Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_DY29IN1lyF7d3249LLpZOy4Ag.roa
File: y_DY29IN1lyF7d3249LLpZOy4Ag.roa (raw, json)
Hash identifier: 0kc5d68l8RRinlX4Olmp5jLyQK6CT71x3gHPoNd2jjs=
Subject key identifier: CB:F0:D8:DB:D2:0D:D6:5C:85:ED:DD:F6:E3:D2:CB:A5:93:B2:E0:08
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D4CC935115634FEDE1F949B90405090CD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_DY29IN1lyF7d3249LLpZOy4Ag.roa
Signing time: Thu 02 Apr 2026 06:02:27 +0000
ROA not before: Thu 02 Apr 2026 06:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213736
IP address blocks: 151.242.245.0/24 maxlen: 24
151.242.246.0/24 maxlen: 24
151.242.247.0/24 maxlen: 24
151.242.248.0/24 maxlen: 24
151.242.249.0/24 maxlen: 24
151.242.250.0/24 maxlen: 24
151.243.34.0/24 maxlen: 24
151.243.37.0/24 maxlen: 24
151.243.43.0/24 maxlen: 24
151.243.44.0/24 maxlen: 24
151.243.50.0/24 maxlen: 24
151.243.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4c:c9:35:11:56:34:fe:de:1f:94:9b:90:40:50:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 2 06:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cbf0d8dbd20dd65c85edddf6e3d2cba593b2e008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e1:e8:c3:31:27:7c:30:57:11:39:21:21:e2:
f8:a1:cf:af:a7:30:2a:48:24:e0:f9:d3:15:7e:24:
96:3f:df:64:f2:69:32:0c:5b:99:81:8b:1e:cf:f8:
47:ce:df:92:1d:09:df:cb:1a:b1:14:3c:e2:1a:ee:
db:23:07:ec:09:1e:e4:72:f6:d6:80:d5:b3:5e:dd:
2e:60:19:06:31:6d:83:b4:87:3e:51:6b:6d:03:e1:
ca:20:f1:71:04:2e:9f:57:e6:c9:26:09:9c:d1:71:
9c:1e:86:b3:fe:47:61:eb:86:ba:3f:b5:67:cc:aa:
a0:ba:0f:87:e4:65:ff:1e:b6:46:cd:18:27:0e:c1:
75:b4:4b:2d:b9:0d:6b:5a:a3:1e:de:7a:eb:b2:05:
6d:b6:9f:ab:15:ee:33:8d:c5:e6:20:55:66:d3:77:
6d:54:ea:cd:c5:67:24:b3:d8:ca:0c:91:af:c9:51:
61:41:9a:1f:d0:e9:45:fe:4a:7b:19:46:ca:9c:11:
2a:11:8f:94:84:c9:61:aa:83:1f:29:8b:a7:0b:73:
85:2e:a5:ec:ee:36:41:3f:87:e7:e4:48:b0:4d:3f:
a4:df:90:06:97:fb:cd:54:09:0e:21:6c:8b:7f:55:
42:35:07:46:b8:89:c0:66:9c:aa:2a:c7:19:16:d1:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F0:D8:DB:D2:0D:D6:5C:85:ED:DD:F6:E3:D2:CB:A5:93:B2:E0:08
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/y_DY29IN1lyF7d3249LLpZOy4Ag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.245.0-151.242.250.255
151.243.34.0/24
151.243.37.0/24
151.243.43.0-151.243.44.255
151.243.50.0/24
151.243.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:75:32:00:a3:63:e9:bd:d3:09:73:42:62:ef:37:f2:fb:91:
77:31:49:48:ea:36:39:7e:6f:be:9b:57:8a:56:78:72:a5:88:
2f:9d:ac:79:99:a1:c0:28:4c:8a:43:46:8d:51:17:87:e6:15:
43:66:75:5c:29:f2:79:be:ad:1c:de:85:3d:32:6b:9a:8b:36:
15:85:57:4a:8a:8c:4d:43:eb:18:ef:b9:66:4b:72:52:00:6f:
d5:78:70:50:43:93:21:7a:6a:b9:b1:80:8a:c5:c6:2d:bb:25:
50:0a:70:62:0c:b4:1b:7e:6c:85:b3:45:30:9c:8b:65:22:33:
da:88:46:f4:8c:ed:6a:0d:6a:c8:a3:ba:14:db:3e:ed:0b:86:
51:3a:b3:f9:01:53:a1:ef:76:cf:2e:7b:a5:4a:8c:38:ac:bf:
3c:ce:ee:0f:97:7b:b4:63:64:48:ab:6e:f6:57:33:f1:6c:6c:
4c:96:5b:fb:0f:ca:f9:6e:4f:92:3e:19:2f:97:07:84:a8:4e:
2d:7f:ed:1f:17:f9:7b:a5:50:be:1c:5e:fc:d2:c0:72:cc:e0:
49:77:95:57:ba:6c:8b:8a:5c:05:de:60:b9:0a:62:dc:c7:bb:
7c:d0:a9:d2:dc:91:8c:71:e8:f0:79:1e:32:df:63:a7:87:ed:
5b:a9:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:33:37 2026 by rpki-client