Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y9ptp_wbjgrD_LXw7KG5Wh92i4.roa
File: 9Y9ptp_wbjgrD_LXw7KG5Wh92i4.roa (raw, json)
Hash identifier: UftvZUKVMxMlFND58nXE9dMA1G/2jVmcMxJAh50aWn8=
Subject key identifier: F5:8F:69:B6:9F:F0:6E:38:2B:0F:F2:D7:C3:B2:86:E5:68:7D:DA:2E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FEA81A6B334DF41F77434CA2CEC8CDECD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y9ptp_wbjgrD_LXw7KG5Wh92i4.roa
Signing time: Mon 10 Aug 2026 07:09:53 +0000
ROA not before: Mon 10 Aug 2026 07:09:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146813
IP address blocks: 151.240.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ea:81:a6:b3:34:df:41:f7:74:34:ca:2c:ec:8c:de:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 10 07:09:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f58f69b69ff06e382b0ff2d7c3b286e5687dda2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:77:71:ed:7e:61:cd:a0:a8:f0:14:4e:7f:
63:e5:ab:79:3b:0c:7b:f4:ef:e6:4a:5f:3c:07:ef:
65:22:ca:5b:cb:13:23:55:f7:4f:c3:00:fb:0f:39:
3a:94:fc:67:95:73:d5:a2:8e:cf:e8:16:d6:c5:15:
05:9e:bf:5e:33:01:b0:0f:83:c4:68:4a:2f:0b:9e:
3b:4e:9d:fa:b9:35:b8:b9:9a:af:21:6e:20:17:b8:
a5:44:87:89:72:ff:d0:43:31:0f:f2:bc:41:e4:4a:
89:c4:4f:d2:e6:df:1e:1e:36:a1:5c:d4:df:b0:4e:
5c:fa:52:0c:ca:b9:0b:7e:9a:88:66:70:ca:d6:53:
c5:a6:f0:b2:2d:7f:80:f1:21:54:6c:c2:78:6b:b8:
55:07:89:d7:79:72:98:dd:48:7c:8c:2d:b3:88:c1:
26:05:cd:aa:bd:d3:8b:a7:54:b8:c6:5f:33:f4:a7:
c9:8b:0f:be:44:0b:f4:46:36:e8:c1:95:d6:25:8c:
91:cf:5e:07:b9:56:dc:0a:b8:c3:51:cf:1b:c1:4f:
95:21:b5:59:21:b4:c0:a4:8c:5b:bb:d8:d3:ed:a0:
f8:87:58:70:97:1d:ae:13:57:b8:34:18:c1:8b:cc:
8b:2d:8e:b7:b6:c5:52:36:b7:e6:68:25:a1:f2:aa:
bb:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8F:69:B6:9F:F0:6E:38:2B:0F:F2:D7:C3:B2:86:E5:68:7D:DA:2E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y9ptp_wbjgrD_LXw7KG5Wh92i4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.87.0/24
Signature Algorithm: sha256WithRSAEncryption
29:4f:a5:37:e7:62:7c:6b:de:2d:a8:d7:1d:dd:bb:95:d1:31:
46:27:b5:e9:e3:b4:7a:31:c3:f6:8d:3e:4e:11:e8:53:9a:f0:
7c:a9:cc:6e:79:27:89:87:3a:7b:4d:13:46:e3:a0:87:83:b1:
eb:65:c9:70:79:c8:cc:3c:c1:ba:0b:03:53:3f:12:14:fe:24:
29:1b:d5:fd:5a:b0:99:93:3b:54:79:ca:c9:a9:df:64:f1:df:
8c:a1:64:b9:fe:1e:72:f9:70:4f:25:9f:39:72:b8:f9:0d:70:
ad:6b:e9:6c:4d:a8:ef:c1:da:5d:12:2c:6e:36:4b:98:60:e6:
d1:8c:41:a4:52:cb:7e:99:ae:39:e7:f6:8d:17:fb:95:10:a1:
19:de:69:54:dd:23:05:ec:71:a4:8f:11:0f:e6:5c:23:56:b0:
d7:a4:4e:a3:cd:c8:7e:41:e0:64:3e:a1:c3:39:57:67:ee:b7:
b6:6f:d6:9e:fd:05:44:6c:52:de:25:66:e1:4e:79:2f:e8:da:
07:36:6c:47:4c:3e:d2:fb:d5:ed:80:81:0a:7d:d7:88:c9:22:
34:9d:59:98:cb:e4:42:9f:f6:b9:4d:14:b6:98:3f:7e:42:db:
b2:b0:7e:99:18:ba:2a:86:fb:b5:17:a3:0d:b3:ea:67:78:25:
ce:4c:93:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:36:13 2026 by rpki-client