Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yl6SQnLDdA5NZTD0DkkcNJG8A4U.roa
File: yl6SQnLDdA5NZTD0DkkcNJG8A4U.roa (raw, json)
Hash identifier: bX2nML+4PGcKcZbdF9KwR7lr3zechqS6WQJZc3Sg+F4=
Subject key identifier: CA:5E:92:42:72:C3:74:0E:4D:65:30:F4:0E:49:1C:34:91:BC:03:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D48DB08DF7ED6FDED51D556CB45BA966E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yl6SQnLDdA5NZTD0DkkcNJG8A4U.roa
Signing time: Wed 01 Apr 2026 11:43:27 +0000
ROA not before: Wed 01 Apr 2026 11:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395839
IP address blocks: 151.243.200.0/24 maxlen: 24
151.243.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:48:db:08:df:7e:d6:fd:ed:51:d5:56:cb:45:ba:96:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 1 11:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca5e924272c3740e4d6530f40e491c3491bc0385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cf:fd:92:be:2b:12:34:94:6e:bd:3b:2a:30:
62:66:ab:f8:06:43:f3:5f:f3:15:f0:26:1a:2c:2f:
de:6f:e9:66:55:75:77:36:15:fa:1e:56:9b:3a:c5:
75:6f:a6:8a:ce:0a:c5:4c:80:ba:30:48:c8:ca:e6:
b1:9c:5b:d4:61:98:78:d8:eb:5b:69:65:d6:f9:ed:
2a:52:65:fa:c5:a2:57:05:a4:d4:11:6c:be:4a:0c:
40:e3:ac:fb:72:df:c8:4b:cf:bc:2a:09:fb:46:04:
07:c8:3c:d2:57:36:43:5a:d7:0e:c1:95:52:ac:e7:
4f:f3:e7:79:25:96:b0:3c:94:f4:ac:b5:3d:ed:3c:
ac:87:1a:4b:b6:c7:59:65:e1:45:d2:ee:41:51:59:
ad:8a:b7:a9:3b:63:9e:74:40:94:c7:57:28:66:89:
ae:c6:66:c6:16:4f:5b:ab:a8:43:cc:d3:6f:1e:28:
05:36:82:7f:b1:32:4f:a2:ac:9d:30:13:67:4e:2c:
9e:45:26:0a:c3:0e:8e:ae:50:9d:23:7e:e5:e9:ae:
ba:b1:fd:5c:35:8e:ba:e1:ce:68:cf:60:66:2a:31:
00:51:1e:9c:02:02:e8:8a:49:b6:26:2b:d7:b7:ef:
ea:c0:b0:02:23:c5:43:2f:aa:c0:c6:65:c6:eb:75:
e8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:5E:92:42:72:C3:74:0E:4D:65:30:F4:0E:49:1C:34:91:BC:03:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yl6SQnLDdA5NZTD0DkkcNJG8A4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.200.0/24
151.243.207.0/24
Signature Algorithm: sha256WithRSAEncryption
01:38:0f:9e:19:86:5a:ee:b4:ac:a6:8d:cd:d3:03:05:65:6b:
f0:f9:6c:4f:17:f3:07:4b:1d:7e:b6:1d:b6:b0:ca:72:d1:e2:
a2:00:f0:ad:63:a3:ad:a5:65:5e:17:a8:92:28:43:1d:16:2e:
34:fa:6d:f4:55:df:0e:b8:86:fa:40:9d:02:9d:c6:d4:ee:b9:
bc:4a:3a:b0:28:f0:0a:ba:5d:54:9d:57:f3:62:fd:1b:c5:08:
cb:e9:e9:62:cb:12:03:ad:09:5a:0e:20:ae:7f:5c:e1:84:e1:
78:42:46:c9:5a:ce:e4:39:bf:7e:63:c6:98:59:f0:d9:1f:d8:
6c:f8:ca:cf:11:0c:09:15:6b:17:e4:2c:4c:ca:6a:69:08:80:
85:4a:ba:0e:2f:58:19:22:65:9d:9e:8d:c0:67:48:c2:9c:4c:
6f:68:62:d4:39:ea:d7:41:61:99:9c:77:9f:d0:c8:ef:86:a2:
25:a4:d9:70:ce:72:0c:db:41:96:56:c4:03:d5:50:81:ad:69:
9b:61:53:ee:d9:51:7a:30:22:a2:75:08:0f:95:23:30:53:12:
58:a5:f0:6f:53:0b:34:53:8a:e7:ff:cd:a2:63:fd:e8:b0:70:
eb:c5:cd:10:33:ac:56:f5:b5:1c:41:37:00:a5:57:bd:61:cb:
86:21:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:34:18 2026 by rpki-client