Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yk9GPqfpfQGldAm5FsnOypFymQ8.roa
File: yk9GPqfpfQGldAm5FsnOypFymQ8.roa (raw, json)
Hash identifier: VW/8jwJGxtOPhOyghW7m6gf/c5CEkMXvwAbxDUbTc+A=
Subject key identifier: CA:4F:46:3E:A7:E9:7D:01:A5:74:09:B9:16:C9:CE:CA:91:72:99:0F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FB80537BECA2EDAE08CFBF2B151527266
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yk9GPqfpfQGldAm5FsnOypFymQ8.roa
Signing time: Fri 31 Jul 2026 11:52:57 +0000
ROA not before: Fri 31 Jul 2026 11:52:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274934
IP address blocks: 151.245.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b8:05:37:be:ca:2e:da:e0:8c:fb:f2:b1:51:52:72:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 31 11:52:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca4f463ea7e97d01a57409b916c9ceca9172990f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c6:7c:bf:72:2b:af:48:70:d4:c0:8e:1f:23:
9a:58:ae:0e:81:36:da:6d:c2:a8:1f:26:32:52:1a:
49:27:93:be:d4:5e:e6:f5:c0:91:4a:9a:77:92:da:
b8:04:44:14:09:16:2d:bc:9d:66:ae:b4:c3:ee:8a:
bb:e8:93:1b:92:9e:a2:f3:49:0b:41:1a:20:98:65:
83:06:52:05:22:20:9b:ad:8b:d6:8a:66:d2:a4:4b:
9d:58:c9:2a:d2:e3:e4:58:5b:dd:27:25:20:d0:58:
10:1d:ca:bd:22:af:75:e1:b4:e8:6f:ab:08:fd:c6:
d0:c3:ce:d9:11:c3:c9:79:8d:80:a6:04:ce:ac:ac:
2b:5b:2b:cd:e8:50:17:96:a9:95:23:f5:7d:80:7c:
80:53:cf:8e:76:7f:65:a7:07:41:c7:c0:7c:f7:31:
11:49:17:3f:8c:71:f3:75:53:93:c3:d7:92:0b:fb:
74:88:ce:2f:84:00:fe:f2:d8:00:69:86:16:2f:0f:
05:f2:1f:5b:06:7a:fa:40:73:47:8d:d1:64:7d:13:
b9:19:bd:56:32:ba:74:2d:0e:f5:f6:5b:fe:c5:3a:
f7:e5:52:f2:f1:77:d1:bb:00:90:ce:99:f8:fd:23:
32:09:db:f7:fd:04:43:44:06:a1:17:84:8a:a6:2b:
63:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4F:46:3E:A7:E9:7D:01:A5:74:09:B9:16:C9:CE:CA:91:72:99:0F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yk9GPqfpfQGldAm5FsnOypFymQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.100.0/24
Signature Algorithm: sha256WithRSAEncryption
00:ce:b8:65:27:d5:93:e8:3d:65:9a:12:72:c3:14:2e:04:57:
79:ba:8d:3a:e0:a9:3d:67:11:91:c8:43:63:71:ec:2e:73:96:
f4:33:db:f0:a8:56:03:68:6a:48:fd:c9:55:c7:38:73:cd:04:
d0:14:e4:f1:d1:37:d3:4b:66:3d:dc:2f:07:fb:33:14:60:bf:
82:be:16:7d:39:0f:c2:bb:63:64:e8:2d:60:e4:62:60:6d:a7:
bb:8a:8c:6f:96:a2:81:77:7a:79:82:72:53:18:07:12:25:45:
3d:ea:8c:64:db:40:7d:e5:6e:3f:e3:8e:50:03:7e:9f:52:ed:
f2:e8:d6:3e:96:22:97:3d:be:99:08:ab:29:4a:5a:d6:85:60:
f7:78:da:94:4c:da:b7:28:94:c3:c6:a2:bc:90:ce:3d:b1:23:
a5:46:76:ba:74:e3:34:12:31:df:b6:95:3d:4f:f0:1f:70:31:
47:c1:62:2d:5b:6a:5a:db:47:dd:5d:78:9d:aa:8c:c7:39:4b:
4e:dd:8d:21:3d:dc:c0:ed:d4:84:8c:5a:50:24:ab:13:f2:b0:
fe:e6:58:7d:74:35:11:14:5f:ce:ef:7c:87:ef:12:87:c0:82:
76:aa:94:94:a2:dc:98:f8:a9:21:86:60:c7:07:6c:9d:90:3d:
45:21:92:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:48:21 2026 by rpki-client