Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1Y7AKLT171CutHy60WmFs4NWRM.roa
File: R1Y7AKLT171CutHy60WmFs4NWRM.roa (raw, json)
Hash identifier: DKCzy4C6kiIkIkvlkJ8SaV7lzKwFn32gw/oqfWDeStw=
Subject key identifier: 47:56:3B:00:A2:D3:D7:BD:42:BA:D1:F2:EB:45:A6:16:CE:0D:59:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CD759CEA4C7E5EC9FF35E302CE0024632
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1Y7AKLT171CutHy60WmFs4NWRM.roa
Signing time: Tue 10 Mar 2026 10:45:12 +0000
ROA not before: Tue 10 Mar 2026 10:45:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 151.247.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Mar 2026 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:59:ce:a4:c7:e5:ec:9f:f3:5e:30:2c:e0:02:46:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 10 10:45:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=47563b00a2d3d7bd42bad1f2eb45a616ce0d5913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:87:42:41:fb:70:fa:74:eb:ac:16:e1:fd:
57:fe:48:e2:d5:0e:f4:69:a0:12:35:ce:c9:00:88:
f5:ae:9b:89:97:aa:bd:ce:6d:59:c8:4f:87:30:bb:
81:ff:41:eb:e0:94:5e:81:cd:36:6c:8a:7e:b4:a3:
8d:5c:63:e3:8e:b0:19:a0:55:02:06:98:dc:8e:e4:
6f:23:eb:2e:5f:7c:88:44:21:c5:78:b4:33:50:ac:
91:b2:2f:95:85:57:d4:d1:1a:91:91:ad:61:bc:7c:
ff:ab:7d:72:46:9a:e6:f2:0b:37:9e:0d:07:3e:de:
c1:9f:86:be:75:e9:4d:d4:db:10:1c:bc:63:7d:15:
64:20:30:93:a2:a5:37:e1:7f:c4:c5:4d:67:59:57:
83:78:80:af:09:ec:1a:b3:9c:3a:48:d3:77:9f:5f:
d9:d9:52:8e:55:5e:92:a1:92:a7:f0:8a:d2:b0:73:
d0:30:63:c7:ce:9b:7f:df:f8:28:a3:fa:54:c6:62:
74:c2:6d:18:fc:7d:5c:4c:e7:12:be:b5:82:00:04:
b5:83:60:1e:74:fd:d6:d2:45:76:d6:bf:2a:dd:fc:
bc:56:26:f8:e9:4f:81:e5:fa:9c:02:cb:70:70:ff:
e2:a1:0c:76:7e:64:00:05:eb:ff:c0:a8:49:f0:6a:
b2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:56:3B:00:A2:D3:D7:BD:42:BA:D1:F2:EB:45:A6:16:CE:0D:59:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/R1Y7AKLT171CutHy60WmFs4NWRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.100.0/24
Signature Algorithm: sha256WithRSAEncryption
03:9c:2a:00:2f:dc:c2:fe:bf:89:8a:01:f0:53:e5:36:a6:da:
9f:ed:18:36:2c:4e:1e:be:e5:3a:62:1a:d6:b7:94:42:85:0c:
3a:ba:b7:ba:38:b8:1c:46:24:83:8e:b6:d8:7d:d9:5d:f0:60:
12:fd:c8:0f:35:34:60:3a:ef:b6:81:1d:53:78:47:aa:05:e7:
c6:31:fb:93:5b:f0:f7:31:b9:48:9c:53:8e:f3:d3:c7:d9:ba:
0b:2c:14:b6:a3:07:52:d8:32:45:4c:5d:c4:34:85:de:97:9c:
ed:a6:5a:88:52:03:e9:a8:b2:21:9a:6d:ca:03:a8:0c:06:c7:
21:df:bd:01:4e:aa:86:35:92:32:cb:0d:fe:fd:1f:19:a3:18:
dd:1d:f4:0c:06:1b:44:60:0b:24:93:d3:8a:93:c2:ce:bd:13:
f5:f5:a0:bb:85:8f:03:2b:2d:d3:da:f9:c1:3d:47:05:bb:1b:
fa:1f:3f:43:22:ba:22:60:bd:ba:68:74:f2:22:b0:ef:37:94:
35:d6:96:51:9a:cb:cc:ac:f8:97:b7:f9:4e:1d:f2:4b:ee:cc:
20:32:82:38:df:55:df:39:a6:ad:27:1e:2e:a2:23:54:63:b0:
2c:39:95:43:7f:37:b2:4f:28:f3:5d:a2:27:98:06:c4:31:3d:
44:56:7e:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZzXWc6kx+Xsn/NeMCzgAkYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzEwMTA0NTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzU2M2IwMGEyZDNkN2JkNDJiYWQxZjJlYjQ1YTYxNmNlMGQ1OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0beHQkH7cPp066wW4f1X/kji1Q70
aaASNc7JAIj1rpuJl6q9zm1ZyE+HMLuB/0Hr4JRegc02bIp+tKONXGPjjrAZoFUC
BpjcjuRvI+suX3yIRCHFeLQzUKyRsi+VhVfU0RqRka1hvHz/q31yRprm8gs3ng0H
Pt7Bn4a+delN1NsQHLxjfRVkIDCToqU34X/ExU1nWVeDeICvCewas5w6SNN3n1/Z
2VKOVV6SoZKn8IrSsHPQMGPHzpt/3/goo/pUxmJ0wm0Y/H1cTOcSvrWCAAS1g2Ae
dP3W0kV21r8q3fy8Vib46U+B5fqcAstwcP/ioQx2fmQABev/wKhJ8GqyPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEdWOwCi09e9QrrR8utFphbODVkTMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUjFZN0FLTFQxNzFDdXRIeTYwV21GczROV1JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/dkMA0G
CSqGSIb3DQEBCwUAA4IBAQADnCoAL9zC/r+JigHwU+U2ptqf7Rg2LE4evuU6YhrW
t5RChQw6ure6OLgcRiSDjrbYfdld8GAS/cgPNTRgOu+2gR1TeEeqBefGMfuTW/D3
MblInFOO89PH2boLLBS2owdS2DJFTF3ENIXel5ztplqIUgPpqLIhmm3KA6gMBsch
370BTqqGNZIyyw3+/R8ZoxjdHfQMBhtEYAskk9OKk8LOvRP19aC7hY8DKy3T2vnB
PUcFuxv6Hz9DIroiYL26aHTyIrDvN5Q11pZRmsvMrPiXt/lOHfJL7swgMoI431Xf
OaatJx4uoiNUY7AsOZVDfzeyTyjzXaInmAbEMT1EVn7M
-----END CERTIFICATE-----
Generated at Wed Mar 18 09:34:07 2026 by rpki-client