Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YNdFeV4kRvSxygqzTCaiKkhhab4.roa
File: YNdFeV4kRvSxygqzTCaiKkhhab4.roa (raw, json)
Hash identifier: zJG1kTpjjx8N/2HmezcQ9n1ZmX3H2BD1X4SzzNc0ie8=
Subject key identifier: 60:D7:45:79:5E:24:46:F4:B1:CA:0A:B3:4C:26:A2:2A:48:61:69:BE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FBBC01C8574218A1EC691F3D81F6F089A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YNdFeV4kRvSxygqzTCaiKkhhab4.roa
Signing time: Sat 01 Aug 2026 05:15:57 +0000
ROA not before: Sat 01 Aug 2026 05:15:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200169
IP address blocks: 151.242.192.0/24 maxlen: 24
151.243.129.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:bb:c0:1c:85:74:21:8a:1e:c6:91:f3:d8:1f:6f:08:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 1 05:15:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60d745795e2446f4b1ca0ab34c26a22a486169be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:cf:06:49:c6:fd:dd:86:2e:35:26:4a:6f:
a2:30:72:5b:63:b5:31:0d:0b:9d:19:cf:f0:98:18:
f8:50:fd:e0:02:ab:8f:90:32:16:cf:f8:95:70:e5:
38:36:90:51:69:67:5f:d0:cf:a8:c6:a7:66:29:69:
04:00:04:3d:b3:25:d4:bb:d1:28:8d:9e:62:f0:0b:
35:67:1c:b2:1d:88:3a:06:9e:d9:66:58:9e:99:57:
94:02:27:40:62:ee:62:7b:45:a8:25:e0:b3:ef:38:
07:de:fd:a5:12:32:6b:d9:50:f0:dd:09:65:56:f6:
d1:6d:f5:5c:55:b9:88:42:fb:43:62:1d:28:bc:21:
86:bc:15:22:82:20:6f:17:ab:87:40:1b:2f:4d:4b:
80:11:67:04:08:a1:39:96:91:8c:7c:2a:95:3c:44:
c2:c0:3d:c9:f3:e2:75:12:5d:1c:28:55:44:7b:50:
c7:05:7e:79:5e:72:7e:e2:22:4c:33:ce:b9:0e:cb:
0c:01:1c:e3:a0:91:84:70:7b:20:cf:33:98:73:7f:
38:7f:7e:80:71:11:9e:83:a1:ce:65:54:fd:19:78:
9b:af:be:04:04:11:f9:4c:75:74:69:fa:13:1e:7a:
d0:0c:21:58:68:b0:c5:4f:d6:7c:46:f5:fe:76:71:
96:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D7:45:79:5E:24:46:F4:B1:CA:0A:B3:4C:26:A2:2A:48:61:69:BE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YNdFeV4kRvSxygqzTCaiKkhhab4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.192.0/24
151.243.129.0/24
151.244.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:94:f0:a1:52:60:a8:0c:45:ad:64:71:d3:3d:89:d0:e2:bf:
d1:c5:e1:09:e2:44:af:31:be:43:24:ac:4e:80:30:2a:25:0f:
a7:58:43:c0:f7:24:b1:3b:4f:95:3b:36:8d:8f:51:bd:bb:a5:
d1:71:30:40:ea:fb:a6:6e:e1:fd:60:ec:17:57:a2:7d:9c:cc:
3f:4d:99:b1:77:18:2e:2a:cf:70:db:14:b4:66:94:8b:54:db:
b6:3b:0b:a9:85:3b:6b:4a:77:e0:a6:10:31:0d:3a:d3:86:75:
63:48:6b:1e:d1:26:2a:74:ce:f4:4d:5e:fc:c7:49:18:28:a4:
4e:ef:3e:f6:15:a1:d7:35:99:dc:02:e2:91:ad:24:61:cb:60:
5b:55:f5:f2:a5:5d:6b:79:3a:59:9c:14:5d:62:72:60:38:f1:
8b:a0:a1:67:4b:c9:3d:fe:7a:d2:e1:5b:80:1e:cf:78:e3:1e:
2f:3f:fe:87:c2:0d:61:69:b6:0f:a0:ed:df:f8:60:e3:25:72:
f4:f0:5c:a8:4c:cd:35:36:82:4a:d0:69:b9:7b:c9:b1:d3:ad:
38:8e:8a:8c:a9:fd:29:ad:f3:ba:f7:17:ad:3a:27:a8:b3:de:
fc:bd:32:2e:03:23:5b:76:a0:6d:fe:1c:e3:39:4b:63:94:bf:
40:71:e7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:34 2026 by rpki-client