Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y2Bto3MS5XqtQA15C6bRZ-g0Y5o.roa
File: Y2Bto3MS5XqtQA15C6bRZ-g0Y5o.roa (raw, json)
Hash identifier: B+gKpOW9T1lXfPv2RshK84e66dvH49u8ot6B80dFUDY=
Subject key identifier: 63:60:6D:A3:73:12:E5:7A:AD:40:0D:79:0B:A6:D1:67:E8:34:63:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A13541289132D4F77C2A3EA10F58D6126A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y2Bto3MS5XqtQA15C6bRZ-g0Y5o.roa
Signing time: Tue 13 Oct 2026 12:33:44 +0000
ROA not before: Tue 13 Oct 2026 12:33:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 151.245.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:41:28:91:32:d4:f7:7c:2a:3e:a1:0f:58:d6:12:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 13 12:33:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63606da37312e57aad400d790ba6d167e834639a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:53:ba:11:46:c7:3b:ff:94:5c:d3:ee:a4:
93:53:75:d7:be:a8:8c:b9:1c:33:f0:3e:09:cf:f7:
b7:0d:66:be:6d:9a:2f:dc:77:a7:9c:6c:91:36:26:
b1:16:ee:2b:8a:8c:c4:d0:b5:ca:8e:f2:9d:f3:f9:
7a:5d:c4:a8:10:8a:1c:01:f0:fd:17:5e:7e:bb:ee:
6c:10:3a:fa:d2:6a:0d:c3:5a:16:c6:a2:cc:d8:92:
be:74:6f:77:3f:04:2d:43:41:d8:1c:7a:4c:6a:2b:
c9:55:59:25:d0:3f:1a:ed:67:9a:d6:0b:2e:06:27:
99:01:98:b7:34:25:d6:d9:f1:1f:97:b9:1b:35:7e:
dd:d7:01:a3:5e:5d:a5:da:d4:05:62:8d:4e:a9:b5:
a6:53:61:06:24:7c:76:0d:1e:9b:14:3e:f4:71:a5:
14:e1:4d:07:37:3b:2e:c1:cb:1a:0f:0e:2a:5d:e5:
dd:25:c5:64:d1:64:a9:27:c4:58:bd:74:62:10:1e:
63:0f:78:01:59:89:fe:ed:05:28:bc:5a:ae:61:66:
85:ab:a4:8f:48:21:5d:14:ee:b5:66:f4:91:8f:09:
81:b4:cb:a7:d8:39:97:a1:9c:bf:97:60:f9:53:41:
f3:2a:89:0f:b5:2d:32:f6:a5:6c:9e:9e:23:12:db:
09:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:6D:A3:73:12:E5:7A:AD:40:0D:79:0B:A6:D1:67:E8:34:63:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y2Bto3MS5XqtQA15C6bRZ-g0Y5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.219.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:25:9a:a5:52:f9:3a:cb:ce:46:71:10:bf:82:a5:82:30:38:
1f:77:26:1d:14:70:b9:e4:7d:52:40:33:63:fa:aa:81:d1:b7:
4e:55:6a:be:79:63:4f:a2:63:0c:35:b8:c2:c1:5b:e6:1b:49:
89:e5:0d:0b:99:b7:a9:19:dd:ba:5e:35:58:87:f7:6e:46:7e:
d6:fb:80:e0:75:bd:8c:96:19:aa:0e:e4:30:c4:f1:eb:c2:15:
76:59:75:a0:1b:01:97:b9:2d:ed:f3:51:dd:b6:f9:66:0e:5c:
da:d4:a2:46:20:4c:68:c9:78:a4:a7:fd:a7:f9:94:63:02:f4:
dd:43:e8:6b:ad:69:a9:b3:60:51:5d:cf:76:8d:b1:57:1f:66:
66:01:6d:99:d9:38:e8:95:7e:c3:1a:a1:c2:99:42:25:36:a3:
94:ad:c6:dc:92:65:c7:9d:53:0b:ef:fa:4e:d2:2e:27:89:8f:
86:7c:81:9a:12:bf:6e:66:e3:12:41:be:30:b1:15:86:77:ae:
1e:e8:ab:61:e2:8e:48:04:49:97:0a:c4:46:83:f8:58:df:af:
98:a2:27:2e:e6:2f:13:c3:db:40:59:71:0b:ce:67:35:15:1b:
c8:ea:8c:f1:36:52:ad:12:d3:1b:f1:19:0e:e4:69:53:a5:dd:
09:1d:09:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaE1QSiRMtT3fCo+oQ9Y1hJqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDEzMTIzMzQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzYwNmRhMzczMTJlNTdhYWQ0MDBkNzkwYmE2ZDE2N2U4MzQ2MzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEtTuhFGxzv/lFzT7qSTU3XXvqiM
uRwz8D4Jz/e3DWa+bZov3HennGyRNiaxFu4riozE0LXKjvKd8/l6XcSoEIocAfD9
F15+u+5sEDr60moNw1oWxqLM2JK+dG93PwQtQ0HYHHpMaivJVVkl0D8a7Wea1gsu
BieZAZi3NCXW2fEfl7kbNX7d1wGjXl2l2tQFYo1OqbWmU2EGJHx2DR6bFD70caUU
4U0HNzsuwcsaDw4qXeXdJcVk0WSpJ8RYvXRiEB5jD3gBWYn+7QUovFquYWaFq6SP
SCFdFO61ZvSRjwmBtMun2DmXoZy/l2D5U0HzKokPtS0y9qVsnp4jEtsJqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNgbaNzEuV6rUANeQum0WfoNGOaMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWTJCdG8zTVM1WHF0UUExNUM2YlJaLWcwWTVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/XbMA0G
CSqGSIb3DQEBCwUAA4IBAQAbJZqlUvk6y85GcRC/gqWCMDgfdyYdFHC55H1SQDNj
+qqB0bdOVWq+eWNPomMMNbjCwVvmG0mJ5Q0LmbepGd26XjVYh/duRn7W+4Dgdb2M
lhmqDuQwxPHrwhV2WXWgGwGXuS3t81HdtvlmDlza1KJGIExoyXikp/2n+ZRjAvTd
Q+hrrWmps2BRXc92jbFXH2ZmAW2Z2TjolX7DGqHCmUIlNqOUrcbckmXHnVML7/pO
0i4niY+GfIGaEr9uZuMSQb4wsRWGd64e6Kth4o5IBEmXCsRGg/hY36+Yoicu5i8T
w9tAWXELzmc1FRvI6ozxNlKtEtMb8RkO5GlTpd0JHQlG
-----END CERTIFICATE-----
Generated at Sun Oct 18 07:26:58 2026 by rpki-client