Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYO8Uyu1ytQCo_hwzGwcS6HY9Pw.roa
File: tYO8Uyu1ytQCo_hwzGwcS6HY9Pw.roa (raw, json)
Hash identifier: 7/qkLUwkh+H2LZTpFpSpZgGvzQSSPN1RGcy+pLjSQ/A=
Subject key identifier: B5:83:BC:53:2B:B5:CA:D4:02:A3:F8:70:CC:6C:1C:4B:A1:D8:F4:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DF83C996933BB4F61FAF0E21C26AC305C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYO8Uyu1ytQCo_hwzGwcS6HY9Pw.roa
Signing time: Tue 05 May 2026 13:03:34 +0000
ROA not before: Tue 05 May 2026 13:03:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402298
IP address blocks: 151.241.142.0/24 maxlen: 24
151.244.121.0/24 maxlen: 24
151.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:3c:99:69:33:bb:4f:61:fa:f0:e2:1c:26:ac:30:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 5 13:03:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b583bc532bb5cad402a3f870cc6c1c4ba1d8f4fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9f:cc:ac:98:5e:11:47:f4:c2:2e:0f:54:85:
6d:ed:6d:bd:76:68:4b:19:8a:4c:10:cb:39:ab:6b:
b0:0a:b8:da:4b:7f:74:f0:13:5c:9c:db:f7:3a:28:
a1:c2:e1:22:b6:ac:3f:2b:07:46:cd:7d:e7:7f:98:
49:cc:48:a2:44:71:5c:e3:6d:57:72:3f:9a:d7:90:
6d:7d:db:cb:20:36:8c:1d:df:aa:65:47:ed:0c:f9:
2e:39:31:ab:8f:0c:e7:38:c1:b7:62:a4:99:b8:61:
67:2c:e8:05:53:b9:e0:d8:e5:3a:d7:32:ed:79:35:
48:37:78:89:cd:fd:b3:5e:ac:26:b7:a4:76:5f:4c:
1c:22:78:61:67:35:a8:6c:d5:bc:a2:e3:89:05:5a:
c6:25:da:5a:df:df:65:93:53:34:43:52:dc:28:93:
b7:85:f6:ea:15:6f:a3:0b:50:f1:41:7f:15:2c:75:
12:c4:42:62:62:0a:c8:e4:65:31:ee:90:34:25:98:
8b:9b:1e:cc:ec:9b:13:6d:9e:3e:47:65:b6:a0:37:
4a:56:48:7d:30:b2:0f:9b:a3:62:68:69:f8:d4:a8:
0e:21:a2:f5:3d:9f:ce:cb:f7:ea:b6:91:87:96:b9:
0b:db:41:b2:03:85:80:32:b3:e3:b2:b8:4e:a5:b3:
6f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:83:BC:53:2B:B5:CA:D4:02:A3:F8:70:CC:6C:1C:4B:A1:D8:F4:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/tYO8Uyu1ytQCo_hwzGwcS6HY9Pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.142.0/24
151.244.121.0/24
151.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
87:e1:08:65:53:ec:21:05:25:06:d9:06:37:c2:9d:21:5f:39:
83:3a:73:2d:34:a1:97:20:58:41:38:e3:13:06:48:e1:6f:5d:
4f:df:85:9b:f7:0a:cc:d2:f5:35:e0:1c:22:c3:06:4d:fd:f7:
66:96:01:bc:a2:b7:ef:7d:eb:a3:67:4e:4f:08:f0:5c:8c:7b:
e7:6f:98:2b:71:36:db:ed:21:3f:ea:9f:3e:3e:98:49:f4:6e:
25:3d:cf:48:f4:3c:e8:4d:94:0a:50:a9:79:a8:eb:1a:7f:b1:
3b:8f:ab:12:f8:b4:f7:6d:f4:fe:b5:da:09:9c:64:aa:57:64:
d0:2c:ca:af:6c:ee:33:eb:16:e0:97:0b:70:ea:83:09:ef:79:
ad:a2:6e:ba:4c:ea:30:b0:a2:ed:ed:d4:d6:c8:d1:02:36:94:
de:5c:6f:52:8c:6c:ba:7f:08:8b:d8:0d:e9:40:2e:3f:03:32:
fb:14:56:20:85:d4:bb:36:8b:6f:81:8a:a1:b0:a8:12:21:0b:
a5:03:b6:de:de:c8:a5:7d:1b:63:a7:d0:6e:81:65:d5:d7:71:
d2:a3:53:a0:4d:34:61:1a:d1:01:12:a8:82:cb:7c:0c:84:f3:
de:91:d1:6b:d5:e3:49:3a:1a:03:f5:5a:a9:51:4d:54:2c:10:
40:af:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:58:21 2026 by rpki-client