Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Y6BnMrMthQG7oPsjORgBslwpaMU.roa
File: Y6BnMrMthQG7oPsjORgBslwpaMU.roa (raw, json)
Hash identifier: GP+3WkxgzA6RC4NZaSHpEuVwUgEjvWSFSNvURECCfKE=
Subject key identifier: 63:A0:67:32:B3:2D:85:01:BB:A0:FB:23:39:18:01:B2:5C:29:68:C5
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 01A047DDCA276FCEE6E34DB7C84D58C2482B
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Y6BnMrMthQG7oPsjORgBslwpaMU.roa
Signing time: Fri 28 Aug 2026 10:15:12 +0000
ROA not before: Fri 28 Aug 2026 10:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206715
IP address blocks: 150.251.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:47:dd:ca:27:6f:ce:e6:e3:4d:b7:c8:4d:58:c2:48:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: Aug 28 10:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63a06732b32d8501bba0fb23391801b25c2968c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:02:3c:64:25:9c:de:81:49:92:df:8b:61:12:
3f:8b:80:37:cb:89:47:ef:45:bd:9a:0f:b6:26:bb:
c5:3f:d3:16:b8:e7:6a:7c:81:bf:90:7f:a0:c6:a2:
9c:e3:f3:7a:2d:3f:97:2a:95:41:48:6e:26:9c:c4:
93:88:ff:04:44:3e:f6:e7:0b:f7:b3:44:1e:4b:c1:
a8:e4:be:3e:6f:24:b2:c1:90:2f:79:d9:9e:53:8a:
2b:db:e5:56:2d:58:16:ae:f2:3d:c7:26:64:e8:8b:
e2:c4:1b:be:ba:7a:b8:c2:b8:09:18:6a:00:f0:2f:
09:42:f9:0c:55:c4:37:95:02:6f:9c:87:49:2e:e2:
8c:d8:0b:af:31:fc:f0:3f:45:69:72:ab:46:f6:ba:
40:2d:aa:0c:05:50:52:09:72:46:5c:de:70:a1:83:
a7:72:da:89:2e:a7:bc:40:f1:2c:ba:fb:11:94:53:
ca:6a:7f:9e:94:cb:6f:32:50:d8:6d:2c:46:1b:ed:
e5:f3:96:f8:65:3c:a7:a9:63:59:5b:1e:cc:8d:07:
27:f0:31:59:13:29:c7:09:15:12:ca:07:45:bc:02:
b0:a4:b8:e2:6a:13:6f:2b:c7:83:3c:c7:19:b4:5d:
57:8d:33:e4:04:89:2e:1d:f2:9b:b4:5c:e2:6c:6e:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A0:67:32:B3:2D:85:01:BB:A0:FB:23:39:18:01:B2:5C:29:68:C5
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/Y6BnMrMthQG7oPsjORgBslwpaMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.251.142.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:c1:95:b5:2e:3b:8c:e9:91:73:13:47:d3:c2:fb:3c:7b:98:
b8:3e:8c:3e:76:7c:3a:30:26:3d:99:ec:8d:75:ff:cf:f7:eb:
7d:7d:9b:3a:cf:ec:2c:e4:c7:93:6c:1f:59:66:17:5c:47:76:
e5:78:9c:b0:50:b9:3f:b1:04:54:0d:df:d9:e3:f4:dc:bb:94:
60:5b:ff:6f:e3:51:27:9a:1e:9d:33:8e:e6:ce:72:b9:80:6b:
2b:d4:c9:41:c3:cf:cb:e9:60:15:97:5d:0f:89:24:2a:bd:ff:
20:90:d4:35:4b:85:d7:0d:ec:4a:a8:34:42:c5:28:0e:33:2f:
62:f7:51:5a:b3:8a:5a:9f:97:b1:c5:4e:08:42:bd:8e:12:88:
af:64:78:84:d6:12:01:ac:f3:ce:15:f5:9e:03:ec:2a:d8:f0:
b4:61:74:aa:37:28:fb:92:ba:5a:40:11:2f:f7:96:c7:8b:71:
0e:69:4c:8c:75:0b:c5:84:2b:23:61:09:8b:27:71:a0:49:15:
19:71:c6:7c:9a:66:81:fb:e1:61:99:4d:72:26:b7:f9:63:36:
a8:12:4e:1a:79:6f:dd:ca:c7:5a:d4:59:4e:39:c5:22:7c:29:
c9:f5:c5:f0:30:7c:41:85:fc:83:04:fe:5e:6e:e6:4f:13:4c:
08:80:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:40 2026 by rpki-client