Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yeq7eaVrhYopgen-upgubxJglg0.roa
File: Yeq7eaVrhYopgen-upgubxJglg0.roa (raw, json)
Hash identifier: 7+o1SeJB9N+PthVKBH7At0g2OUMJjxPxpxagpWDlazw=
Subject key identifier: 61:EA:BB:79:A5:6B:85:8A:29:81:E9:FE:BA:98:2E:6F:12:60:96:0D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0000C6E67A37A225AD96D401172739FA3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yeq7eaVrhYopgen-upgubxJglg0.roa
Signing time: Fri 14 Aug 2026 11:33:29 +0000
ROA not before: Fri 14 Aug 2026 11:33:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219048
IP address blocks: 151.247.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:0c:6e:67:a3:7a:22:5a:d9:6d:40:11:72:73:9f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 14 11:33:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61eabb79a56b858a2981e9feba982e6f1260960d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:60:96:23:da:52:3f:d4:e1:47:ac:c7:24:2f:
6e:ba:e5:b4:15:ff:cf:13:f0:f2:8d:07:de:7c:03:
71:4f:88:3d:01:22:4b:6f:6c:46:1c:73:f7:95:43:
a5:16:f3:c7:6b:5f:51:36:c4:9b:40:f0:63:a7:0c:
ac:31:bb:af:ab:e3:fb:88:da:62:96:2b:ad:e8:5d:
a4:39:fa:a1:df:91:0f:5d:b8:29:5e:04:a2:83:fa:
34:d4:1c:02:4d:46:97:8e:48:3f:d6:25:4b:3d:d0:
b3:d0:80:83:d1:6a:c6:f3:e2:e0:8e:c4:8a:62:03:
0a:ac:a3:85:ca:3e:d5:70:9f:04:f6:86:1f:42:61:
a8:25:bf:c7:9d:a9:2a:cb:48:33:68:75:4a:fb:df:
21:9b:47:2c:b2:7a:57:0c:49:bd:1a:1a:c4:d4:8e:
1e:64:9e:dc:df:b4:56:00:af:7d:69:09:3e:e3:a2:
88:9f:a4:67:57:ae:2f:97:01:09:db:57:8f:5d:15:
75:0b:a2:56:02:dc:bc:80:84:f7:c4:07:34:d6:39:
a4:63:a2:d0:88:6b:e2:fd:20:2e:b3:08:7d:7e:81:
3e:52:f1:dd:c9:68:7f:b4:f3:a5:3d:71:36:c6:9d:
26:c2:b6:c0:c1:6b:44:84:59:08:f1:3f:22:ad:f9:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EA:BB:79:A5:6B:85:8A:29:81:E9:FE:BA:98:2E:6F:12:60:96:0D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Yeq7eaVrhYopgen-upgubxJglg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
44:34:10:78:37:01:75:8d:13:39:bc:bb:48:56:ed:c6:5b:b0:
60:25:4e:85:55:3f:4c:72:4b:6d:03:c2:0c:46:9e:84:44:19:
41:e8:ef:b1:03:8c:3b:9f:53:16:da:dd:2b:2b:b6:74:7a:d7:
b6:ec:88:a2:da:1f:a5:02:cf:ff:39:c9:cc:bc:c3:74:18:85:
e8:bc:4a:11:7c:8f:f0:d6:71:18:14:f5:f5:aa:a0:6a:b1:99:
8d:b0:0e:20:22:51:f6:a0:58:d3:e6:e9:b1:44:b4:31:f2:4b:
7f:35:4f:7e:c2:e8:45:f8:5a:4f:d3:a2:9f:87:67:4d:51:78:
0c:28:82:0a:eb:d4:ca:c1:e2:d3:1c:5d:da:11:24:24:83:63:
cd:dd:80:ca:43:42:6d:68:2b:f4:63:e9:59:44:d6:75:3f:12:
78:5e:0c:1e:05:ed:e0:da:25:a2:67:a9:bb:05:bc:6c:88:a8:
c9:6f:0f:5a:b3:85:8f:24:49:1b:ce:ff:95:04:95:b0:3e:f9:
e2:ed:e0:b6:25:18:83:93:6e:80:13:b8:b5:32:81:22:4c:6c:
85:2b:cd:bd:96:b9:06:d7:d0:ce:ca:41:90:6e:7d:11:6b:c3:
ba:c3:59:07:fe:c4:31:cd:b7:b2:f6:65:3a:6b:3b:c2:97:31:
28:40:99:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 18 00:07:48 2026 by rpki-client