Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y4nuIln1XD9FdfAHoh8-Vd4RzAU.roa
File: y4nuIln1XD9FdfAHoh8-Vd4RzAU.roa (raw, json)
Hash identifier: ve0IA2FxpWi6go5G4T13xRHVur2i2C1vDOeEPgIClsE=
Subject key identifier: CB:89:EE:22:59:F5:5C:3F:45:75:F0:07:A2:1F:3E:55:DE:11:CC:05
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6023C8532233175A8CF6BC304D9B5F92
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y4nuIln1XD9FdfAHoh8-Vd4RzAU.roa
Signing time: Tue 14 Jul 2026 10:19:45 +0000
ROA not before: Tue 14 Jul 2026 10:19:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 151.241.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:23:c8:53:22:33:17:5a:8c:f6:bc:30:4d:9b:5f:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 10:19:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb89ee2259f55c3f4575f007a21f3e55de11cc05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a9:58:83:6a:b0:07:31:76:95:f8:9e:1a:cb:
51:11:6c:3c:6e:d0:4a:6e:8a:61:da:83:9a:eb:54:
d9:67:3e:e3:79:ed:08:3c:38:8e:8a:92:c7:d9:da:
35:56:df:4d:1e:84:61:9d:a5:9e:78:5e:4e:84:6b:
7b:bc:7b:52:fd:b1:8a:7e:5b:cb:64:37:83:1e:3b:
f0:0f:18:34:59:a3:31:69:79:e7:6d:67:49:39:36:
07:b3:8c:bd:48:2a:b2:73:a0:12:cc:ef:28:01:bf:
67:52:e8:06:4f:0f:43:19:bb:46:88:34:c3:9e:cf:
12:60:a1:a8:e3:88:8f:17:3d:7d:fe:d3:db:c6:fe:
0c:88:fb:3e:16:ce:9b:22:3b:b2:41:f9:74:39:1b:
e2:a6:d4:59:54:95:fd:5f:e1:7d:a0:ba:76:4a:78:
23:a1:2f:d8:c9:a8:1e:1a:e8:cd:e6:a1:e4:a4:b6:
2b:5e:72:72:8a:74:11:1d:5e:d1:51:e9:f4:47:51:
04:6c:a9:cd:c1:61:a0:96:12:bc:15:28:89:1a:ac:
46:1e:f7:dd:e3:3b:d1:f0:36:d9:11:0d:9f:b0:eb:
04:33:f7:43:06:39:19:e8:77:2f:2c:5f:b7:74:d8:
a6:fa:ca:da:fd:f3:99:95:fc:d1:51:a1:ba:c1:8a:
61:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:89:EE:22:59:F5:5C:3F:45:75:F0:07:A2:1F:3E:55:DE:11:CC:05
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y4nuIln1XD9FdfAHoh8-Vd4RzAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.116.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:73:0f:56:e4:e5:d6:b8:06:5c:5b:8f:1d:20:7e:65:79:f3:
8b:e5:23:2a:b7:a3:ac:bb:7e:84:82:41:79:20:1c:39:3a:14:
ab:fb:1b:17:6c:bb:b0:6c:36:83:14:6e:7d:4e:5f:57:15:e3:
36:ea:1e:34:18:7e:55:74:fb:60:3f:e0:e1:b4:3f:7b:24:c1:
03:0a:da:2b:6e:d7:47:1d:ce:41:ae:2f:51:77:b6:7b:3b:01:
70:b0:fd:0c:e1:cb:fb:05:7b:b6:1a:8d:1d:e1:96:7b:3c:be:
91:9c:d4:32:0c:eb:43:64:92:bf:3f:e0:98:93:40:a9:68:91:
2f:c0:80:0b:1a:32:30:2d:27:70:f1:e6:48:08:74:bd:4b:dd:
f2:bd:dc:cd:68:ff:27:ab:8e:29:9b:2c:b7:04:f6:af:5c:7f:
f8:05:e4:cd:f8:65:a1:ba:3d:9f:9d:10:09:7d:d8:ae:68:39:
c4:fa:36:7a:5e:4b:45:47:a7:75:9f:c2:60:de:45:e9:12:8d:
60:59:11:89:e7:02:1f:79:25:2e:bf:fb:4c:7c:57:cb:90:60:
ec:3a:0e:07:bd:18:14:21:84:3d:52:ea:10:7c:18:b2:98:6e:
fc:7c:15:1a:10:df:dc:f2:60:87:ea:c4:49:b5:4f:d7:8c:aa:
37:8d:e7:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client