Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sY345s2M48a0Sb1UsOQZ5iO_yD0.roa
File: sY345s2M48a0Sb1UsOQZ5iO_yD0.roa (raw, json)
Hash identifier: ellgsd7SxeGvRWfu149kOCcqbC8cP6zZvkwaCeluZT4=
Subject key identifier: B1:8D:F8:E6:CD:8C:E3:C6:B4:49:BD:54:B0:E4:19:E6:23:BF:C8:3D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9C93747ACD427ABFD38E41489C5538CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sY345s2M48a0Sb1UsOQZ5iO_yD0.roa
Signing time: Fri 17 Apr 2026 17:53:22 +0000
ROA not before: Fri 17 Apr 2026 17:53:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213124
IP address blocks: 151.245.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:93:74:7a:cd:42:7a:bf:d3:8e:41:48:9c:55:38:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 17:53:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b18df8e6cd8ce3c6b449bd54b0e419e623bfc83d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:9b:04:14:80:67:b9:9e:fe:e9:8d:06:34:
f0:63:6a:20:f4:d1:b7:fe:ae:9e:6e:78:b2:43:da:
51:9b:1c:c9:f2:be:36:ba:14:84:b7:58:2e:7c:67:
46:be:c0:89:31:a6:b1:67:53:c7:d5:14:bd:96:b8:
1c:e7:ed:c3:10:44:e8:82:6e:fb:37:8f:5c:95:de:
b6:47:3a:36:2d:52:8d:bc:1a:1d:0b:a8:2b:9c:40:
a6:3a:b1:22:db:cd:6a:66:f2:50:39:ce:3e:f5:cf:
5d:85:f7:10:45:a0:47:5a:b9:7d:89:c5:16:47:c6:
a1:91:5d:68:f0:41:57:a0:83:0e:88:b8:9c:9c:91:
95:4d:f6:37:e9:c0:b5:c5:1e:5b:74:02:ae:82:c3:
8f:3e:56:d1:da:74:86:8e:96:f3:38:56:be:bc:6e:
50:bb:a6:b5:f9:bd:17:5e:55:aa:77:2c:e4:25:69:
a0:55:d4:f3:6c:5c:b4:e6:a8:e9:33:e0:3e:ee:c7:
08:d5:d0:e6:77:f8:ec:df:b9:c5:7c:b3:f6:33:b1:
20:5a:07:3a:14:27:db:b9:26:9c:50:72:c9:ab:ce:
18:38:5e:52:d8:b6:1c:16:27:20:71:6b:bc:c8:c9:
e0:95:8f:c2:eb:33:ca:69:f2:e6:f0:d4:cf:38:7c:
1f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:F8:E6:CD:8C:E3:C6:B4:49:BD:54:B0:E4:19:E6:23:BF:C8:3D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sY345s2M48a0Sb1UsOQZ5iO_yD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.50.0/24
Signature Algorithm: sha256WithRSAEncryption
68:b8:6c:e3:d8:49:8a:7d:08:b4:ef:56:2e:0e:a8:d6:3d:3b:
9e:c6:79:8f:61:a2:d3:a2:fd:9d:63:60:b0:56:d4:dd:03:d3:
bf:e2:ee:c1:fe:3d:bb:93:26:e3:6d:86:49:c8:0c:13:cd:77:
1c:a7:7a:21:79:82:7d:5c:d1:96:35:f4:2c:94:95:f7:64:c6:
97:19:43:d3:dc:45:92:71:87:21:e1:cb:74:0f:d1:66:b5:21:
23:9b:e6:e4:85:64:9a:e6:2f:7e:c8:e9:0e:3f:78:35:0a:88:
10:ac:a1:68:9e:32:2b:fd:31:b1:22:a3:be:60:94:e4:17:62:
4e:90:3a:30:87:8b:3b:59:dc:a0:87:58:76:01:e7:cf:78:4b:
76:8d:41:18:a0:91:a9:49:ec:44:c1:43:54:5d:41:49:ee:8f:
26:a1:5c:90:af:6a:87:ec:9e:b7:f8:03:74:89:fe:71:e1:e5:
3c:aa:0d:cd:3a:de:72:dc:42:50:1b:c8:18:a5:55:3d:cf:c3:
75:d6:45:ed:e2:c0:02:8a:3d:c0:4b:52:f5:53:ac:fc:94:6a:
47:b8:3f:40:c6:32:aa:78:35:5f:d1:64:fd:21:40:08:6e:9a:
e2:7f:75:8d:72:db:c9:53:f5:51:91:0d:c9:4a:d6:78:44:1a:
a0:b3:1b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:59:52 2026 by rpki-client