Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_yV28nN4fifqNNl9-pDCa7Ep3dM.roa
File: _yV28nN4fifqNNl9-pDCa7Ep3dM.roa (raw, json)
Hash identifier: lIBFhCa9BOSzAuWiKZu2WZgVA75mXiEG2ale4M6JkPE=
Subject key identifier: FF:25:76:F2:73:78:7E:27:EA:34:D9:7D:FA:90:C2:6B:B1:29:DD:D3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E17C134F5EDB57B809782827ADD8CB3F1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_yV28nN4fifqNNl9-pDCa7Ep3dM.roa
Signing time: Mon 11 May 2026 15:56:38 +0000
ROA not before: Mon 11 May 2026 15:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 151.240.26.0/24 maxlen: 24
151.244.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:c1:34:f5:ed:b5:7b:80:97:82:82:7a:dd:8c:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 15:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ff2576f273787e27ea34d97dfa90c26bb129ddd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d4:ab:47:8d:82:c1:f9:0f:ee:ff:17:28:14:
24:9c:80:7c:c7:ed:4b:ca:b5:4e:88:3c:51:43:d2:
32:6d:38:0c:3a:f4:d4:6f:6a:c4:d2:c9:59:a3:6d:
55:44:1a:22:81:1a:db:78:ef:83:a9:d5:62:99:72:
d6:bf:fc:15:85:c5:4c:23:00:ab:ff:b9:e7:f6:41:
36:2e:72:de:71:61:65:26:98:8a:28:45:b2:a6:01:
3a:48:dc:eb:e1:8d:a9:0c:d8:8a:9f:3d:86:2c:2f:
f3:dd:31:3a:7c:1d:f8:f5:c7:67:7e:39:59:32:e4:
cd:19:2a:0f:f7:53:db:52:02:7a:87:07:e2:a8:a4:
fa:e0:54:53:af:19:40:65:f2:32:a0:94:5d:ca:b3:
fc:d4:40:30:5d:d7:3d:8c:a8:24:12:67:19:e0:76:
57:1c:62:59:09:63:18:be:10:94:4f:5a:8e:04:33:
bb:67:d7:06:d7:5a:2c:0b:c4:dd:69:52:b2:6c:46:
6a:42:15:54:5e:c6:4d:c4:43:5d:dc:3a:bb:46:3b:
b1:4d:fe:e6:84:93:83:77:b7:61:46:6f:39:7f:ac:
15:d6:00:79:22:9c:33:b6:a0:f4:68:e5:fb:71:20:
4f:f3:57:ad:93:9c:fb:95:02:28:11:d1:eb:78:ad:
aa:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:25:76:F2:73:78:7E:27:EA:34:D9:7D:FA:90:C2:6B:B1:29:DD:D3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_yV28nN4fifqNNl9-pDCa7Ep3dM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.26.0/24
151.244.120.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:3e:4d:df:21:24:53:f2:64:8a:b3:c7:bb:96:6b:1c:0c:89:
9a:c5:a9:f1:2f:b7:19:de:65:af:66:a3:73:bf:a9:82:be:ea:
a6:20:b3:91:03:d5:c8:84:f4:9a:eb:69:b6:ae:a7:7a:b0:2a:
10:db:a6:75:d5:d4:6e:4e:3e:b3:bb:f2:05:e2:0e:74:5a:bb:
51:cd:e5:12:58:bb:dc:c5:4b:7e:60:bb:eb:81:b3:61:09:81:
96:e4:89:96:97:d4:90:8c:b0:37:56:ae:0c:97:dc:9e:f2:81:
e9:b8:63:e3:d6:60:77:98:08:ab:89:f7:dd:bc:5e:b4:eb:b2:
35:2d:c6:6d:78:30:7e:61:16:c4:f8:bf:18:2b:be:0b:d0:3b:
12:d1:71:4f:8d:04:0e:10:05:dd:33:95:f3:57:d6:d7:8c:f1:
70:b4:c9:cc:e0:df:d0:bd:e9:a1:3f:bb:f5:b6:cf:35:cb:59:
68:84:60:7d:6d:97:2c:e9:60:5b:44:6c:47:06:76:b3:38:74:
06:4c:d9:ab:a8:61:07:92:d3:d7:72:4f:38:a5:b4:87:2a:8e:
88:b8:5a:55:50:f3:1b:d5:39:6e:12:55:37:8d:30:c2:6e:4c:
41:6f:e0:b8:57:d3:4d:f8:8c:22:bf:98:d1:ee:a7:84:b1:8b:
8e:76:75:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:32:03 2026 by rpki-client