Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LDt5LH17yXz9XdneqR9SCLbHuwM.roa
File: LDt5LH17yXz9XdneqR9SCLbHuwM.roa (raw, json)
Hash identifier: fDjMwHjN4SAtjk3mIPy02la2vAAG5IMH52VtnV0d+c4=
Subject key identifier: 2C:3B:79:2C:7D:7B:C9:7C:FD:5D:D9:DE:A9:1F:52:08:B6:C7:BB:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EBFCD73BBBC169A1A1030731E215806B3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LDt5LH17yXz9XdneqR9SCLbHuwM.roa
Signing time: Sat 13 Jun 2026 07:06:13 +0000
ROA not before: Sat 13 Jun 2026 07:06:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26739
IP address blocks: 151.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:cd:73:bb:bc:16:9a:1a:10:30:73:1e:21:58:06:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 13 07:06:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c3b792c7d7bc97cfd5dd9dea91f5208b6c7bb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:80:3a:82:a1:61:60:01:6a:d3:b6:01:33:
e6:76:d9:90:12:46:3a:5e:fc:43:0d:e4:34:86:7e:
3b:33:ec:a6:69:dd:a9:cf:b9:af:89:cf:7f:38:25:
88:15:82:f1:ea:99:69:3b:d2:17:c7:3e:8e:4a:3a:
7f:6f:9d:55:41:be:96:d0:3b:a9:dd:22:dd:5a:bc:
54:35:07:c6:72:fc:80:95:6a:6b:27:8d:4b:66:76:
43:cb:10:9b:90:d9:b5:0a:99:b6:fd:a4:71:3e:2c:
f6:19:91:16:26:3c:9d:92:e3:4c:ab:a5:e0:40:56:
e1:10:b5:8c:5b:dc:24:b7:ef:9f:fe:a7:08:36:9d:
66:60:be:ac:96:97:0d:1c:7f:50:87:27:1a:e3:af:
c8:54:97:01:24:32:36:cc:df:3e:ee:ce:bb:35:f1:
ec:41:66:ac:c0:fb:8e:31:a0:8e:70:39:e3:d3:8e:
60:71:11:77:66:b0:bd:b4:6c:5d:1c:ad:de:dd:79:
8e:c6:52:de:17:97:05:34:c8:30:04:96:d6:10:e9:
d1:88:52:9f:8d:4e:da:a4:d6:c7:e5:a0:64:fc:74:
77:e1:7b:61:95:cc:ca:ec:75:20:7b:7e:52:6f:62:
c5:65:89:a8:b6:43:10:fa:30:7c:4f:6a:0f:7c:b3:
01:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:79:2C:7D:7B:C9:7C:FD:5D:D9:DE:A9:1F:52:08:B6:C7:BB:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LDt5LH17yXz9XdneqR9SCLbHuwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
73:08:35:bb:19:48:48:62:1f:ca:34:b7:30:8e:18:98:1f:dc:
ea:9c:d9:76:98:9e:b9:ec:64:7a:2f:ec:47:5c:af:b1:64:3e:
4a:6c:dd:04:e9:08:d5:87:4b:6e:61:2d:c3:50:9d:98:6e:9b:
d7:db:bd:fe:1f:f9:8d:61:e5:ad:cc:b5:8e:8f:5d:1c:16:ed:
80:4b:00:a6:ce:c9:49:e3:97:74:07:70:57:86:3d:7c:1c:d0:
48:0d:ca:25:aa:c3:4d:00:ab:b6:76:a6:68:62:30:be:58:a9:
45:4c:20:0f:ad:80:d7:e8:16:19:45:d3:93:d1:63:71:7a:36:
f0:31:fb:b1:43:2d:eb:fd:9d:d4:bf:43:47:97:f6:57:3c:fc:
98:6e:2f:8f:af:b2:c6:27:3f:ad:79:63:48:3c:2b:7c:89:cd:
6e:ed:db:73:16:55:fb:38:e9:6b:92:8e:0d:8f:cb:01:49:4a:
0b:f1:90:0c:ac:ee:a3:0b:a9:3b:fe:ac:2f:ca:98:01:03:8e:
46:31:64:a5:25:c8:64:cf:bd:a1:e9:a9:62:d6:c4:3e:34:0d:
65:59:fc:f1:25:49:79:d1:1e:df:25:62:df:49:8f:21:a2:23:
fd:06:6e:10:b3:f0:ed:1e:40:07:cd:ae:2f:8c:c4:66:58:cd:
8b:07:f7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:07:37 2026 by rpki-client