Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4jZocVYFN64fr1eCPoR0s3fJ3c.roa
File: Y4jZocVYFN64fr1eCPoR0s3fJ3c.roa (raw, json)
Hash identifier: sYxq3FnQyBQkMHArwc1XrQPHDOiIwn3BbGz8sJPH+5w=
Subject key identifier: 63:88:D9:A1:C5:58:14:DE:B8:7E:BD:5E:08:FA:11:D2:CD:DF:27:77
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DE225A1D8409282C8F49866253D886492
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4jZocVYFN64fr1eCPoR0s3fJ3c.roa
Signing time: Fri 01 May 2026 06:06:50 +0000
ROA not before: Fri 01 May 2026 06:06:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 835
IP address blocks: 151.241.36.0/24 maxlen: 24
151.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 17:04:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e2:25:a1:d8:40:92:82:c8:f4:98:66:25:3d:88:64:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 1 06:06:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6388d9a1c55814deb87ebd5e08fa11d2cddf2777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:de:b1:b6:a0:55:dc:18:a5:2f:b6:7f:b8:1f:
96:49:e2:0a:9d:5b:66:44:a8:f2:fa:e8:d5:78:8f:
bd:20:6a:76:06:83:97:f5:4c:e6:34:af:23:89:a3:
6b:07:3b:07:5a:3c:7c:02:c9:67:c8:73:a1:f7:e2:
5d:ed:1f:93:5c:ba:7e:8e:9e:f7:68:5c:42:22:86:
5b:f2:81:ae:9d:33:55:77:40:bb:e7:26:ba:36:17:
95:76:66:b8:3e:88:f0:04:d4:f3:ff:50:2e:59:fa:
85:65:6b:f5:74:7f:c1:a0:0b:d8:2d:a2:df:29:36:
6d:3f:8b:2a:ad:ee:d4:8d:aa:5c:be:3f:37:17:29:
b6:23:89:16:a5:6f:36:2d:d8:90:d8:0d:fa:4a:53:
af:ba:f6:91:0a:19:59:91:36:1d:74:05:b6:0f:af:
3b:6c:99:e1:8c:5c:bb:12:f1:01:98:af:ae:ea:9b:
ba:88:4f:72:51:69:27:b3:e8:6e:98:dc:8b:59:0e:
05:b7:d1:d3:e4:87:ed:c5:fd:5d:1b:cd:ff:5d:ea:
04:4c:51:5c:05:b7:d7:5f:a8:60:1b:8e:eb:1a:98:
52:4b:6c:67:fd:a3:a9:2c:20:ed:a5:33:c7:c6:2f:
04:23:74:b2:84:e3:e1:fe:03:19:b7:91:17:22:c0:
ae:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:88:D9:A1:C5:58:14:DE:B8:7E:BD:5E:08:FA:11:D2:CD:DF:27:77
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Y4jZocVYFN64fr1eCPoR0s3fJ3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.36.0/24
151.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
86:ea:53:cb:18:f2:dd:1a:6e:60:af:2c:0e:ba:9d:11:90:24:
03:e3:63:43:b3:6d:99:d4:af:2e:de:19:70:7d:54:a9:06:c6:
4c:fe:b5:3f:b2:f0:3e:ab:c0:a3:f6:b7:a9:9a:4d:e3:71:68:
6b:84:6f:81:7b:90:74:a2:fc:43:9b:30:63:ba:4b:cc:aa:9c:
8a:71:d8:4b:99:39:ed:02:0c:95:10:3f:cf:7e:29:64:0e:fd:
cc:4a:88:32:8a:0a:98:9f:8f:55:a6:03:78:0e:ff:8a:2a:25:
0e:e3:13:44:9a:e1:8a:84:36:a5:49:f0:1f:e4:fa:91:83:8c:
a2:cf:79:d0:b8:c5:9a:40:ee:29:b3:81:b1:0f:40:94:2a:b6:
97:44:df:36:b7:fb:9d:27:a4:fb:1c:d3:53:0e:49:02:e2:51:
4e:51:15:a5:2b:35:78:de:0f:fd:a3:b4:b5:e4:3f:e9:35:d1:
04:12:20:ec:4d:1a:34:34:b4:24:0e:b1:18:b8:37:f9:ae:89:
07:8e:96:54:5b:d3:23:e8:96:59:4f:74:49:a6:b3:7a:3c:de:
a9:33:d1:6b:75:f2:85:35:38:db:53:04:15:77:ff:eb:6a:8f:
d6:a1:48:01:8e:c0:5a:b1:23:8e:29:16:08:d3:f4:db:e9:ea:
7f:3e:30:f2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3iJaHYQJKCyPSYZiU9iGSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTAxMDYwNjUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mzg4ZDlhMWM1NTgxNGRlYjg3ZWJkNWUwOGZhMTFkMmNkZGYyNzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyt6xtqBV3BilL7Z/uB+WSeIKnVtm
RKjy+ujVeI+9IGp2BoOX9UzmNK8jiaNrBzsHWjx8AslnyHOh9+Jd7R+TXLp+jp73
aFxCIoZb8oGunTNVd0C75ya6NheVdma4PojwBNTz/1AuWfqFZWv1dH/BoAvYLaLf
KTZtP4sqre7Ujapcvj83Fym2I4kWpW82LdiQ2A36SlOvuvaRChlZkTYddAW2D687
bJnhjFy7EvEBmK+u6pu6iE9yUWkns+humNyLWQ4Ft9HT5Iftxf1dG83/XeoETFFc
BbfXX6hgG47rGphSS2xn/aOpLCDtpTPHxi8EI3SyhOPh/gMZt5EXIsCuEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGOI2aHFWBTeuH69Xgj6EdLN3yd3MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWTRqWm9jVllGTjY0ZnIxZUNQb1IwczNmSjNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/EkAwQA
l/ezMA0GCSqGSIb3DQEBCwUAA4IBAQCG6lPLGPLdGm5grywOup0RkCQD42NDs22Z
1K8u3hlwfVSpBsZM/rU/svA+q8Cj9repmk3jcWhrhG+Be5B0ovxDmzBjukvMqpyK
cdhLmTntAgyVED/PfilkDv3MSogyigqYn49VpgN4Dv+KKiUO4xNEmuGKhDalSfAf
5PqRg4yiz3nQuMWaQO4ps4GxD0CUKraXRN82t/udJ6T7HNNTDkkC4lFOURWlKzV4
3g/9o7S15D/pNdEEEiDsTRo0NLQkDrEYuDf5rokHjpZUW9Mj6JZZT3RJprN6PN6p
M9FrdfKFNTjbUwQVd//rao/WoUgBjsBasSOOKRYI0/Tb6ep/PjDy
-----END CERTIFICATE-----
Generated at Wed May 13 02:12:53 2026 by rpki-client