Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/L8Slli334eo6YprtoGz3opSMBfo.roa
File: L8Slli334eo6YprtoGz3opSMBfo.roa (raw, json)
Hash identifier: VpnCurlBt66oP+46I0+rMm2pae0P/l1+xCnoGTzw334=
Subject key identifier: 2F:C4:A5:96:2D:F7:E1:EA:3A:62:9A:ED:A0:6C:F7:A2:94:8C:05:FA
Certificate issuer: /CN=70bf553042f1a43827dc034500bbd1068a7297ca
Certificate serial: 019D0B411C5B67C8E826720BC7B4722D5F82
Authority key identifier: 70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/L8Slli334eo6YprtoGz3opSMBfo.roa
Signing time: Fri 20 Mar 2026 12:38:29 +0000
ROA not before: Fri 20 Mar 2026 12:38:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 272096
IP address blocks: 149.174.0.0/24 maxlen: 24
149.174.1.0/24 maxlen: 24
149.174.2.0/24 maxlen: 24
149.174.3.0/24 maxlen: 24
149.174.4.0/24 maxlen: 24
149.174.5.0/24 maxlen: 24
149.174.6.0/24 maxlen: 24
149.174.7.0/24 maxlen: 24
149.174.8.0/24 maxlen: 24
149.174.9.0/24 maxlen: 24
149.174.10.0/24 maxlen: 24
149.174.11.0/24 maxlen: 24
149.174.12.0/24 maxlen: 24
149.174.13.0/24 maxlen: 24
149.174.14.0/24 maxlen: 24
149.174.15.0/24 maxlen: 24
149.174.16.0/24 maxlen: 24
149.174.17.0/24 maxlen: 24
149.174.18.0/24 maxlen: 24
149.174.19.0/24 maxlen: 24
149.174.20.0/24 maxlen: 24
149.174.21.0/24 maxlen: 24
149.174.22.0/24 maxlen: 24
149.174.23.0/24 maxlen: 24
149.174.24.0/24 maxlen: 24
149.174.25.0/24 maxlen: 24
149.174.26.0/24 maxlen: 24
149.174.27.0/24 maxlen: 24
149.174.28.0/24 maxlen: 24
149.174.29.0/24 maxlen: 24
149.174.30.0/24 maxlen: 24
149.174.31.0/24 maxlen: 24
149.174.32.0/24 maxlen: 24
149.174.33.0/24 maxlen: 24
149.174.34.0/24 maxlen: 24
149.174.35.0/24 maxlen: 24
149.174.36.0/24 maxlen: 24
149.174.37.0/24 maxlen: 24
149.174.38.0/24 maxlen: 24
149.174.39.0/24 maxlen: 24
149.174.40.0/24 maxlen: 24
149.174.41.0/24 maxlen: 24
149.174.42.0/24 maxlen: 24
149.174.43.0/24 maxlen: 24
149.174.44.0/24 maxlen: 24
149.174.45.0/24 maxlen: 24
149.174.46.0/24 maxlen: 24
149.174.47.0/24 maxlen: 24
149.174.48.0/24 maxlen: 24
149.174.49.0/24 maxlen: 24
149.174.50.0/24 maxlen: 24
149.174.51.0/24 maxlen: 24
149.174.52.0/24 maxlen: 24
149.174.53.0/24 maxlen: 24
149.174.54.0/24 maxlen: 24
149.174.55.0/24 maxlen: 24
149.174.56.0/24 maxlen: 24
149.174.57.0/24 maxlen: 24
149.174.58.0/24 maxlen: 24
149.174.59.0/24 maxlen: 24
149.174.60.0/24 maxlen: 24
149.174.61.0/24 maxlen: 24
149.174.62.0/24 maxlen: 24
149.174.63.0/24 maxlen: 24
149.174.64.0/24 maxlen: 24
149.174.65.0/24 maxlen: 24
149.174.66.0/24 maxlen: 24
149.174.67.0/24 maxlen: 24
149.174.68.0/24 maxlen: 24
149.174.69.0/24 maxlen: 24
149.174.70.0/24 maxlen: 24
149.174.71.0/24 maxlen: 24
149.174.72.0/24 maxlen: 24
149.174.73.0/24 maxlen: 24
149.174.74.0/24 maxlen: 24
149.174.75.0/24 maxlen: 24
149.174.76.0/24 maxlen: 24
149.174.77.0/24 maxlen: 24
149.174.78.0/24 maxlen: 24
149.174.79.0/24 maxlen: 24
149.174.80.0/24 maxlen: 24
149.174.81.0/24 maxlen: 24
149.174.82.0/24 maxlen: 24
149.174.83.0/24 maxlen: 24
