Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/ymWClNNTNIEna9tb8fGbQQqYz78.roa
File: ymWClNNTNIEna9tb8fGbQQqYz78.roa (raw, json)
Hash identifier: ymeUWDuxiyE39DPrcubXZYDRp9D4NZYlmaQUgjvzXkc=
Subject key identifier: CA:65:82:94:D3:53:34:81:27:6B:DB:5B:F1:F1:9B:41:0A:98:CF:BF
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019D3587607489883B7A14D2BD50BF7D76BC
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/ymWClNNTNIEna9tb8fGbQQqYz78.roa
Signing time: Sat 28 Mar 2026 17:39:17 +0000
ROA not before: Sat 28 Mar 2026 17:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150293
IP address blocks: 151.123.180.0/24 maxlen: 24
151.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:87:60:74:89:88:3b:7a:14:d2:bd:50:bf:7d:76:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Mar 28 17:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca658294d3533481276bdb5bf1f19b410a98cfbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fb:4e:85:13:d8:68:aa:cf:fd:83:c7:cb:6a:
5c:52:47:c8:9c:e1:ca:84:31:e8:a3:1c:07:17:06:
1a:2a:ca:20:da:c5:06:8a:cf:58:28:07:a4:f5:71:
d9:89:af:96:47:ba:70:c3:38:0d:e0:21:22:c9:64:
ab:cc:27:fc:70:9d:82:ea:7a:1e:e5:d9:64:76:f3:
83:2e:3c:4e:f8:f3:ee:66:69:a3:bc:82:b8:14:d8:
42:98:ac:eb:e7:af:4e:f6:64:41:c1:25:7f:ad:2a:
b2:2c:05:f2:ad:7b:f7:81:35:84:c5:af:4f:e9:be:
3e:c7:89:be:1b:fc:9e:0d:e5:48:29:c7:1f:11:db:
32:da:f0:87:35:e2:fe:f6:ab:47:e5:ff:ca:64:60:
f0:28:e9:96:49:84:82:fa:af:f2:08:be:9e:33:76:
a8:7a:db:8b:0a:7b:3f:54:18:4b:7c:13:58:90:dc:
ff:dd:9a:56:98:00:ac:dc:53:88:6d:d0:ed:52:27:
25:08:1a:29:09:08:51:f5:32:8c:8f:da:ba:3d:49:
10:3f:97:d0:43:e0:04:72:30:80:c4:40:74:5a:ee:
b8:a0:c2:aa:f7:fb:a6:f6:92:bb:71:62:88:26:25:
47:3e:22:52:eb:10:76:66:4d:c6:bd:74:f6:79:22:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:65:82:94:D3:53:34:81:27:6B:DB:5B:F1:F1:9B:41:0A:98:CF:BF
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/ymWClNNTNIEna9tb8fGbQQqYz78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.180.0/24
151.123.183.0/24
Signature Algorithm: sha256WithRSAEncryption
97:de:22:d3:ec:f4:dd:06:93:d9:3f:0d:4a:38:45:da:7e:c2:
81:0d:b3:8c:37:98:f9:52:eb:97:52:37:cc:f5:28:2a:2c:1b:
99:52:3e:c9:6e:9f:fd:c1:e8:90:47:36:36:5e:c2:30:35:bb:
ae:7a:89:e0:72:74:f8:f8:3e:fd:f0:19:1c:ae:e2:4f:18:2d:
f0:87:11:77:9f:38:74:fe:4d:9b:97:b5:00:f3:81:e7:b1:65:
90:67:dd:15:4b:e0:48:8f:2d:b2:3f:47:68:c4:2a:ae:ec:05:
ac:03:3e:e4:7a:5a:b8:f6:96:1c:46:ef:70:ec:79:c4:cb:ee:
1b:0e:a0:72:b2:20:25:ef:74:de:ac:b4:70:19:e5:fa:a4:0e:
4b:76:8e:4c:c6:6c:20:5c:09:e5:b1:81:22:78:a5:23:63:6c:
4f:94:4a:a7:07:e3:93:c8:06:89:b4:63:4b:19:f7:9f:a5:94:
d3:86:f1:00:24:54:5a:4b:49:75:95:bb:5d:70:e7:ad:8a:bd:
3f:95:66:c8:88:c2:4c:bb:df:68:6c:ea:c6:b0:5b:a5:ea:9c:
fa:b6:72:9c:2a:f8:eb:5e:ad:c0:8a:a9:e8:4b:00:26:f9:d9:
28:1f:9e:d1:9a:38:e2:b2:ac:aa:dd:c8:24:18:28:a5:61:97:
cd:d8:06:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:49:46 2026 by rpki-client