Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ynsU6hYmCy-oWIGIpWW-Abs10Iw.roa
File: ynsU6hYmCy-oWIGIpWW-Abs10Iw.roa (raw, json)
Hash identifier: f+8stchAgDWsH84lmcB5PsUSR4z763GECLXLYzRteHI=
Subject key identifier: CA:7B:14:EA:16:26:0B:2F:A8:58:81:88:A5:65:BE:01:BB:35:D0:8C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A130CA7EDCF5E2034866BA57EA3BAA7FA1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ynsU6hYmCy-oWIGIpWW-Abs10Iw.roa
Signing time: Mon 12 Oct 2026 15:45:39 +0000
ROA not before: Mon 12 Oct 2026 15:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218797
IP address blocks: 151.241.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:ca:7e:dc:f5:e2:03:48:66:ba:57:ea:3b:aa:7f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 15:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca7b14ea16260b2fa8588188a565be01bb35d08c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:db:bc:d0:37:d7:2f:22:67:35:68:ce:a4:
84:c8:f4:f8:25:eb:12:cf:c6:60:97:d8:e1:2b:76:
61:19:73:3d:92:3d:ce:c5:53:05:6e:29:a5:ef:f2:
e5:4e:5d:18:fd:cf:e3:3e:b0:b1:28:23:3a:7d:8e:
f7:87:21:6a:00:dc:f4:df:51:10:71:29:13:85:14:
9c:9c:0f:4c:a7:73:61:1d:6b:b4:4d:9a:d0:5a:d1:
9e:04:8c:3f:b2:8f:45:8b:a7:b3:4f:ad:a2:d2:06:
3a:33:a3:e5:64:97:e3:22:f4:e2:d7:68:24:9d:27:
41:2e:83:eb:58:08:20:3a:00:f2:dd:e2:46:da:c9:
f8:ee:57:c9:c8:01:e6:66:96:af:f7:ef:98:95:9d:
7b:71:32:9f:a6:cd:a8:6a:71:74:dc:6b:c7:2f:80:
92:35:25:e3:34:2e:00:24:8d:a0:63:74:f9:ee:4d:
17:57:44:68:48:af:22:e7:78:59:79:b5:ec:46:36:
f1:75:c9:84:da:b7:47:c6:bf:02:2e:08:93:e5:41:
5d:7e:b1:b0:9d:2d:4a:96:1c:28:dc:01:39:4b:44:
82:68:a9:49:92:52:8b:79:e2:38:06:48:c1:45:3c:
5d:02:b7:98:95:55:2f:7c:3d:bb:59:74:8f:3c:fe:
11:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7B:14:EA:16:26:0B:2F:A8:58:81:88:A5:65:BE:01:BB:35:D0:8C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ynsU6hYmCy-oWIGIpWW-Abs10Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.16.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:56:06:82:49:04:96:50:f6:ce:1e:b7:3c:38:ee:02:aa:c6:
84:98:b9:44:72:9e:1a:ad:84:a8:10:26:8f:bb:9e:f5:a6:56:
74:3d:37:37:f9:35:10:03:be:69:ed:c4:93:55:43:d4:95:14:
8c:82:80:96:2b:5c:02:72:8d:c0:f2:15:63:c8:75:c1:61:07:
36:1a:e8:14:32:3e:f3:18:c9:8d:7c:2a:7f:2e:11:65:ea:5e:
9f:b8:7e:1c:8c:5b:b1:12:5c:31:4c:e7:0d:ca:60:28:e5:b1:
c7:a5:7e:83:4b:55:4a:35:04:7d:4f:59:49:46:51:b3:c8:10:
c4:c1:b1:76:10:62:06:77:a4:36:d4:ce:cb:0e:c8:a5:b8:4d:
ab:60:bd:e9:32:aa:4d:69:f3:68:e3:2d:b2:11:3e:6d:74:09:
07:f3:4d:df:02:01:4b:dd:b2:6a:e7:5f:d8:9c:18:e6:05:8a:
c8:c6:6e:5a:0d:32:f4:e9:4d:c7:9f:fe:a7:53:a6:ff:f3:87:
82:3a:ef:34:a8:fc:69:b9:86:d4:33:7a:b7:2c:79:0d:bb:a3:
2a:ef:99:b4:b3:b5:5b:3d:37:62:e0:12:7e:32:b4:81:8e:75:
83:39:1d:6b:d4:fb:8f:8c:98:0a:15:2a:21:3a:d1:ea:26:5d:
14:6b:ca:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 22:24:08 2026 by rpki-client