Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YT9BRiXXE64h812qufsFy3cG-sk.roa
File: YT9BRiXXE64h812qufsFy3cG-sk.roa (raw, json)
Hash identifier: Mc/GSwFntaLGM1FnNQ1b5Ygs/Hcm6F2ZYfgtdSaYEEA=
Subject key identifier: 61:3F:41:46:25:D7:13:AE:21:F3:5D:AA:B9:FB:05:CB:77:06:FA:C9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0626949A28FB88176A2ACDF63165E11F8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YT9BRiXXE64h812qufsFy3cG-sk.roa
Signing time: Wed 02 Sep 2026 13:57:42 +0000
ROA not before: Wed 02 Sep 2026 13:57:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.2.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.38.0/24 maxlen: 24
151.247.39.0/24 maxlen: 24
151.247.42.0/24 maxlen: 24
151.247.43.0/24 maxlen: 24
151.247.93.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:62:69:49:a2:8f:b8:81:76:a2:ac:df:63:16:5e:11:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 2 13:57:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=613f414625d713ae21f35daab9fb05cb7706fac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:76:7d:d6:be:ee:98:63:29:4a:d3:33:67:f9:
c0:a3:5b:56:da:46:eb:e2:60:5f:2a:24:ed:81:96:
2d:c3:24:71:52:b8:5d:5e:3a:eb:35:b2:e0:33:1f:
1b:5c:f8:47:cd:fc:0c:aa:45:29:03:00:c8:c9:20:
59:6e:9b:78:b2:a1:9f:6f:8a:4a:eb:11:01:b1:d8:
88:3b:be:14:db:f3:07:16:ec:67:e3:cc:9a:93:3c:
c6:a9:d5:42:6b:ad:c7:8b:6f:4d:2c:62:40:68:6a:
c7:27:2e:d0:9b:f4:2e:17:84:2e:ff:62:52:f6:ef:
af:0a:43:9b:fd:5e:fb:1d:39:c9:41:31:d9:ed:cc:
9e:83:e8:08:d9:aa:bc:23:76:45:dc:24:95:b6:fe:
25:d0:60:a3:23:96:c7:8b:15:76:e8:1c:c0:c0:a3:
fa:e8:a6:33:f9:f0:3c:c1:bc:7a:6d:45:98:77:0a:
9c:1b:49:fb:d2:19:46:23:3b:d1:c4:11:77:f2:d6:
80:30:85:83:2a:7c:94:ce:08:6c:28:33:61:f5:d1:
b6:6d:7c:1c:1c:b0:21:27:d7:04:4f:59:8a:d5:56:
e9:84:c9:8f:fe:59:a5:cc:ed:79:46:e5:dc:cc:1a:
9a:b9:09:ef:1b:59:de:1b:2c:c6:2c:f6:6c:08:cb:
45:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3F:41:46:25:D7:13:AE:21:F3:5D:AA:B9:FB:05:CB:77:06:FA:C9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YT9BRiXXE64h812qufsFy3cG-sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.240.173.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.244.42.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.38.0/23
151.247.42.0/23
151.247.93.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:c9:d9:9f:9a:ab:17:5c:28:2c:24:b4:36:6d:5d:91:8f:b9:
aa:71:2a:22:83:ea:37:e7:6f:ce:b1:af:e0:bc:07:52:fc:c8:
d5:91:a0:fd:50:a2:b5:6a:af:01:d9:b5:cb:af:71:4d:8b:b8:
7e:14:21:94:c0:9a:1e:be:b5:93:b9:77:c1:c4:80:2c:07:0f:
47:f1:4b:71:7a:c3:aa:bb:68:79:a8:b5:55:cd:d7:c0:60:be:
d4:a6:22:a5:93:be:34:0c:17:3a:3c:e7:4a:6f:fb:f2:18:c9:
7a:fa:e0:3e:bd:c5:b6:1e:fc:35:01:86:09:1f:0f:8f:48:fc:
0a:d5:d6:b6:cb:a9:05:b5:35:de:11:3b:8d:47:3f:7a:db:34:
23:57:6e:86:d4:09:8b:07:47:65:0f:47:f1:25:19:b2:7c:bc:
4b:4a:d8:66:cf:70:c6:b9:2a:0c:15:9f:37:1b:57:a3:f5:47:
d0:09:c0:92:e6:f3:48:c2:c1:f6:a6:74:c6:3d:e3:df:3c:a1:
ed:58:8b:d1:e2:a8:5f:e7:93:5a:e4:2f:8d:6b:33:80:25:2f:
29:a1:83:24:6d:80:8a:e3:3a:56:48:c8:8d:1b:a9:69:d1:58:
65:71:01:01:e6:f8:f7:98:80:eb:e6:3b:26:e6:75:02:2a:fd:
09:d2:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:23 2026 by rpki-client