149.174.84.0/24 maxlen: 24
149.174.85.0/24 maxlen: 24
149.174.86.0/24 maxlen: 24
149.174.87.0/24 maxlen: 24
149.174.88.0/24 maxlen: 24
149.174.89.0/24 maxlen: 24
149.174.90.0/24 maxlen: 24
149.174.91.0/24 maxlen: 24
149.174.92.0/24 maxlen: 24
149.174.93.0/24 maxlen: 24
149.174.94.0/24 maxlen: 24
149.174.95.0/24 maxlen: 24
149.174.96.0/24 maxlen: 24
149.174.97.0/24 maxlen: 24
149.174.98.0/24 maxlen: 24
149.174.99.0/24 maxlen: 24
149.174.100.0/24 maxlen: 24
149.174.101.0/24 maxlen: 24
149.174.102.0/24 maxlen: 24
149.174.103.0/24 maxlen: 24
149.174.104.0/24 maxlen: 24
149.174.105.0/24 maxlen: 24
149.174.106.0/24 maxlen: 24
149.174.107.0/24 maxlen: 24
149.174.108.0/24 maxlen: 24
149.174.109.0/24 maxlen: 24
149.174.110.0/24 maxlen: 24
149.174.111.0/24 maxlen: 24
149.174.112.0/24 maxlen: 24
149.174.113.0/24 maxlen: 24
149.174.114.0/24 maxlen: 24
149.174.115.0/24 maxlen: 24
149.174.116.0/24 maxlen: 24
149.174.117.0/24 maxlen: 24
149.174.118.0/24 maxlen: 24
149.174.119.0/24 maxlen: 24
149.174.120.0/24 maxlen: 24
149.174.121.0/24 maxlen: 24
149.174.122.0/24 maxlen: 24
149.174.123.0/24 maxlen: 24
149.174.124.0/24 maxlen: 24
149.174.125.0/24 maxlen: 24
149.174.126.0/24 maxlen: 24
149.174.127.0/24 maxlen: 24
149.174.128.0/24 maxlen: 24
149.174.129.0/24 maxlen: 24
149.174.130.0/24 maxlen: 24
149.174.131.0/24 maxlen: 24
149.174.132.0/24 maxlen: 24
149.174.133.0/24 maxlen: 24
149.174.134.0/24 maxlen: 24
149.174.135.0/24 maxlen: 24
149.174.136.0/24 maxlen: 24
149.174.137.0/24 maxlen: 24
149.174.138.0/24 maxlen: 24
149.174.139.0/24 maxlen: 24
149.174.140.0/24 maxlen: 24
149.174.141.0/24 maxlen: 24
149.174.142.0/24 maxlen: 24
149.174.143.0/24 maxlen: 24
149.174.144.0/24 maxlen: 24
149.174.145.0/24 maxlen: 24
149.174.146.0/24 maxlen: 24
149.174.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:41:1c:5b:67:c8:e8:26:72:0b:c7:b4:72:2d:5f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bf553042f1a43827dc034500bbd1068a7297ca
Validity
Not Before: Mar 20 12:38:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2fc4a5962df7e1ea3a629aeda06cf7a2948c05fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:1c:26:c7:ad:91:74:d1:47:90:b5:f2:8b:
68:a3:22:60:5c:9d:b9:62:94:32:10:2d:ea:ca:41:
bd:a4:9f:c8:15:39:d3:7a:aa:d9:6b:bd:c8:71:9a:
13:99:40:c4:9e:fe:93:66:5a:0c:ee:c6:d1:24:0e:
75:80:99:a1:41:de:94:78:ba:fd:b7:7e:81:f4:5a:
30:19:a1:09:57:57:86:82:a8:05:24:b0:ae:43:60:
d0:c7:e8:a0:79:fb:13:06:b1:0d:16:cf:1f:6a:aa:
26:88:66:44:5a:a2:bd:ce:c2:2f:53:92:8f:de:95:
2e:04:a9:4d:a0:7d:94:64:a3:a2:c2:1f:9f:ad:90:
15:e8:09:4e:78:f6:b7:df:1a:67:68:40:56:ad:a9:
74:65:ce:5c:04:9b:ce:22:61:58:60:39:6b:7c:70:
04:11:b3:fc:79:95:5d:dd:6c:6e:16:d2:c2:80:01:
94:e9:ef:27:c1:17:f2:fc:91:40:af:c2:ab:0f:82:
83:c0:88:4a:7c:e2:2d:9c:76:7e:18:aa:00:b3:23:
8a:f9:ce:44:1f:17:c9:f5:49:99:2f:55:b3:33:ba:
60:98:62:84:89:69:5f:0d:cd:e0:7c:8b:3f:03:f4:
68:14:d8:46:33:64:79:c5:3d:e8:fd:03:3a:ef:13:
60:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C4:A5:96:2D:F7:E1:EA:3A:62:9A:ED:A0:6C:F7:A2:94:8C:05:FA
