Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yCuPSVoRrhzvXjC310l-nl1TtjM.roa
File: yCuPSVoRrhzvXjC310l-nl1TtjM.roa (raw, json)
Hash identifier: 1SSouUE49RVua9UtCSIpud0eyZIiEd+DP8tR2lLYaDM=
Subject key identifier: C8:2B:8F:49:5A:11:AE:1C:EF:5E:30:B7:D7:49:7E:9E:5D:53:B6:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0044692CA0CF2F8BF08BD3C60D03AC9BD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yCuPSVoRrhzvXjC310l-nl1TtjM.roa
Signing time: Sat 15 Aug 2026 07:15:29 +0000
ROA not before: Sat 15 Aug 2026 07:15:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.109.0/24 maxlen: 24
151.247.110.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:46:92:ca:0c:f2:f8:bf:08:bd:3c:60:d0:3a:c9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 15 07:15:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c82b8f495a11ae1cef5e30b7d7497e9e5d53b633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:94:fd:2a:57:a8:8e:a9:f1:c8:ac:cd:70:
1b:d0:f6:6a:11:98:3d:fd:fe:02:a9:bf:6d:84:b4:
08:87:38:15:8a:9c:e9:2f:c0:39:93:7b:ed:4d:48:
44:78:e6:89:f8:15:87:ba:eb:d9:22:98:6d:a5:29:
34:e1:45:e7:5e:a7:05:b2:a4:64:0f:80:7f:e4:7a:
76:6c:d2:68:57:03:32:53:82:54:18:4f:4c:10:e1:
f2:07:7c:6d:dd:2b:52:e0:43:04:a7:2b:23:66:7d:
a9:59:21:b3:42:ad:8a:b7:a4:ec:20:4b:5e:00:d7:
c9:fe:82:59:c3:5a:35:a3:94:30:c1:a7:6d:0c:8a:
cb:47:24:ec:62:61:f3:a9:1e:e1:65:f9:a8:0f:7d:
fa:fa:0e:24:61:41:55:ac:4c:ab:53:7e:37:d1:d3:
76:70:e4:15:d2:89:7b:17:23:e5:6f:71:0f:5c:1d:
37:9e:a5:37:f6:7f:db:d3:62:52:94:64:76:ef:ee:
5e:97:ef:9c:39:83:69:b9:fd:35:6a:37:04:3f:30:
12:55:59:c1:6b:32:6b:7c:ca:53:72:92:a2:61:69:
fe:c8:ba:67:25:3f:cf:c5:15:ac:f2:7a:fd:0b:97:
da:e7:5a:85:d1:cc:ab:0c:a8:e9:6f:3b:26:ff:7f:
26:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2B:8F:49:5A:11:AE:1C:EF:5E:30:B7:D7:49:7E:9E:5D:53:B6:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yCuPSVoRrhzvXjC310l-nl1TtjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.244.42.0/24
151.245.69.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.109.0-151.247.110.255
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f1:7b:75:13:13:d3:85:4a:c2:33:1b:7d:c4:fa:62:d1:d7:
c0:44:47:7c:57:c6:86:7c:3b:f6:6c:f1:cc:2d:a3:2e:79:a8:
b8:47:e9:f1:03:e3:f3:1b:12:bb:c1:6a:a8:eb:2f:d8:c8:f4:
41:86:f0:6c:bc:a0:9f:c6:2c:a9:92:47:94:b6:70:3e:b7:67:
93:08:28:3f:2a:be:89:16:39:e9:64:f9:ce:81:15:7d:4b:fb:
cd:17:2d:61:bf:b6:3e:bc:68:f9:06:1d:4d:07:06:f8:b5:99:
34:53:7b:07:e8:98:ce:11:25:d0:85:d5:d4:de:f2:53:35:03:
80:36:0a:29:f1:38:db:41:fc:8a:8b:fb:4a:18:25:17:e8:81:
52:8e:3a:98:65:a9:36:12:2d:48:aa:27:ec:6a:8d:da:17:12:
b9:68:54:5a:31:05:de:a5:2f:0d:95:16:f8:da:45:3c:4e:6a:
86:ab:a4:2e:03:3e:9f:56:74:5c:7f:1d:c7:63:2d:b2:19:83:
28:ea:c6:7b:74:5f:3a:5d:69:b0:0f:f6:e0:8e:04:83:02:82:
5b:c8:c9:2e:8f:a8:e2:43:84:74:d4:c5:c4:1f:b5:cf:58:88:
ce:c1:0e:fe:63:d1:a6:8a:e6:8b:c3:30:49:0a:f4:32:c6:04:
10:07:b1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:12:40 2026 by rpki-client