Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUYrpy-GklE8cEe6pe_Yxjy7qe4.roa
File: TUYrpy-GklE8cEe6pe_Yxjy7qe4.roa (raw, json)
Hash identifier: ZgOoh/CyZ5EylnufOtBzX9zHConKeAKyQ5K+P8em5j0=
Subject key identifier: 4D:46:2B:A7:2F:86:92:51:3C:70:47:BA:A5:EF:D8:C6:3C:BB:A9:EE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E73CEBC1CEC4FE731EF9A509C5AC094D2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUYrpy-GklE8cEe6pe_Yxjy7qe4.roa
Signing time: Fri 29 May 2026 12:56:28 +0000
ROA not before: Fri 29 May 2026 12:56:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 151.240.118.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
151.247.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:73:ce:bc:1c:ec:4f:e7:31:ef:9a:50:9c:5a:c0:94:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 29 12:56:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d462ba72f8692513c7047baa5efd8c63cbba9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:37:7b:e9:0e:0f:3a:64:8f:ae:80:15:e5:
39:a2:ba:ff:cc:0c:ff:c2:0f:a9:48:7a:6e:29:ad:
03:17:bc:82:a7:5b:de:e3:40:d4:90:28:68:b0:97:
29:f9:27:9c:3c:1c:dc:30:72:76:af:cf:57:10:de:
3e:ba:ce:90:fa:d6:15:54:7f:89:f5:b8:04:fd:c8:
69:f1:1a:1f:17:d6:d3:22:d1:4b:aa:3b:83:15:8a:
1a:83:2e:e4:03:a3:cd:21:b8:a0:f8:74:4c:99:19:
6e:8e:b2:f3:08:e1:e8:ac:71:79:cf:f4:f4:b3:f2:
6c:5d:97:77:b2:a2:52:13:0a:dc:2c:39:be:c9:36:
65:95:b1:af:24:1a:61:eb:90:08:1b:3f:58:e4:22:
cd:73:9e:d0:e4:96:24:38:52:2d:f4:27:47:ac:59:
01:06:d1:90:9d:eb:14:5a:b8:c6:90:d1:c4:79:6f:
de:11:5e:53:86:f2:95:24:6d:31:d2:4d:29:85:b6:
4f:15:6c:27:75:06:b9:d8:f4:f4:d5:57:87:00:03:
f1:bb:c2:bb:b4:d2:fe:cc:80:85:05:26:91:5a:c4:
81:e0:00:9b:f2:44:50:c0:6a:df:77:aa:d9:4d:fc:
1f:24:57:67:34:4d:6d:13:8f:fe:69:31:41:1d:55:
73:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:46:2B:A7:2F:86:92:51:3C:70:47:BA:A5:EF:D8:C6:3C:BB:A9:EE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/TUYrpy-GklE8cEe6pe_Yxjy7qe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.118.0/24
151.241.51.0/24
151.243.87.0/24
151.243.174.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
151.247.240.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:9d:37:8d:a3:83:fb:35:d2:6d:a9:b9:0e:fd:c2:a2:e0:91:
41:99:da:ca:0d:e0:7f:2d:f0:09:33:91:c0:71:c2:47:cd:fd:
da:79:c4:33:ea:6d:17:76:32:c2:65:57:e6:a7:57:a7:e5:0f:
b3:63:c4:63:0d:28:cc:e2:1e:9d:03:d0:41:33:55:d4:5c:c2:
ec:68:e5:17:d7:e2:1f:ec:da:1d:08:56:7b:4b:dd:bc:d7:7b:
e8:78:16:82:89:71:34:4d:d2:77:94:bd:b3:09:9b:dd:de:98:
a8:9d:ec:85:02:9d:1e:99:7d:64:e6:1d:19:f2:ea:18:e2:ce:
6d:7f:f2:e1:b8:8f:5c:ab:15:a9:c2:e3:3c:d9:0a:23:f2:9d:
44:04:d2:44:7a:a8:e8:97:6d:52:9e:5b:59:c4:b2:43:76:5b:
46:77:60:a1:a9:1e:d2:63:f3:b2:9c:19:59:97:27:7e:15:e7:
57:ed:82:b3:f4:62:9f:64:70:93:90:81:60:a5:10:1d:7e:24:
97:35:4d:c3:ec:ff:8a:fc:30:1d:69:e3:d7:7e:0e:dd:43:a2:
91:bf:9d:2a:1e:c8:91:d7:ae:7e:da:92:2d:d5:cc:40:8f:f6:
51:ea:e5:18:ed:f0:da:9f:1e:72:af:4d:7e:a5:fe:4e:59:fe:
ee:26:2a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:04 2026 by rpki-client