X509v3 Authority Key Identifier:
keyid:70:BF:55:30:42:F1:A4:38:27:DC:03:45:00:BB:D1:06:8A:72:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cL9VMELxpDgn3ANFALvRBopyl8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/L8Slli334eo6YprtoGz3opSMBfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/df7944-2589-47cb-ab56-5358401fb796/1/cL9VMELxpDgn3ANFALvRBopyl8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.174.0.0-149.174.147.255
Signature Algorithm: sha256WithRSAEncryption
0f:bd:d4:6b:4d:00:f3:82:a5:df:60:23:51:b4:9b:15:fe:b0:
47:c8:fc:02:6e:f0:b6:a8:3b:d2:43:fd:98:55:ac:d3:fe:f3:
3c:89:57:f6:c8:bd:3a:e7:8b:df:ed:1e:42:d5:ca:fc:de:7e:
f0:f1:a1:73:78:fe:5e:1a:ad:b0:4c:33:7c:15:c1:a2:a4:68:
34:be:6b:70:28:cf:bc:ee:6e:54:9b:ad:dd:0a:f5:84:e7:c6:
d5:83:b8:4e:2e:86:22:9c:0b:1b:93:4c:5d:77:71:da:74:d1:
3f:ba:f0:d1:06:5a:4a:2d:95:96:13:56:e0:03:df:40:0b:e7:
07:b8:b5:b9:17:02:23:59:de:2f:88:be:f0:a5:d8:ac:d9:c5:
1b:ed:f4:c1:86:4f:36:67:67:d2:fc:d5:50:45:ce:0a:d9:de:
17:a9:07:80:99:99:d3:1f:87:7a:56:db:61:21:59:fd:64:f8:
0b:12:ab:06:1f:09:e4:93:ae:09:a6:88:2f:77:9a:6f:10:a1:
1d:23:69:b3:5e:12:d1:1d:e0:c3:11:a7:1f:31:c1:a3:27:da:
34:68:fc:8b:31:6f:9d:5a:eb:ed:ec:ab:5c:90:28:13:4d:94:
5f:0e:18:22:b1:14:86:54:7b:87:ab:64:0b:b4:1d:df:2e:a6:
2a:e1:09:a7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ0LQRxbZ8joJnILx7RyLV+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwYmY1NTMwNDJmMWE0MzgyN2RjMDM0NTAwYmJkMTA2OGE3
Mjk3Y2EwHhcNMjYwMzIwMTIzODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmM0YTU5NjJkZjdlMWVhM2E2MjlhZWRhMDZjZjdhMjk0OGMwNWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAld0cJsetkXTRR5C18otooyJgXJ25
YpQyEC3qykG9pJ/IFTnTeqrZa73IcZoTmUDEnv6TZloM7sbRJA51gJmhQd6UeLr9
t36B9FowGaEJV1eGgqgFJLCuQ2DQx+igefsTBrENFs8faqomiGZEWqK9zsIvU5KP
3pUuBKlNoH2UZKOiwh+frZAV6AlOePa33xpnaEBWral0Zc5cBJvOImFYYDlrfHAE
EbP8eZVd3WxuFtLCgAGU6e8nwRfy/JFAr8KrD4KDwIhKfOItnHZ+GKoAsyOK+c5E
HxfJ9UmZL1WzM7pgmGKEiWlfDc3gfIs/A/RoFNhGM2R5xT3o/QM67xNgRwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFC/EpZYt9+HqOmKa7aBs96KUjAX6MB8GA1UdIwQY
MBaAFHC/VTBC8aQ4J9wDRQC70QaKcpfKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYt
NTM1ODQwMWZiNzk2LzEvTDhTbGxpMzM0ZW82WXBydG9HejNvcFNNQmZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZjc5NDQtMjU4OS00N2NiLWFiNTYtNTM1ODQwMWZiNzk2
LzEvY0w5Vk1FTHhwRGduM0FORkFMdlJCb3B5bDhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCYGCCsGAQUFBwEHAQH/BBcwFTATBAIAATANMAsDAwGVrgME
ApWukDANBgkqhkiG9w0BAQsFAAOCAQEAD73Ua00A84Kl32AjUbSbFf6wR8j8Am7w
tqg70kP9mFWs0/7zPIlX9si9OueL3+0eQtXK/N5+8PGhc3j+XhqtsEwzfBXBoqRo
NL5rcCjPvO5uVJut3Qr1hOfG1YO4Ti6GIpwLG5NMXXdx2nTRP7rw0QZaSi2VlhNW
4APfQAvnB7i1uRcCI1neL4i+8KXYrNnFG+30wYZPNmdn0vzVUEXOCtneF6kHgJmZ
0x+HelbbYSFZ/WT4CxKrBh8J5JOuCaaIL3eabxChHSNps14S0R3gwxGnHzHBoyfa
NGj8izFvnVrr7eyrXJAoE02UXw4YIrEUhlR7h6tkC7Qd3y6mKuEJpw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:36:44 2026 by rpki-client