Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yDg0Yj_LB88VY8JxgxkP8IhPP_Y.roa
File: yDg0Yj_LB88VY8JxgxkP8IhPP_Y.roa (raw, json)
Hash identifier: 3E0fB9GKCHXDZn5LlwMSv3DVEZgINg+Hcgugw5DiFKM=
Subject key identifier: C8:38:34:62:3F:CB:07:CF:15:63:C2:71:83:19:0F:F0:88:4F:3F:F6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7FF2A4B9E0A86F2AF7DC14CE96B8AA47
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yDg0Yj_LB88VY8JxgxkP8IhPP_Y.roa
Signing time: Sun 12 Apr 2026 04:28:21 +0000
ROA not before: Sun 12 Apr 2026 04:28:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 37.202.206.0/24 maxlen: 24
151.242.49.0/24 maxlen: 24
151.243.64.0/20 maxlen: 24
151.243.97.0/24 maxlen: 24
151.243.106.0/24 maxlen: 24
151.245.18.0/24 maxlen: 24
151.245.144.0/24 maxlen: 24
151.245.174.0/24 maxlen: 24
151.247.18.0/24 maxlen: 24
151.247.20.0/24 maxlen: 24
151.247.225.0/24 maxlen: 24
151.247.226.0/24 maxlen: 24
151.247.232.0/24 maxlen: 24
151.247.233.0/24 maxlen: 24
151.247.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7f:f2:a4:b9:e0:a8:6f:2a:f7:dc:14:ce:96:b8:aa:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 12 04:28:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c83834623fcb07cf1563c27183190ff0884f3ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:52:79:f1:a2:d3:bb:cb:0d:b4:08:c5:bb:0c:
f1:17:f3:61:b7:68:c0:f5:c9:aa:0a:d4:d0:cf:d8:
09:38:5e:0b:39:2e:51:86:7d:e0:53:d6:73:dc:63:
50:ed:b1:4f:79:10:d3:67:18:f6:b6:d2:89:c7:96:
f2:f2:90:08:95:3c:43:ee:34:fb:45:70:4b:74:51:
cf:02:97:6a:ba:8b:02:ef:40:23:88:69:70:3b:38:
8b:c5:d8:85:90:97:d9:87:8d:91:15:5e:87:d1:6a:
9a:9d:c4:45:fe:34:cf:dd:8b:85:af:19:85:bb:6d:
44:1a:dc:73:0c:c5:1a:e2:9d:69:d8:84:cf:18:3a:
bd:f3:93:77:9c:ed:f1:c7:a5:96:2d:69:d5:a7:30:
9c:31:5c:83:bf:80:be:e0:74:e6:96:3f:f6:78:20:
0d:db:89:e7:a0:57:0a:4f:e5:7d:af:88:ec:d3:c2:
89:c9:07:52:00:18:f0:0b:34:3e:6f:7f:a7:26:c4:
89:f1:dc:2c:29:55:c9:18:db:1b:3d:51:aa:ab:31:
40:36:70:0b:a3:ca:2b:99:ea:53:bf:b4:97:bb:b8:
83:4a:ad:bd:68:ff:92:67:6f:10:50:d1:37:64:30:
73:b4:1b:bf:32:65:61:23:f0:bf:58:c2:88:8c:9b:
d4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:38:34:62:3F:CB:07:CF:15:63:C2:71:83:19:0F:F0:88:4F:3F:F6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yDg0Yj_LB88VY8JxgxkP8IhPP_Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.206.0/24
151.242.49.0/24
151.243.64.0/20
151.243.97.0/24
151.243.106.0/24
151.245.18.0/24
151.245.144.0/24
151.245.174.0/24
151.247.18.0/24
151.247.20.0/24
151.247.225.0-151.247.226.255
151.247.232.0/23
151.247.239.0/24
Signature Algorithm: sha256WithRSAEncryption
82:7c:77:89:2a:af:4f:57:f8:88:a7:22:00:12:6a:2a:30:b5:
8b:0c:8f:7c:84:fa:d5:b6:ad:fa:bb:b5:a9:c3:14:9b:ab:92:
c3:45:80:78:81:52:37:cf:db:a5:22:66:6a:97:14:0a:0a:78:
e6:dd:63:44:62:be:93:21:15:ed:e8:fe:0c:ba:d1:b5:4d:86:
69:45:26:f2:52:81:92:e5:3d:8d:84:74:51:af:dd:5f:27:3a:
8c:27:ee:22:db:d6:71:be:50:1f:0a:b6:34:99:04:7c:bc:92:
a7:22:e3:63:90:a6:6a:fb:81:b7:3d:ee:5f:d5:65:47:e1:17:
fd:f1:57:de:a1:ec:d6:bc:dd:34:80:4b:08:38:6a:d8:6e:9e:
f5:be:9d:40:c7:3e:33:12:10:a3:0d:c4:7c:ad:fe:88:41:7e:
d0:0f:35:8c:1c:34:e1:fe:3f:5a:1f:33:70:69:1c:43:48:24:
ee:7e:da:dd:e4:91:61:02:fc:c7:ce:17:e8:62:d6:84:91:95:
78:75:60:15:23:f9:03:5e:9a:21:2f:11:ee:e8:2d:68:9a:e5:
c6:e5:ba:75:fa:fd:5f:a5:25:30:c8:de:14:87:da:a9:10:ec:
16:ab:4f:3d:8a:07:42:50:07:24:6b:19:d6:59:4c:13:be:70:
19:f6:73:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:13:08 2026 by rpki-client