Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9YvIbK5oCaik9LokgQzeHx3unhU.roa
File: 9YvIbK5oCaik9LokgQzeHx3unhU.roa (raw, json)
Hash identifier: anqBE5XlzRwFZweuzWzeSjagejPhDREUlqxpVAsp09M=
Subject key identifier: F5:8B:C8:6C:AE:68:09:A8:A4:F4:BA:24:81:0C:DE:1F:1D:EE:9E:15
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C038853ABE66D1A1EA113227E3F09D5B3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9YvIbK5oCaik9LokgQzeHx3unhU.roa
Signing time: Wed 28 Jan 2026 07:36:31 +0000
ROA not before: Wed 28 Jan 2026 07:36:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 151.243.117.0/24 maxlen: 24
151.243.119.0/24 maxlen: 24
151.243.121.0/24 maxlen: 24
151.243.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:03:88:53:ab:e6:6d:1a:1e:a1:13:22:7e:3f:09:d5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 28 07:36:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f58bc86cae6809a8a4f4ba24810cde1f1dee9e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:63:63:25:09:f0:26:03:d6:88:a8:89:6d:00:
18:21:00:94:b4:32:f5:89:24:ec:b2:3a:26:ac:96:
3d:71:e1:d9:c4:75:37:db:17:0a:cc:25:93:af:47:
e0:2f:f9:41:17:98:3e:33:c1:eb:86:6b:a4:13:26:
1a:e3:cb:76:de:09:09:74:69:e5:66:8e:2c:b3:c4:
82:b6:df:42:39:24:0d:b7:66:87:3c:97:da:31:65:
09:f1:4d:52:1a:89:8e:a2:30:a4:88:78:67:59:75:
2c:9b:16:6e:77:df:85:27:31:54:c2:37:c3:ad:a5:
9a:47:54:68:71:02:6a:fa:1e:65:82:99:61:a6:b8:
3a:01:a5:8b:c4:9d:09:20:3e:a6:56:d2:cd:44:1d:
c7:35:dc:91:f5:dc:ae:37:68:9b:ae:7e:da:0b:1a:
3a:d1:e0:fc:4b:dc:88:48:d3:f7:1c:45:df:07:32:
3a:6b:86:0b:9e:89:00:2e:2a:4d:0b:79:f8:6f:e4:
6c:d5:cc:ae:bb:77:72:e8:92:61:bb:f3:54:b0:98:
d5:db:84:c8:72:c2:d8:ae:0f:05:ba:5c:35:8e:be:
b7:48:97:21:3d:51:c5:8b:ac:f0:86:87:e3:f8:b2:
e9:a8:ae:27:0b:1f:67:48:f4:7e:8c:4a:77:57:c6:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:C8:6C:AE:68:09:A8:A4:F4:BA:24:81:0C:DE:1F:1D:EE:9E:15
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9YvIbK5oCaik9LokgQzeHx3unhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.117.0/24
151.243.119.0/24
151.243.121.0-151.243.122.255
Signature Algorithm: sha256WithRSAEncryption
6d:83:72:19:c7:e4:79:f0:9e:0a:1c:b9:b2:96:40:01:af:6b:
84:4b:42:b1:a2:5b:1c:9c:21:15:b7:37:d1:86:de:eb:e9:aa:
46:bc:7f:05:fd:b6:1c:b1:06:e6:87:0d:33:19:63:90:33:3f:
f4:99:22:42:47:c6:bf:01:81:c0:3d:e2:ad:34:45:48:09:bd:
e2:7c:af:9e:9c:8b:0f:78:f6:26:0e:82:a9:db:05:f4:84:f4:
81:77:5c:20:bb:56:39:3c:83:4d:49:e6:11:5a:08:8f:6c:c4:
d9:29:e2:10:28:c7:1a:33:47:bf:20:51:be:4e:d7:39:22:ae:
b0:1f:65:48:58:45:13:95:e0:bc:eb:26:66:93:6a:62:3d:be:
45:55:21:c1:b3:db:3a:3d:70:5a:07:06:a4:11:f9:7c:b4:55:
99:19:83:68:d0:89:7a:e5:cc:4d:55:a2:c0:03:dd:03:97:f5:
b0:04:3f:f5:e3:7f:14:51:c2:00:32:8d:3b:9c:44:35:ed:dd:
34:51:78:7c:5f:13:85:16:63:71:cc:1a:54:f8:92:43:d0:f5:
d9:2f:0a:d9:a5:f2:e4:0e:67:cb:ca:42:c7:83:fc:0b:be:c4:
19:6d:47:0d:11:be:9b:45:4c:89:72:ee:29:5f:7f:c4:0d:cf:
f8:19:ab:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:53:07 2026 by rpki-client