Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YPuxXcTnDn50JWw2Kpj3tttMCJE.roa
File: YPuxXcTnDn50JWw2Kpj3tttMCJE.roa (raw, json)
Hash identifier: IhProQAKqQY90E5eP6GXLps6QIIRHIELb8jYzQnH4Ho=
Subject key identifier: 60:FB:B1:5D:C4:E7:0E:7E:74:25:6C:36:2A:98:F7:B6:DB:4C:08:91
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0430C3E8B4C19689F4040FDB7A70A0A1F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YPuxXcTnDn50JWw2Kpj3tttMCJE.roa
Signing time: Thu 27 Aug 2026 11:47:50 +0000
ROA not before: Thu 27 Aug 2026 11:47:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 151.247.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:0c:3e:8b:4c:19:68:9f:40:40:fd:b7:a7:0a:0a:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 11:47:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60fbb15dc4e70e7e74256c362a98f7b6db4c0891
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c9:61:46:35:bc:3f:f6:e8:3b:cc:36:59:22:
b3:e6:ba:a2:7f:54:01:f5:85:62:68:ba:0d:fb:e6:
4a:e3:f0:be:ca:4d:f9:5c:8c:2e:ab:1b:b9:ca:4f:
95:85:49:9e:16:fb:78:6f:93:e9:79:73:43:74:fe:
32:38:9b:dd:ef:fe:51:cf:95:ef:61:d9:dd:1e:58:
fd:2c:50:09:13:6a:2f:14:a6:66:00:79:1e:1e:81:
e9:74:a0:63:f4:f9:47:ed:a4:95:37:29:20:10:c5:
84:56:ab:d0:71:05:f0:04:41:7f:aa:e2:2d:6a:29:
27:8d:36:42:02:79:d0:60:c9:07:03:99:70:84:c6:
30:c8:e5:50:d1:d8:2c:30:fd:22:52:ad:6b:42:df:
f7:ca:d8:e2:60:77:63:05:68:5d:82:02:90:20:c7:
ce:bf:42:17:e5:c6:86:ba:45:97:1a:25:3e:be:07:
55:ef:de:87:38:2d:2a:38:3a:39:c0:0e:bd:7a:ea:
aa:74:52:f9:07:77:88:e7:2a:4a:c7:de:e3:7a:d1:
15:f4:fa:45:ab:10:c2:b2:8a:4d:42:2b:7c:bd:28:
9b:a5:49:46:a3:9a:f8:db:cd:04:1e:02:d2:62:17:
5d:69:05:f0:44:e7:2d:8f:54:cd:ae:02:c6:78:28:
37:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:B1:5D:C4:E7:0E:7E:74:25:6C:36:2A:98:F7:B6:DB:4C:08:91
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YPuxXcTnDn50JWw2Kpj3tttMCJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
70:fa:e5:f8:2d:76:b6:28:b5:60:24:1a:bc:c4:c5:d7:52:d4:
a2:11:0d:b8:6d:ea:58:a6:13:91:9e:06:a9:85:7c:d8:ab:9b:
6d:00:0d:d5:f8:11:7d:d4:06:16:dc:53:d4:d5:5a:cb:3c:52:
c4:65:bf:28:cc:d7:5c:b8:60:b2:6c:52:65:fb:11:da:2e:e0:
49:d5:76:96:15:2e:49:0d:6b:e1:e0:e2:30:17:0d:c1:a7:e4:
b4:d7:0e:82:d7:4a:9c:f6:34:61:b7:78:60:3d:be:fe:53:f8:
b0:72:65:38:f6:38:89:9f:a9:58:1e:16:45:fd:28:b0:79:8e:
0f:70:a6:a9:e9:5d:be:61:8c:71:82:83:db:81:c6:05:f3:61:
f1:a9:18:71:0e:7d:b1:32:41:8b:c3:da:14:e0:1d:21:4e:4b:
c0:1a:eb:6f:62:b3:f3:b0:75:5a:98:ea:ad:7d:0e:a3:ee:64:
25:7a:56:20:4b:60:dd:87:dd:5c:c9:a5:93:7a:b5:06:c5:85:
be:5c:82:52:d3:e9:2e:e1:1a:48:1b:8c:e9:5c:bd:fc:88:8d:
2a:77:c2:5a:ab:16:c5:6d:c2:ed:0c:d2:7e:87:25:c0:c1:35:
c2:9a:c2:cc:e2:d1:68:8e:e7:81:e1:61:22:57:f7:9c:14:a7:
f5:83:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 21:27:00 2026 by rpki-client