Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7kk5H05F1uG0ZWYa1MQlBZB5ng.roa
File: y7kk5H05F1uG0ZWYa1MQlBZB5ng.roa (raw, json)
Hash identifier: hShAUzaXyKxlXDOfhBMmZU0Tdxx3IkR+SrBed0srPIo=
Subject key identifier: CB:B9:24:E4:7D:39:17:5B:86:D1:95:98:6B:53:10:94:16:41:E6:78
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D66ABC7C0AA1A39546F3BB0C63E6A8E5A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7kk5H05F1uG0ZWYa1MQlBZB5ng.roa
Signing time: Tue 07 Apr 2026 06:40:27 +0000
ROA not before: Tue 07 Apr 2026 06:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205987
IP address blocks: 151.242.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:ab:c7:c0:aa:1a:39:54:6f:3b:b0:c6:3e:6a:8e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 7 06:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbb924e47d39175b86d195986b5310941641e678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3c:08:85:d8:80:2d:fa:f0:b7:6c:56:0c:cb:
bd:92:00:0a:e0:36:3e:29:35:04:cc:05:09:7f:ea:
ce:b1:89:ad:10:6c:f5:64:b6:0e:14:ed:7a:27:73:
f7:c8:7c:25:26:56:33:9e:4b:24:bb:b3:e9:b9:ed:
00:a7:4b:eb:49:a8:15:da:9e:11:42:fc:19:29:c6:
cf:a0:ff:44:fd:51:be:07:b7:88:bb:29:fb:f6:58:
85:53:12:db:85:5d:ae:af:82:c9:9b:eb:a0:f7:8b:
0c:d0:5b:e2:49:6e:33:4f:9d:7f:3d:65:83:85:76:
e3:2f:21:73:5a:a7:8f:e9:62:24:e6:91:06:2d:21:
23:cf:7d:3a:3a:3c:41:5f:6f:b0:46:11:98:77:ba:
a9:d3:19:6e:cd:70:2f:60:79:65:8c:dc:60:fb:62:
e4:75:67:2a:83:86:d4:03:9a:d9:6c:60:04:de:2a:
21:83:f1:01:36:db:12:ec:dc:5a:e1:32:55:c2:e5:
0d:0e:6b:fb:6d:d5:0e:b4:d2:a6:b2:cb:5d:58:59:
95:62:3d:24:98:99:8f:a6:19:67:82:fc:2d:97:c0:
b8:d8:cd:b1:5a:a7:38:7e:d9:4e:18:a6:5d:bd:d9:
af:01:06:55:29:6d:0a:a8:e7:29:ee:6b:4f:07:bf:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B9:24:E4:7D:39:17:5B:86:D1:95:98:6B:53:10:94:16:41:E6:78
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y7kk5H05F1uG0ZWYa1MQlBZB5ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.57.0/24
Signature Algorithm: sha256WithRSAEncryption
75:fb:07:39:d2:1d:84:5e:a5:21:44:0d:d0:c6:e8:d1:73:fb:
b5:a5:95:24:04:55:2f:25:3b:13:cc:59:1d:e6:b7:d6:9b:e1:
4b:af:01:21:66:ce:85:c4:71:fb:02:1f:e7:d4:c4:14:3d:ab:
cd:0e:2a:94:df:c5:72:2f:4b:1b:8d:11:f9:9b:1e:8c:8f:c7:
73:01:85:cf:41:80:e2:cb:8d:45:de:19:2e:f0:c7:97:70:d3:
5a:99:8e:37:d3:2d:0c:fc:f2:59:c3:20:11:39:f1:48:c0:62:
04:08:88:66:25:78:cd:85:f3:6d:84:82:e7:41:d4:89:79:ff:
a9:97:49:6c:0b:83:10:f2:d1:cf:98:a9:e8:8b:b1:cc:93:22:
0a:f5:08:e8:5a:c4:97:59:9c:fe:56:f3:77:bc:f5:0b:80:ec:
be:0b:90:ce:43:20:e7:86:0d:22:df:e8:4a:e4:af:1a:6c:a2:
f0:fe:da:5d:48:f0:65:dd:4a:36:ef:92:10:4a:e4:3e:dc:07:
f4:f5:02:b9:3d:b6:77:bb:10:91:36:d2:4b:c9:d0:33:4e:13:
bb:4b:ff:13:e4:43:a1:cc:3b:2e:fa:fe:94:d4:95:96:cc:4e:
64:1b:bd:5a:66:7c:1d:8f:56:3b:2c:f6:ec:de:4c:02:b4:91:
08:27:ff:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1mq8fAqho5VG87sMY+ao5aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDA3MDY0MDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmI5MjRlNDdkMzkxNzViODZkMTk1OTg2YjUzMTA5NDE2NDFlNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TwIhdiALfrwt2xWDMu9kgAK4DY+
KTUEzAUJf+rOsYmtEGz1ZLYOFO16J3P3yHwlJlYznksku7Ppue0Ap0vrSagV2p4R
QvwZKcbPoP9E/VG+B7eIuyn79liFUxLbhV2ur4LJm+ug94sM0FviSW4zT51/PWWD
hXbjLyFzWqeP6WIk5pEGLSEjz306OjxBX2+wRhGYd7qp0xluzXAvYHlljNxg+2Lk
dWcqg4bUA5rZbGAE3iohg/EBNtsS7Nxa4TJVwuUNDmv7bdUOtNKmsstdWFmVYj0k
mJmPphlngvwtl8C42M2xWqc4ftlOGKZdvdmvAQZVKW0KqOcp7mtPB79wRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMu5JOR9ORdbhtGVmGtTEJQWQeZ4MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveTdrazVIMDVGMXVHMFpXWWExTVFsQlpCNW5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/I5MA0G
CSqGSIb3DQEBCwUAA4IBAQB1+wc50h2EXqUhRA3QxujRc/u1pZUkBFUvJTsTzFkd
5rfWm+FLrwEhZs6FxHH7Ah/n1MQUPavNDiqU38VyL0sbjRH5mx6Mj8dzAYXPQYDi
y41F3hku8MeXcNNamY430y0M/PJZwyAROfFIwGIECIhmJXjNhfNthILnQdSJef+p
l0lsC4MQ8tHPmKnoi7HMkyIK9QjoWsSXWZz+VvN3vPULgOy+C5DOQyDnhg0i3+hK
5K8abKLw/tpdSPBl3Uo275IQSuQ+3Af09QK5PbZ3uxCRNtJLydAzThO7S/8T5EOh
zDsu+v6U1JWWzE5kG71aZnwdj1Y7LPbs3kwCtJEIJ/9j
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:31:23 2026 by rpki-client