Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-YrA2bCu76Jgs1Ll954lAESXGg.roa
File: 0-YrA2bCu76Jgs1Ll954lAESXGg.roa (raw, json)
Hash identifier: Jtged/uyFUnC3VQ057RzTVA19kEFOMRb5ZhZ5KI5gTQ=
Subject key identifier: D3:E6:2B:03:66:C2:BB:BE:89:82:CD:4B:97:DE:78:94:01:12:5C:68
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E1D23FE3E4C10D9FDCF94ADD2023D47AA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-YrA2bCu76Jgs1Ll954lAESXGg.roa
Signing time: Tue 12 May 2026 17:02:38 +0000
ROA not before: Tue 12 May 2026 17:02:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 151.243.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:fe:3e:4c:10:d9:fd:cf:94:ad:d2:02:3d:47:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 12 17:02:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d3e62b0366c2bbbe8982cd4b97de789401125c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:2d:1c:e1:10:c9:c6:55:a3:13:20:c0:6c:
25:d2:53:ec:d0:c0:a7:dd:be:14:3c:bf:f4:99:34:
84:a7:68:ec:9e:8f:f0:41:81:53:45:24:40:a7:a2:
88:91:18:dd:46:a8:96:94:48:f9:5a:a1:fc:77:c2:
4a:c3:c2:f3:50:5d:d2:17:53:1d:0d:9c:20:1e:2b:
90:31:40:02:cd:cd:25:45:8b:48:19:27:55:95:c4:
4c:61:f8:ed:43:4d:f6:fd:71:d6:a1:2f:ef:2e:48:
3f:06:f6:8b:a4:89:34:08:cc:1f:89:af:27:0f:3b:
61:6d:0e:ad:32:d9:27:47:3c:72:e7:90:05:b5:e5:
4c:fd:6f:e7:a1:f6:6d:29:6f:fd:a2:c2:36:3e:77:
10:d8:1f:72:95:b8:90:bc:18:f6:c4:68:66:59:d4:
5c:23:69:8f:a8:d7:82:fc:eb:38:58:e9:79:93:08:
58:8a:52:33:ef:ee:52:7c:20:be:02:db:08:e8:11:
42:e6:17:4d:3c:fb:94:b2:28:44:35:93:1a:2c:c3:
18:02:61:d0:60:c1:3b:4a:52:12:f0:1a:19:33:05:
f2:2d:51:52:11:75:9b:75:ec:9b:aa:14:3b:31:88:
72:b1:32:57:de:0e:12:ad:b6:0e:7c:44:0b:af:e1:
91:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E6:2B:03:66:C2:BB:BE:89:82:CD:4B:97:DE:78:94:01:12:5C:68
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0-YrA2bCu76Jgs1Ll954lAESXGg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.155.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b7:7b:c8:5d:6f:80:c2:c1:ec:94:ab:8e:0b:d8:85:75:d1:
89:35:d2:d0:61:71:f7:b5:56:48:c7:ac:f7:4e:7e:98:8a:41:
0f:f2:4a:36:a4:ce:47:2b:86:93:0f:41:dc:a5:f9:db:40:18:
5b:13:2e:59:74:bc:2e:3b:09:64:c6:e9:60:44:f5:b1:a7:ca:
a3:f3:a4:7a:9f:a1:c6:f2:72:bf:54:38:7c:0e:47:75:0e:96:
ae:57:ce:89:0b:ef:bd:7d:26:b9:53:d8:28:73:a5:2b:8c:b2:
73:22:9a:5a:1a:2d:a3:19:f6:d5:9f:50:5c:c8:7a:5a:60:77:
41:9a:20:27:3d:9d:79:ca:aa:26:02:6d:80:61:f4:7c:bc:c4:
0c:61:a5:33:36:cd:37:6e:a2:49:36:2e:aa:13:7e:5e:91:f6:
4c:f2:07:6b:03:26:58:f9:19:73:56:8a:fa:2a:61:ad:f6:7c:
1d:9c:d7:52:82:bf:6f:53:48:8b:a1:73:65:a9:f0:7f:55:8c:
45:02:f8:4f:65:eb:96:4c:be:9b:68:f8:34:ce:13:6f:9f:13:
a2:01:d2:6f:3d:5d:aa:a4:b0:f1:9a:a5:09:65:db:d6:0e:eb:
b6:19:c0:30:f1:9a:29:47:aa:54:7f:60:9d:90:77:70:87:ef:
2b:2d:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:44:52 2026 by rpki-client