Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yRz2J25NBG8zS1SoQJKFgo6Ey24.roa
File: yRz2J25NBG8zS1SoQJKFgo6Ey24.roa (raw, json)
Hash identifier: ifF7WUKCZ2yvpNWuAKtfW4ve/6shuYANUbRJyCBfqkY=
Subject key identifier: C9:1C:F6:27:6E:4D:04:6F:33:4B:54:A8:40:92:85:82:8E:84:CB:6E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D332113E50EEB006622F0B1177C864833
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yRz2J25NBG8zS1SoQJKFgo6Ey24.roa
Signing time: Sat 28 Mar 2026 06:28:18 +0000
ROA not before: Sat 28 Mar 2026 06:28:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 151.242.97.0/24 maxlen: 24
151.243.215.0/24 maxlen: 24
151.244.99.0/24 maxlen: 24
151.247.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Apr 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:21:13:e5:0e:eb:00:66:22:f0:b1:17:7c:86:48:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 28 06:28:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c91cf6276e4d046f334b54a8409285828e84cb6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3e:90:a5:cc:c8:54:34:25:0d:fa:b9:19:c4:
ea:17:8f:e6:13:67:59:5e:3e:8b:42:4f:c2:3f:a4:
7b:17:bc:a2:d1:8a:bc:df:37:de:77:1c:33:36:cf:
48:a0:31:22:61:59:3d:f2:a7:d0:25:4a:b7:89:4a:
bb:24:c7:53:64:3a:37:f2:5d:1f:2a:24:9f:a6:fa:
c7:11:2a:e8:cd:13:3d:2e:7e:5f:29:b9:e6:25:51:
0c:b5:b8:5e:95:82:ae:ee:33:a2:e7:e8:4a:da:03:
06:52:7f:62:07:13:ee:8e:db:b7:d3:a3:6f:b2:c4:
d5:dc:b6:f7:5e:bb:6f:df:78:ed:f0:ea:bd:3c:21:
ee:1a:79:38:20:b9:c9:c6:2d:21:1a:f8:89:dd:a5:
ff:50:06:7e:0b:af:44:41:b9:3c:e7:94:61:3e:e8:
a7:e6:1f:1e:2e:32:d8:e5:0a:07:1d:bb:f4:e4:3e:
fa:e9:f2:8b:cf:28:19:68:b8:64:01:12:86:cb:12:
66:db:ec:ce:6f:16:33:10:e6:ce:0a:35:b9:6b:04:
0f:79:c0:47:18:08:ce:fe:9a:41:4e:60:f9:a6:f1:
17:97:c5:fa:0f:d4:8f:a3:c4:e8:28:13:8c:e2:1e:
2d:8d:5e:91:eb:40:bf:5b:49:6e:3f:4e:08:84:15:
34:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1C:F6:27:6E:4D:04:6F:33:4B:54:A8:40:92:85:82:8E:84:CB:6E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yRz2J25NBG8zS1SoQJKFgo6Ey24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.97.0/24
151.243.215.0/24
151.244.99.0/24
151.247.12.0/24
Signature Algorithm: sha256WithRSAEncryption
26:da:13:b9:bc:cc:d9:1e:94:b9:d4:7e:f7:0a:75:39:06:f3:
59:4c:e8:94:51:b3:67:80:10:5c:42:18:32:85:45:fc:5b:94:
ac:82:57:58:51:8d:0c:b2:0d:8c:a6:8f:d8:27:a2:8b:eb:e4:
67:d7:de:d6:cc:c7:3d:33:b1:ae:5f:5f:05:00:14:75:74:c6:
67:2b:66:67:83:28:2d:84:28:7c:54:62:ea:92:5d:7c:ba:fb:
a0:7b:fb:45:4a:e1:d5:47:ad:0d:ca:63:46:1e:92:91:4d:a6:
7b:10:80:42:7f:55:34:31:8e:f7:a1:4e:8e:97:05:da:a7:32:
0a:43:0e:71:ad:74:0c:cd:53:0a:f3:73:b2:09:35:04:d8:dd:
84:8d:a4:7b:8e:61:34:a8:1a:c4:dd:8b:fb:5b:b0:15:2b:dc:
ce:a6:52:27:40:cc:0f:59:77:a9:67:34:1f:61:dd:89:10:de:
7a:be:e7:80:36:d2:ad:d0:3b:65:91:c7:08:2b:9a:e2:f5:6d:
63:0f:a7:4d:6a:ba:c4:48:00:65:a8:93:46:1b:27:5f:2b:fe:
24:44:7e:2a:78:46:1c:22:ae:95:3c:d4:87:f0:5c:84:43:12:
bd:8b:2d:b5:7a:c9:4a:f4:b5:0b:32:1e:e9:ec:48:3e:59:21:
47:89:0e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 9 16:05:20 2026 by rpki-client