Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yhrt3rIY3euyVKeVlFh6QbfWoS4.roa
File: yhrt3rIY3euyVKeVlFh6QbfWoS4.roa (raw, json)
Hash identifier: +ayZkN21KL04pbd8PjhfhI3gEkn1NrIj6edTyInMWgM=
Subject key identifier: CA:1A:ED:DE:B2:18:DD:EB:B2:54:A7:95:94:58:7A:41:B7:D6:A1:2E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07F9F4FC940F80639DA4A3E2D547891D9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yhrt3rIY3euyVKeVlFh6QbfWoS4.roa
Signing time: Tue 08 Sep 2026 06:05:42 +0000
ROA not before: Tue 08 Sep 2026 06:05:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30088
IP address blocks: 151.242.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:9f:4f:c9:40:f8:06:39:da:4a:3e:2d:54:78:91:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 06:05:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca1aeddeb218ddebb254a79594587a41b7d6a12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7a:d3:03:56:ca:b0:4e:1d:bd:47:89:3b:01:
82:4c:5c:d6:08:ad:82:57:54:6f:93:5b:13:c8:ed:
87:a7:fc:be:2e:48:53:fd:97:06:c6:4e:c8:45:f4:
31:d8:52:9a:a6:58:94:04:d0:c4:f1:d6:fe:c3:3f:
35:21:2f:7e:83:50:01:bf:51:9e:99:8f:9c:e7:28:
92:7b:60:b0:12:35:67:80:bd:5b:03:c1:5d:07:f4:
24:78:ee:42:01:11:51:0d:2e:52:cd:3f:df:3c:39:
b9:c2:c0:24:34:58:d1:13:6c:87:87:b5:8c:00:28:
2c:7f:da:58:77:4e:83:eb:4d:7a:35:8a:0d:e3:f8:
47:e0:30:5f:4d:87:e7:92:02:13:43:cc:07:cd:6a:
2c:4a:43:d4:5f:ea:01:e7:3e:ec:6c:df:ab:4a:f8:
54:eb:35:87:f4:19:37:78:52:57:26:a1:fe:80:a4:
8e:79:5f:52:25:8b:78:3e:c3:2c:db:a7:19:fc:c6:
90:db:32:7c:ca:02:0b:0f:89:8b:19:66:29:80:57:
71:27:42:2b:59:12:26:3c:b7:69:41:3b:6d:b9:ce:
d1:44:7f:32:6a:cc:dd:45:16:00:8e:2c:3a:3c:0d:
96:c2:1f:7e:67:22:5c:74:38:2e:07:34:95:60:06:
29:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1A:ED:DE:B2:18:DD:EB:B2:54:A7:95:94:58:7A:41:B7:D6:A1:2E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yhrt3rIY3euyVKeVlFh6QbfWoS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.31.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:c9:25:10:46:f9:3b:76:3d:25:6b:d7:a4:44:0e:61:43:16:
44:af:b2:49:ca:da:93:2a:d9:b6:47:ae:7c:37:09:34:7a:0c:
85:cd:08:a8:f3:0c:d0:66:98:e5:f4:08:0f:72:a7:8f:04:0c:
49:fd:c3:d7:2d:35:75:b7:86:ff:88:15:a5:12:35:00:6c:54:
46:9e:75:57:51:b4:e4:e8:01:d8:61:06:51:64:2b:3e:cd:69:
a0:70:4a:0e:d5:84:47:23:ec:07:4d:fb:38:4f:91:c7:9d:50:
6f:0d:3f:ff:a8:04:8e:a5:ea:85:8b:67:91:32:50:88:69:ca:
23:b0:03:d4:5e:e5:58:c5:7e:c6:c2:c1:78:25:e8:d7:20:40:
36:ed:02:10:47:f1:f4:b7:10:a4:03:33:0c:4f:cf:a1:24:e4:
85:95:72:4e:9b:63:3d:aa:d9:50:69:7b:50:e1:19:6c:68:19:
b6:44:b7:ea:8b:d2:7c:f1:7c:7f:87:c4:35:9d:5e:e1:80:74:
40:5b:77:e5:dc:1e:07:05:8c:79:20:87:93:72:9c:29:51:a1:
39:62:6d:8e:cc:a5:48:c2:87:66:25:ca:61:9f:26:9d:bb:0d:
75:66:74:58:45:02:78:85:59:dc:01:88:fd:23:7d:fd:92:dc:
5c:fe:5e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 08:27:34 2026 by rpki-client