Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YM6063OsBPRWGReJL470nuTDhj8.roa
File: YM6063OsBPRWGReJL470nuTDhj8.roa (raw, json)
Hash identifier: R+QBUykK5l79MCn/v/rp25/H5APXnLa0o8tgd68KgGQ=
Subject key identifier: 60:CE:B4:EB:73:AC:04:F4:56:19:17:89:2F:8E:F4:9E:E4:C3:86:3F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB7B68731486CADBA086AB416B024F74C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YM6063OsBPRWGReJL470nuTDhj8.roa
Signing time: Thu 11 Jun 2026 17:24:13 +0000
ROA not before: Thu 11 Jun 2026 17:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203075
IP address blocks: 151.244.120.0/24 maxlen: 24
151.245.174.0/24 maxlen: 24
151.247.24.0/24 maxlen: 24
151.247.26.0/24 maxlen: 24
151.247.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:b6:87:31:48:6c:ad:ba:08:6a:b4:16:b0:24:f7:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 11 17:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=60ceb4eb73ac04f4561917892f8ef49ee4c3863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d6:f3:be:57:95:58:17:a0:33:63:ce:c0:7d:
1b:09:ae:17:29:2a:4e:19:e5:bb:85:c2:52:8e:a2:
58:78:30:0c:89:51:45:af:b5:d6:bb:14:15:f8:13:
8d:5b:1c:07:ab:4c:5c:80:cb:7c:83:fd:c9:68:16:
29:8d:30:5e:2b:e7:1a:28:d0:bd:fc:84:6e:bd:aa:
ff:60:af:58:37:3e:8d:4b:7d:c2:a0:54:24:9c:12:
c4:bd:ab:36:29:d0:23:2e:a7:d4:db:0e:35:2d:bc:
4b:a2:d4:0f:93:d1:29:d1:22:fe:8d:f9:11:6e:4c:
e2:71:a2:25:31:eb:09:fa:8f:6e:43:66:b8:31:ce:
5e:8c:58:ec:2e:8d:0d:22:ac:0d:05:30:fb:6c:c4:
ba:55:8d:e7:18:97:8b:09:ab:c3:79:91:0c:1e:a5:
50:fb:02:c9:52:b4:ce:cd:35:39:ab:2c:a4:62:76:
d9:c0:d7:fa:be:e5:74:0a:69:8b:1f:79:72:5b:42:
fd:47:81:be:52:c4:c7:d9:16:3e:64:ba:40:e8:2a:
f0:68:8d:e1:d7:e0:26:2c:71:1c:ed:7f:20:bf:95:
97:ae:ae:2c:ac:26:7d:9e:e1:09:52:39:18:a0:05:
75:56:56:91:84:14:4b:fc:b8:0f:39:de:64:93:ca:
09:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CE:B4:EB:73:AC:04:F4:56:19:17:89:2F:8E:F4:9E:E4:C3:86:3F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YM6063OsBPRWGReJL470nuTDhj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.120.0/24
151.245.174.0/24
151.247.24.0/24
151.247.26.0/24
151.247.55.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e8:d7:67:49:3a:ab:51:d3:28:9d:2f:73:bd:ed:38:d0:e1:
0a:61:39:2b:e5:0a:ec:bf:5c:32:be:aa:52:bd:1b:44:d9:85:
89:21:23:e8:3a:e7:b1:bf:69:0e:6a:07:d7:9a:5e:5e:64:52:
11:12:82:c7:86:7c:11:b9:27:1e:87:c4:f9:78:a7:4d:0b:f5:
20:40:34:60:c2:e6:66:59:e8:9d:d3:84:12:15:7d:47:c1:5e:
59:09:a0:7d:73:a7:20:37:85:95:71:dc:e9:c9:28:f8:29:4a:
a4:1d:b7:c9:a1:a3:d3:80:50:16:bf:3e:02:19:bc:cc:68:27:
5d:21:a1:15:6a:e0:ae:50:9d:ae:73:a1:85:07:9c:bd:0b:a6:
78:69:8c:76:07:bf:91:31:13:8c:4a:d9:17:b7:60:23:05:4d:
11:1f:6d:68:1c:37:d3:28:75:01:27:4e:e2:85:2b:20:f8:e0:
bf:32:9e:0e:e1:11:b4:98:85:d0:24:02:ae:21:d8:a9:d1:5f:
63:52:79:f3:9d:a2:5c:52:4a:34:30:da:2a:70:ee:9f:cb:a8:
87:63:77:5f:94:a1:75:08:c8:c9:ca:7c:36:1b:cb:29:87:6e:
3f:55:07:8e:30:db:8b:e6:c3:69:a9:11:6c:c9:f3:ac:8a:81:
fc:ce:32:6b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ63tocxSGytughqtBawJPdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjExMTcyNDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGNlYjRlYjczYWMwNGY0NTYxOTE3ODkyZjhlZjQ5ZWU0YzM4NjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntbzvleVWBegM2POwH0bCa4XKSpO
GeW7hcJSjqJYeDAMiVFFr7XWuxQV+BONWxwHq0xcgMt8g/3JaBYpjTBeK+caKNC9
/IRuvar/YK9YNz6NS33CoFQknBLEvas2KdAjLqfU2w41LbxLotQPk9Ep0SL+jfkR
bkzicaIlMesJ+o9uQ2a4Mc5ejFjsLo0NIqwNBTD7bMS6VY3nGJeLCavDeZEMHqVQ
+wLJUrTOzTU5qyykYnbZwNf6vuV0CmmLH3lyW0L9R4G+UsTH2RY+ZLpA6CrwaI3h
1+AmLHEc7X8gv5WXrq4srCZ9nuEJUjkYoAV1VlaRhBRL/LgPOd5kk8oJxwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFGDOtOtzrAT0VhkXiS+O9J7kw4Y/MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWU02MDYzT3NCUFJXR1JlSkw0NzBudVREaGo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/R4AwQA
l/WuAwQAl/cYAwQAl/caAwQAl/c3MA0GCSqGSIb3DQEBCwUAA4IBAQCw6NdnSTqr
UdMonS9zve040OEKYTkr5Qrsv1wyvqpSvRtE2YWJISPoOuexv2kOagfXml5eZFIR
EoLHhnwRuSceh8T5eKdNC/UgQDRgwuZmWeid04QSFX1HwV5ZCaB9c6cgN4WVcdzp
ySj4KUqkHbfJoaPTgFAWvz4CGbzMaCddIaEVauCuUJ2uc6GFB5y9C6Z4aYx2B7+R
MROMStkXt2AjBU0RH21oHDfTKHUBJ07ihSsg+OC/Mp4O4RG0mIXQJAKuIdip0V9j
UnnznaJcUko0MNoqcO6fy6iHY3dflKF1CMjJynw2G8sph24/VQeOMNuL5sNpqRFs
yfOsioH8zjJr
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:59 2026 by rpki-client