Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeVJShuXMCePjy7xfI_pwJmQwvo.roa
File: yeVJShuXMCePjy7xfI_pwJmQwvo.roa (raw, json)
Hash identifier: eoUaSYvB2zB2iavx+J3iiWNnKAoY3EHnxGqCw/b7XIU=
Subject key identifier: C9:E5:49:4A:1B:97:30:27:8F:8F:2E:F1:7C:8F:E9:C0:99:90:C2:FA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F8DF5122B2EFE193E0F011C54BF45AE30
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeVJShuXMCePjy7xfI_pwJmQwvo.roa
Signing time: Thu 23 Jul 2026 07:51:16 +0000
ROA not before: Thu 23 Jul 2026 07:51:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402288
IP address blocks: 151.247.49.0/24 maxlen: 24
151.247.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8d:f5:12:2b:2e:fe:19:3e:0f:01:1c:54:bf:45:ae:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 23 07:51:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9e5494a1b9730278f8f2ef17c8fe9c09990c2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6c:57:83:20:df:c6:2e:5b:78:16:74:a5:39:
43:68:13:56:b0:3d:d4:cf:17:19:11:41:43:9d:c3:
76:e0:18:7c:ae:de:66:ed:4a:3b:cc:b3:96:00:89:
09:10:cd:9b:17:66:4f:df:c3:7c:d5:06:b2:f1:ba:
5d:d8:79:5f:fd:0f:76:94:71:82:da:89:9d:85:f9:
0f:37:8a:05:03:ad:2c:6e:e7:35:6c:17:71:44:48:
de:7d:27:19:93:92:05:e6:f4:c9:4f:ef:22:60:f0:
fb:8a:fc:47:37:49:e4:0f:29:54:7c:34:12:9e:f6:
fc:2e:0f:15:82:8a:03:04:a3:64:ae:2f:ed:6f:00:
fe:67:c6:81:af:0a:a9:60:22:0b:f9:ec:d0:d2:56:
4f:f0:e4:0e:c8:d6:eb:9b:bb:53:6c:31:18:27:7b:
e5:33:a4:2c:c5:c9:21:16:d9:d5:d2:52:9d:c9:92:
f9:2a:df:e1:a4:9a:8e:6c:3c:db:23:de:c6:f8:d6:
f2:52:64:5d:f0:bb:a3:d6:1b:6d:aa:a3:11:44:40:
f0:64:9c:63:72:8b:87:49:2b:1e:27:8d:70:17:fc:
84:ca:93:f1:57:3c:4f:63:4f:1d:7f:60:5d:f5:04:
26:43:00:ab:25:ba:81:7c:d3:0d:c5:1b:c8:dd:c2:
be:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E5:49:4A:1B:97:30:27:8F:8F:2E:F1:7C:8F:E9:C0:99:90:C2:FA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yeVJShuXMCePjy7xfI_pwJmQwvo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.49.0/24
151.247.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:6c:f3:d1:a4:81:58:30:f0:d0:71:92:18:2b:43:61:74:9c:
c1:5a:02:1d:3e:19:2a:90:2e:24:75:2c:c1:c5:9c:7d:30:fd:
60:46:cd:25:4e:92:5f:af:d7:7a:37:d4:0f:5e:ff:aa:8a:9c:
e1:2c:9b:d3:21:5f:0b:12:f8:7b:ae:c6:19:75:29:45:22:6e:
7b:a5:51:45:91:93:e2:02:8f:06:4d:2e:ea:8a:9b:15:d8:c8:
7a:3c:3d:2e:b5:e3:9d:02:2f:8a:1f:c7:8c:c1:19:ea:98:4c:
b8:3c:74:00:b2:8a:bc:2d:bb:18:31:7c:c3:43:58:f5:73:21:
7b:3e:4e:68:03:80:b3:01:62:d9:fb:5b:f0:2a:aa:fd:53:2e:
c7:07:00:fa:b1:fe:2d:6d:47:c0:b7:50:12:90:27:04:fd:1b:
31:48:db:4b:52:9c:dd:0b:fd:2b:c7:ae:71:41:ef:98:ae:9f:
f0:fd:3c:c2:e8:5c:78:11:bb:49:66:79:42:67:87:18:31:ae:
c2:9d:d8:e2:8d:a5:d2:b4:0f:90:0b:59:83:f0:43:86:ec:65:
b4:9b:78:e0:64:18:bc:dd:d0:ec:17:d5:53:1d:f6:36:e4:94:
a8:7d:45:52:98:8c:56:c8:29:38:f7:a1:0d:7f:5a:f1:a8:76:
29:88:bf:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:03 2026 by rpki-client