Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4ZbyIEac95yDWURplBk0Eqm2hI.roa
File: Y4ZbyIEac95yDWURplBk0Eqm2hI.roa (raw, json)
Hash identifier: 0VpPhPe48y2JGGgWlrT22N7Rvd5UECwd0pZabj/7H48=
Subject key identifier: 63:86:5B:C8:81:1A:73:DE:72:0D:65:11:A6:50:64:D0:4A:A6:DA:12
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1DEAF484789FF9A744CC30FF5199FCDA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4ZbyIEac95yDWURplBk0Eqm2hI.roa
Signing time: Wed 01 Jul 2026 13:42:45 +0000
ROA not before: Wed 01 Jul 2026 13:42:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211373
IP address blocks: 151.242.21.0/24 maxlen: 24
151.243.248.0/24 maxlen: 24
151.243.251.0/24 maxlen: 24
151.245.134.0/24 maxlen: 24
151.245.194.0/24 maxlen: 24
151.245.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:ea:f4:84:78:9f:f9:a7:44:cc:30:ff:51:99:fc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 13:42:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63865bc8811a73de720d6511a65064d04aa6da12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:50:66:2e:44:c0:ee:45:68:cf:0e:40:7f:4c:
10:38:a1:fa:0f:a4:ec:59:05:66:78:f4:f9:6d:71:
4f:f3:69:ff:ac:22:83:0b:96:81:f4:ca:a3:89:08:
9d:3d:1d:52:00:00:0f:17:9a:69:31:9f:ad:28:59:
1b:bd:89:2b:9f:bf:15:ef:73:01:cd:b0:45:07:65:
ec:40:1f:ea:76:b7:69:10:97:70:0d:ea:dc:f5:68:
eb:31:2d:13:a4:1d:73:b7:38:df:d1:fd:81:df:6e:
50:72:d2:40:cc:4f:e5:a8:b4:2a:91:12:0b:5d:7b:
e6:1a:b0:ca:1e:9d:bf:5d:a4:e2:1c:cf:ee:96:80:
fc:3b:18:ed:32:36:c0:89:be:6f:13:ac:f5:37:f0:
c0:85:39:d1:a4:35:3d:6c:70:24:16:71:a7:c0:8b:
c9:fa:95:41:14:08:91:52:05:74:e1:e3:13:fa:51:
24:81:53:b7:0e:60:97:66:fa:91:34:b4:aa:74:5b:
b7:6c:df:2f:f6:13:7c:57:09:6d:5b:72:16:3c:b7:
34:56:29:92:5c:c3:52:9c:8c:40:59:44:52:3e:2d:
0e:11:2a:23:b9:6e:cb:0e:ae:c2:df:9e:23:cb:01:
30:9d:4a:fc:9b:fb:bb:d4:a9:1d:ae:39:3a:af:6b:
41:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:86:5B:C8:81:1A:73:DE:72:0D:65:11:A6:50:64:D0:4A:A6:DA:12
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4ZbyIEac95yDWURplBk0Eqm2hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.21.0/24
151.243.248.0/24
151.243.251.0/24
151.245.134.0/24
151.245.194.0/24
151.245.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:93:3d:bc:fe:45:ab:ab:94:9d:8f:7e:1e:2f:20:7d:2e:9d:
40:76:b7:a5:a2:fd:e7:ad:10:71:cb:84:83:d6:ff:85:94:9f:
13:ca:59:1d:c7:8d:7f:90:55:a2:58:2c:17:83:7d:4f:82:2d:
aa:e9:43:05:94:25:c9:8e:b7:f6:2b:3b:7e:e7:37:74:39:f3:
49:ca:98:c7:dc:35:19:18:8c:fc:1f:d7:b0:27:85:30:45:bf:
86:83:e0:1a:09:18:b3:8e:fd:70:b7:0b:7f:68:26:ad:a2:3f:
bb:76:b7:de:b3:3c:90:9a:71:e2:00:3d:b4:57:45:be:09:ac:
11:f4:bb:cb:ac:75:32:4d:bc:96:09:1f:0f:6d:74:46:81:1f:
70:d4:07:53:6d:5d:c7:9a:58:5d:30:db:8c:97:98:ff:81:5b:
80:bd:bf:53:d2:06:f4:c0:f1:52:64:e4:e9:74:e3:a5:2e:9f:
21:13:7b:69:5f:36:91:52:9b:a2:82:28:f5:c2:65:e5:85:83:
4f:54:7f:0c:33:5c:87:16:bf:a8:cc:8f:aa:53:df:c6:3f:ef:
23:cd:dc:b6:a0:29:a9:7d:f9:d3:d0:0e:96:58:7c:69:fd:29:
f9:e6:8a:81:33:87:ec:6b:d3:c3:86:4e:55:57:e7:8a:0b:98:
bf:fc:c1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:14:36 2026 by rpki-client