Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YL8x2eaEHSdomNQZFcYzFm9ns98.roa
File: YL8x2eaEHSdomNQZFcYzFm9ns98.roa (raw, json)
Hash identifier: 2frmPDHsYyX3gTsly018DJ5DvHnffnL+JkysooQTEC8=
Subject key identifier: 60:BF:31:D9:E6:84:1D:27:68:98:D4:19:15:C6:33:16:6F:67:B3:DF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A19BF40D26D901155139BB6DECE7722FAC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YL8x2eaEHSdomNQZFcYzFm9ns98.roa
Signing time: Mon 02 Nov 2026 11:10:24 +0000
ROA not before: Mon 02 Nov 2026 11:10:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154410
IP address blocks: 151.242.202.0/24 maxlen: 24
151.242.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:f4:0d:26:d9:01:15:51:39:bb:6d:ec:e7:72:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 2 11:10:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60bf31d9e6841d276898d41915c633166f67b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d2:98:9a:4b:85:9d:6e:58:a9:4c:0e:30:08:
6f:17:01:e2:29:50:37:a0:3f:d5:79:85:ed:0c:70:
59:7b:02:1e:07:c4:38:80:4c:a2:92:75:6d:7d:f3:
76:14:fa:d3:c2:b0:a7:76:1e:44:7c:45:d4:f3:c7:
9e:86:c9:be:19:b3:6c:dd:68:77:4c:ac:02:5c:cb:
e4:e5:d8:4a:e8:83:2e:b1:20:96:e6:27:ab:55:f3:
92:b0:85:6b:45:96:af:0d:43:c4:21:61:45:92:bf:
df:fa:97:d1:3b:fd:db:89:ca:c0:d4:7b:fa:3f:ac:
f1:99:32:4c:74:56:27:37:f7:59:73:a6:8a:57:b9:
72:1b:eb:16:51:69:1d:8d:7d:19:2b:1f:12:3e:0b:
66:59:11:7a:ed:04:c7:6e:6a:c0:42:35:c9:af:1c:
e3:f2:d8:ab:44:a9:e4:1c:b4:92:58:28:2d:24:9e:
0f:06:52:aa:72:7f:5b:0b:d4:8d:c5:fc:c8:fd:ee:
63:09:49:b5:6b:ff:84:0e:bf:04:8f:9c:c3:33:3a:
ab:1c:01:3f:08:d1:eb:7b:42:c7:0c:13:95:75:34:
f6:7b:b0:4b:3b:9d:a7:66:5d:94:d6:12:21:7f:3d:
12:fc:a3:7a:01:6b:f6:81:e5:05:a5:12:4c:df:3b:
5b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BF:31:D9:E6:84:1D:27:68:98:D4:19:15:C6:33:16:6F:67:B3:DF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YL8x2eaEHSdomNQZFcYzFm9ns98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.202.0/23
Signature Algorithm: sha256WithRSAEncryption
92:b3:70:36:ae:d9:02:bc:59:6a:1c:50:1e:d5:de:83:94:be:
07:85:7a:c4:04:b4:2f:63:a9:99:df:24:d9:d8:48:42:1a:ac:
3a:f6:f5:96:4d:fa:6c:df:63:df:58:0e:7c:ce:7d:ef:9a:ff:
e0:38:2b:5e:b5:42:01:48:a3:7e:e7:32:5e:b8:88:1f:fa:77:
1f:0e:49:e4:23:8c:9a:a9:54:7f:40:bd:b3:ab:a9:c8:95:98:
42:07:8d:8f:3d:11:4d:61:ca:25:6a:46:2c:5e:0d:1c:e0:06:
74:05:49:81:61:02:22:4e:d3:79:25:1f:21:fe:57:d1:ac:30:
57:80:20:2f:21:7c:43:3a:ea:e7:26:d9:24:41:b9:6a:41:fe:
89:5c:19:29:ba:42:8f:78:4d:5b:1f:82:8c:d1:d9:73:79:a4:
34:ee:68:00:01:be:7d:08:d2:e2:88:72:e0:fc:26:87:40:cc:
69:0c:0d:e3:ab:7a:7c:18:72:bc:02:44:fb:b0:be:61:2c:e6:
f5:89:4e:e9:4a:d3:89:ff:02:6e:cc:2c:f9:5c:d5:74:b8:19:
8a:70:95:e6:03:ca:4e:60:25:1a:60:04:e1:4e:f6:7c:c8:ed:
01:75:5d:45:c5:6b:08:3e:43:27:66:30:72:d1:d4:10:42:4a:
67:e9:14:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:35:03 2026 by rpki-client