Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yELgs92Rn2UrvRBdj3hgu4WGY5k.roa
File: yELgs92Rn2UrvRBdj3hgu4WGY5k.roa (raw, json)
Hash identifier: VzTQQj/N3PhSn8LAwEb+rtGHaKq1HZkP+T+C+TJzIK8=
Subject key identifier: C8:42:E0:B3:DD:91:9F:65:2B:BD:10:5D:8F:78:60:BB:85:86:63:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4598413B27EBDD4638ADCE7AB936BFAA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yELgs92Rn2UrvRBdj3hgu4WGY5k.roa
Signing time: Wed 20 May 2026 13:34:26 +0000
ROA not before: Wed 20 May 2026 13:34:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153622
IP address blocks: 151.240.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 05:39:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:45:98:41:3b:27:eb:dd:46:38:ad:ce:7a:b9:36:bf:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 20 13:34:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c842e0b3dd919f652bbd105d8f7860bb85866399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:9d:13:a9:93:a9:02:b5:85:88:a1:c7:3a:
5f:09:94:0d:17:57:e8:9e:58:42:51:1e:92:96:e6:
e8:ca:d7:25:fb:5e:23:08:f4:67:59:7b:bf:13:ae:
cf:c0:d8:3f:f1:32:55:05:5e:d3:7c:f7:67:69:4d:
db:70:77:58:e2:a6:9e:db:df:93:d7:b0:2a:a7:e7:
8e:d0:77:ac:af:d1:8d:be:22:c8:e4:82:27:a6:80:
42:be:5f:50:42:a0:03:1a:96:5b:9d:d6:26:a4:ff:
3b:c7:80:ab:42:ba:22:db:d2:78:ac:c3:1c:e6:ec:
a0:e2:0f:75:68:47:30:5b:0a:23:a2:ac:f8:a6:ce:
b3:c2:98:51:ed:97:a8:de:e2:d3:01:b3:12:17:5a:
74:9a:83:f6:2a:64:42:6d:f8:71:d9:8f:c7:ca:95:
76:a9:07:44:de:a8:4d:20:e3:88:67:20:47:54:b4:
86:7b:8a:b0:0f:40:ed:d3:18:db:1e:c8:41:92:6f:
50:2e:79:41:2e:29:ba:4a:6f:79:5c:e1:8c:d0:6a:
7b:dd:16:3d:e9:ad:0c:1a:28:8b:41:4d:c8:d3:83:
94:91:5c:9c:89:e5:55:68:81:71:18:42:6f:93:d1:
9f:8c:10:0b:73:45:95:d5:53:f4:39:33:e7:fe:1e:
fb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:42:E0:B3:DD:91:9F:65:2B:BD:10:5D:8F:78:60:BB:85:86:63:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yELgs92Rn2UrvRBdj3hgu4WGY5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.149.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a5:d6:45:d0:c2:b1:d7:5e:28:20:7c:17:7a:b2:ea:7e:cc:
e3:84:25:82:bb:9f:b3:d4:92:86:8f:2b:0a:3d:45:71:bf:60:
90:b0:aa:82:45:5f:2e:26:64:bd:98:9b:ee:ca:4e:da:c8:a1:
44:c0:23:a5:b1:56:ed:75:bb:38:ee:7d:e3:12:82:a8:0a:e1:
15:e1:31:f4:57:94:f0:f4:67:32:5e:09:17:32:b7:93:04:06:
8f:c3:af:4a:ac:46:5c:59:e7:74:84:eb:a7:15:1f:6a:7f:08:
eb:f2:c7:68:27:1a:48:f0:b0:c7:fd:84:f4:fb:b9:5b:d8:48:
89:00:43:e6:db:c0:4a:c8:2d:22:6d:6f:52:ee:cd:2d:6c:0a:
2d:50:20:9a:47:1c:9b:98:65:f5:a8:72:62:20:82:f6:d4:32:
8c:30:e4:81:ae:5a:23:3b:50:f2:c9:7d:88:39:70:e9:27:84:
43:af:e4:45:e0:b2:00:71:95:8c:a5:30:f1:49:bf:5d:12:63:
6f:e4:2d:e4:61:a2:ca:7b:04:f7:dc:49:4e:16:a2:55:9a:73:
4c:1c:09:1c:47:eb:57:40:57:dc:40:78:77:cf:4b:65:e8:16:
20:06:74:66:e1:d8:0a:0e:bb:17:54:bc:0c:f4:ed:1a:ca:b8:
f5:6a:44:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 11:24:31 2026 by rpki-client