Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y2HSdVpUK1Wooc1je57F5lTIo8.roa
File: 9Y2HSdVpUK1Wooc1je57F5lTIo8.roa (raw, json)
Hash identifier: +a4FSaY9seAWviiu+r4FlSj6STtWKmwWSz/+z9+0WUA=
Subject key identifier: F5:8D:87:49:D5:69:50:AD:56:A2:87:35:8D:EE:7B:17:99:53:22:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7D51BB35127BD56DB107346574115270
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y2HSdVpUK1Wooc1je57F5lTIo8.roa
Signing time: Sat 11 Apr 2026 16:13:21 +0000
ROA not before: Sat 11 Apr 2026 16:13:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200957
IP address blocks: 151.244.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:51:bb:35:12:7b:d5:6d:b1:07:34:65:74:11:52:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 16:13:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f58d8749d56950ad56a287358dee7b179953228f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:88:4f:4a:19:75:59:17:26:cb:db:0e:f6:
a2:2b:ad:8b:fa:63:95:21:66:2c:5c:c8:d0:2c:16:
8f:8e:a2:b1:56:a4:e6:4a:9f:95:ea:a9:27:1c:c8:
5c:1d:66:c0:de:a0:03:7b:78:55:08:5f:67:35:a1:
ed:22:8d:d1:88:5b:f1:95:3d:7d:e7:73:64:72:4b:
23:fa:93:2d:23:47:b2:c3:a5:73:77:13:f6:f3:41:
96:88:c3:4e:8d:c0:78:e6:d4:a5:12:20:f0:2c:23:
09:2c:88:ce:c2:53:f1:5a:44:49:03:0b:85:8c:c6:
2f:5c:36:dc:4d:e8:d7:fd:e8:e8:cd:87:c5:e2:98:
aa:69:a6:b4:fa:83:5f:fb:7a:84:9e:b3:a7:4c:89:
45:af:fd:48:8e:f5:0f:c3:a6:75:41:be:a0:97:11:
46:76:f6:80:d4:c0:ad:6d:c1:d4:81:8b:fe:c9:43:
b6:2d:71:c6:59:80:13:13:14:ef:8c:ac:94:92:bb:
1c:ea:26:3c:89:a5:8c:d7:06:82:97:2b:f7:bf:52:
e0:c7:dd:e7:5e:af:e0:67:50:c7:a4:66:6c:ca:21:
2b:6c:72:5a:ac:9f:9b:b0:c1:a8:c3:c0:5d:30:a3:
4f:0b:38:48:8a:08:4f:95:fe:f3:58:8d:75:62:7e:
71:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8D:87:49:D5:69:50:AD:56:A2:87:35:8D:EE:7B:17:99:53:22:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9Y2HSdVpUK1Wooc1je57F5lTIo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.44.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:62:ab:e3:f1:5c:98:2a:e3:ff:81:35:18:46:42:c3:57:6b:
b6:26:59:70:a1:cd:e1:ac:9d:99:eb:97:d2:ad:97:35:8e:60:
5d:c7:6c:d4:11:28:4c:03:b4:19:12:ab:58:5a:b2:6a:4b:81:
95:53:56:fd:32:ff:31:58:83:ce:f7:5e:88:58:93:d8:a1:da:
e7:d8:53:68:12:4e:68:56:e9:b6:25:ed:f8:37:c4:87:1b:2c:
34:46:52:d1:a3:3b:8a:d3:81:5f:1c:db:46:7c:19:79:1e:53:
2f:ff:02:2d:59:c9:4d:e6:22:19:05:98:f0:8a:a3:54:8f:4c:
4a:36:df:d8:fa:d7:2d:b1:32:b1:9e:63:ec:cf:61:7f:d9:c8:
59:c0:b4:61:e6:03:1c:4e:dd:1b:a7:12:bd:7d:6d:be:25:4d:
6c:f9:f6:75:37:9a:a7:c1:84:0d:4d:34:10:cd:13:f6:74:60:
3f:9e:1a:45:3c:70:06:16:1f:1e:03:fa:4c:75:71:90:f2:2a:
8f:87:00:ae:ea:f0:bc:97:82:67:17:7b:c4:3e:f9:39:ac:d3:
66:d3:42:da:2a:22:88:00:c9:36:d2:f9:1b:5f:fb:ac:00:6a:
a8:3b:26:8f:e3:44:54:ee:45:a1:e3:46:47:52:78:83:d4:c0:
07:5f:91:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:58 2026 by rpki-client