Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YKIGXqkkEfUlwVEkZQFBhFrJVBM.roa
File: YKIGXqkkEfUlwVEkZQFBhFrJVBM.roa (raw, json)
Hash identifier: GjrRJZJiNRsFQ1cGtw3aKLyph88pgUlRQbLWFkBZQ2c=
Subject key identifier: 60:A2:06:5E:A9:24:11:F5:25:C1:51:24:65:01:41:84:5A:C9:54:13
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CCA014E45E5993C149A07A0F3F0C34DDC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YKIGXqkkEfUlwVEkZQFBhFrJVBM.roa
Signing time: Sat 07 Mar 2026 20:33:28 +0000
ROA not before: Sat 07 Mar 2026 20:33:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213163
IP address blocks: 151.247.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 20:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ca:01:4e:45:e5:99:3c:14:9a:07:a0:f3:f0:c3:4d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 7 20:33:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60a2065ea92411f525c15124650141845ac95413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2a:52:65:fe:a1:c8:25:72:89:f1:36:a2:f7:
df:e4:ca:4c:3c:40:a5:5d:6e:2b:b2:b0:d4:8c:3b:
3b:c6:7a:a7:73:2f:58:fd:82:ca:7e:bf:33:34:be:
52:5e:8f:93:23:10:c3:c5:25:01:89:df:50:06:47:
95:7b:0a:e0:ab:59:9a:5b:9e:87:99:be:14:a7:9c:
b8:75:a8:0d:3e:28:42:d7:40:87:b0:fa:7e:57:09:
01:db:85:c6:32:6e:fd:06:5d:aa:c5:a6:8a:c3:98:
98:e5:42:8a:5a:03:ad:f7:51:7a:3d:72:80:f8:f2:
8b:bb:6d:b8:e5:3b:da:c2:3f:3b:4a:5b:c1:5f:19:
03:28:a8:31:1d:0a:71:95:fe:e5:15:5a:50:ec:16:
fa:25:ba:0f:b7:46:08:b0:76:34:54:6a:fc:42:ee:
20:1c:32:dd:ab:8a:0d:26:41:fb:92:be:4c:ad:02:
a2:61:31:ad:27:d4:8a:4d:ca:9d:67:7a:21:de:2a:
b1:fb:d1:f0:74:2a:e8:73:e0:c3:4a:17:30:8e:bd:
7a:86:5e:21:96:b4:86:90:d9:30:cb:b2:39:6a:18:
ab:8a:98:6f:3b:76:d2:2e:b5:d7:69:6e:8b:72:a3:
f4:32:0a:e7:da:05:ec:b0:70:80:10:c3:dd:a8:66:
9d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A2:06:5E:A9:24:11:F5:25:C1:51:24:65:01:41:84:5A:C9:54:13
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YKIGXqkkEfUlwVEkZQFBhFrJVBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.236.0/24
Signature Algorithm: sha256WithRSAEncryption
64:59:75:e3:79:01:07:ef:37:40:45:a9:82:3a:e9:9c:b2:b7:
c0:74:4c:82:df:af:4f:72:fd:40:91:c8:76:f7:eb:ea:a7:7b:
de:f8:6f:c0:d5:85:14:ae:85:a9:5f:7e:a1:6e:d0:27:fc:8e:
92:b3:8d:d5:6c:ca:6d:63:59:8f:f1:b3:57:f0:d1:b2:9f:56:
29:4d:57:87:09:c5:e8:7b:7a:2e:d0:d7:1b:23:4f:4c:c0:37:
19:c9:d0:fd:6d:1c:c5:53:45:b2:7e:46:75:3d:25:72:92:df:
83:bb:7c:32:80:0d:0f:da:e4:d7:91:8d:6e:a2:e0:4f:5f:27:
5a:19:79:ce:30:39:a6:b6:b5:90:09:62:ee:49:ca:0d:ae:cf:
7c:fe:05:f4:c0:ed:b3:bd:b9:63:f0:d6:a7:dd:0f:3b:eb:f8:
6f:d0:2e:05:2a:be:01:24:6c:50:78:7f:11:49:dc:80:30:bc:
73:61:80:1d:e6:36:9e:c0:c2:6b:4e:2b:91:9e:db:63:ab:00:
a0:64:b8:c8:37:5d:70:7a:f3:d5:ef:a3:6a:b0:8d:84:f4:a8:
97:08:80:87:e4:f6:46:c7:f1:f7:51:f5:ef:e6:ce:4a:91:ac:
96:e3:8f:de:d6:90:9b:bb:c4:de:eb:d2:a8:fc:b7:f5:23:46:
b5:ca:27:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 00:19:55 2026 by rpki-client