Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yER3SZTMCBlO6Yeb9aXtBTxE20c.roa
File: yER3SZTMCBlO6Yeb9aXtBTxE20c.roa (raw, json)
Hash identifier: vKH9voxLe28GuqT8dr6NRXsBbvy53OiS4rqRYvmUG/o=
Subject key identifier: C8:44:77:49:94:CC:08:19:4E:E9:87:9B:F5:A5:ED:05:3C:44:DB:47
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FD73F95680F9E983F12648C4A1780B3B9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yER3SZTMCBlO6Yeb9aXtBTxE20c.roa
Signing time: Thu 06 Aug 2026 13:24:56 +0000
ROA not before: Thu 06 Aug 2026 13:24:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219076
IP address blocks: 151.247.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d7:3f:95:68:0f:9e:98:3f:12:64:8c:4a:17:80:b3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 6 13:24:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c844774994cc08194ee9879bf5a5ed053c44db47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f0:d1:fe:b9:dc:67:33:8b:0e:82:d5:dd:64:
76:ab:f3:9f:7e:17:8c:59:4a:1a:eb:76:84:f8:c1:
4f:ab:96:b0:86:7b:cd:1e:79:bc:23:17:18:34:71:
54:61:05:e2:ca:53:e8:52:57:07:79:7c:db:5b:33:
24:ea:9e:73:75:f7:77:11:02:70:43:83:be:df:82:
e7:be:5f:1a:36:b7:ca:8f:e1:4a:5c:12:d8:08:bc:
4b:5e:d2:52:fe:a2:bd:47:e1:e2:ec:f7:f7:ce:5d:
af:bd:dd:7c:e1:04:26:fa:23:2b:7f:72:9e:35:a0:
16:2f:f8:d6:32:c4:7c:ec:a2:f3:fa:30:30:f3:11:
6f:21:04:10:a3:f4:0c:c8:cf:64:3b:61:6b:a9:ba:
c6:8f:e4:8a:21:54:50:89:06:d4:09:fb:5e:74:fd:
fa:eb:24:07:50:5b:ec:ee:17:48:bc:56:3a:f7:5e:
cd:95:4d:5b:9d:2a:61:f9:42:b8:53:2c:69:c6:1e:
ef:8f:96:75:64:96:39:13:bc:ca:99:48:40:5a:a8:
82:51:fb:97:98:e2:b6:59:06:46:49:77:5a:05:12:
ac:ad:b6:a1:78:2d:f8:81:99:88:d5:6b:f0:e1:3f:
db:8a:3b:cd:98:77:b6:76:c2:07:6c:cc:8e:f2:f4:
e5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:77:49:94:CC:08:19:4E:E9:87:9B:F5:A5:ED:05:3C:44:DB:47
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yER3SZTMCBlO6Yeb9aXtBTxE20c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ca:e6:db:68:c8:26:c7:85:6f:cb:56:3e:f3:bf:2a:5f:bf:
60:b2:f0:e0:56:18:01:61:29:d6:14:d0:c1:c2:3b:39:37:dc:
b9:6e:71:a7:0c:9f:c5:77:60:16:39:42:e1:1d:46:54:7b:fa:
2f:83:20:87:67:97:7f:50:e9:e6:49:a5:53:ab:f7:43:41:d8:
5e:eb:a7:9d:cb:db:14:e8:ee:c0:c7:3b:7d:16:36:e0:e8:3f:
7e:82:a2:45:1e:fa:ad:8a:74:a0:80:ad:4a:3b:a4:cf:d8:ce:
7c:77:4b:25:68:f7:4e:02:0b:40:b8:5b:1a:48:1a:58:a8:81:
31:1b:f9:d5:c1:62:5e:c2:f3:e3:0d:20:8c:35:6a:e6:c5:ac:
4c:3b:ba:df:13:c0:90:e2:ef:8e:f4:b1:57:74:2e:cd:b2:06:
8d:49:b4:68:df:3d:0a:b2:56:27:b7:49:fd:4f:f8:30:5c:0f:
1c:ab:c2:a8:ac:3d:fa:07:21:d5:ef:74:23:8a:6c:84:2b:59:
8d:94:e5:c2:80:b5:ec:fd:e0:75:f0:d2:3f:47:62:92:37:f1:
b4:89:e5:c1:ca:05:c6:d7:18:4e:1f:58:85:51:6b:0f:5c:eb:
53:4b:e0:2e:84:d1:0e:01:64:4f:80:80:b6:e7:b0:7b:64:01:
fb:84:4f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:32 2026 by rpki-client