:33:b2:60:78:
a1:e7:c4:2c:cc:c4:77:53:9b:c8:7d:5b:1c:9b:32:d2:88:64:
2f:52:c5:cc:fb:c2:89:bd:08:62:83:a1:33:23:e1:57:43:00:
35:a0:7e:57:c5:e9:ac:a1:62:62:34:eb:b7:4d:d3:12:1d:2d:
96:15:39:28:be:ae:62:41:6b:60:f7:f7:0e:af:4d:38:35:ea:
44:d9:39:8d:cd:11:7f:fa:ac:37:fc:c2:9a:f0:ec:71:2d:59:
f8:40:94:59:4d:a2:12:d3:3a:a2:e3:02:3b:bf:c6:84:2e:97:
ef:6f:81:52:a3:50:68:e7:ce:ef:04:e1:0f:b9:60:b9:fc:5b:
19:eb:9c:b5:48:27:c6:96:83:51:c2:fe:07:6b:45:a8:a9:a5:
39:9c:96:23:d2:d5:ed:98:00:a2:1f:d7:f6:8e:66:b6:a8:50:
9b:cf:64:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:58:27 2026 by rpki-client