Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LEr8tfOksTqnQriHiIQ9fVSuNSk.roa
File: LEr8tfOksTqnQriHiIQ9fVSuNSk.roa (raw, json)
Hash identifier: BHB59pbzeMdn5xn2BfZKL/HU/VSb1PxlXhtnEX8NYK4=
Subject key identifier: 2C:4A:FC:B5:F3:A4:B1:3A:A7:42:B8:87:88:84:3D:7D:54:AE:35:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DDA3F3BE9301B0E4DBDEFFF05DD1E3633
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LEr8tfOksTqnQriHiIQ9fVSuNSk.roa
Signing time: Wed 29 Apr 2026 17:17:50 +0000
ROA not before: Wed 29 Apr 2026 17:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46475
IP address blocks: 151.241.208.0/24 maxlen: 24
151.243.116.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:3f:3b:e9:30:1b:0e:4d:bd:ef:ff:05:dd:1e:36:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 29 17:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c4afcb5f3a4b13aa742b88788843d7d54ae3529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:8f:29:96:dd:bd:71:2c:f9:b9:10:40:50:
4e:7f:a1:05:c6:98:2b:7c:73:87:1d:3e:c1:19:9c:
5b:3d:8c:b9:cf:85:80:d2:0e:94:f9:5c:62:61:20:
ae:f2:54:a9:81:12:a8:01:f7:39:9c:60:de:47:fe:
c5:83:da:00:5f:25:c8:0f:68:9a:8b:ed:d4:7b:cd:
96:31:fa:d3:0c:af:9a:0d:f0:68:ff:7c:5d:b4:3f:
5d:17:ec:d0:fe:4b:f1:37:79:77:c7:e7:94:f2:02:
0d:0a:80:a0:7b:21:d2:69:bc:ca:df:4c:3c:2f:11:
b6:97:b0:4c:60:a3:dd:28:41:b5:4d:31:4c:ec:d3:
eb:9a:5e:f0:9e:ec:87:ed:65:7c:be:c8:f4:5e:54:
47:1e:8a:af:75:8b:b1:54:99:fb:a8:19:e9:ec:e2:
74:aa:27:c1:64:1f:44:4f:64:b2:01:99:b9:d7:dc:
c2:7f:d0:0b:ed:a5:7b:7a:6b:eb:a3:66:75:e3:0b:
77:73:4c:e4:db:94:9c:64:2b:16:23:a7:89:dd:05:
b2:44:5e:3c:43:65:18:b8:4b:46:1a:f3:66:bc:da:
9c:80:70:e1:f9:e0:c7:46:a4:07:7c:a5:df:21:af:
63:f9:5f:53:ba:93:d0:38:0c:43:79:ae:8e:23:98:
96:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:FC:B5:F3:A4:B1:3A:A7:42:B8:87:88:84:3D:7D:54:AE:35:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LEr8tfOksTqnQriHiIQ9fVSuNSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.208.0/24
151.243.116.0/24
151.245.127.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b2:7a:64:f2:74:ed:13:d8:c1:8a:b3:ac:55:29:3e:15:34:
45:75:8f:b2:0d:f2:ee:77:37:e3:f3:e7:c9:14:06:03:21:92:
dc:98:2f:be:0a:83:54:7d:ab:5b:18:b4:15:3c:39:c3:d1:89:
67:a3:61:01:39:45:77:7e:1c:00:16:4b:5c:62:fe:23:cb:6d:
c5:46:7e:74:65:2e:5b:72:91:0f:87:52:43:ff:2c:a6:8c:32:
e2:0d:d8:8b:b6:d9:78:81:8d:f9:22:16:f4:d9:a7:c0:9d:f8:
1d:1d:b2:7d:da:dd:1f:6e:02:8e:6f:5d:15:9a:e8:b7:fb:91:
5b:3f:ca:c5:b9:e1:23:0e:c8:4e:af:f9:78:1d:14:a5:30:b4:
24:e9:40:13:7d:dd:84:66:f8:ee:70:fc:16:5f:ff:36:fa:3c:
d7:0a:e0:0a:b8:f2:4b:44:01:d1:13:4e:29:b5:8e:62:7c:3e:
fc:80:93:fb:57:1c:a8:9a:60:d1:96:17:4c:49:20:5f:b4:13:
d1:17:0f:67:9c:53:a3:52:ac:7a:8a:25:f8:eb:6f:ba:1c:1d:
67:ef:b4:6c:7e:79:d6:74:40:a9:99:b7:a4:1f:1b:22:45:99:
3c:ff:ea:bc:72:0d:39:50:d4:cc:b6:7c:d4:71:74:d0:ca:31:
59:63:f8:72
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ3aPzvpMBsOTb3v/wXdHjYzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDI5MTcxNzUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYzRhZmNiNWYzYTRiMTNhYTc0MmI4ODc4ODg0M2Q3ZDU0YWUzNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3g+PKZbdvXEs+bkQQFBOf6EFxpgr
fHOHHT7BGZxbPYy5z4WA0g6U+VxiYSCu8lSpgRKoAfc5nGDeR/7Fg9oAXyXID2ia
i+3Ue82WMfrTDK+aDfBo/3xdtD9dF+zQ/kvxN3l3x+eU8gINCoCgeyHSabzK30w8
LxG2l7BMYKPdKEG1TTFM7NPrml7wnuyH7WV8vsj0XlRHHoqvdYuxVJn7qBnp7OJ0
qifBZB9ET2SyAZm519zCf9AL7aV7emvro2Z14wt3c0zk25ScZCsWI6eJ3QWyRF48
Q2UYuEtGGvNmvNqcgHDh+eDHRqQHfKXfIa9j+V9TupPQOAxDea6OI5iWEQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFCxK/LXzpLE6p0K4h4iEPX1UrjUpMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTEVyOHRmT2tzVHFuUXJpSGlJUTlmVlN1TlNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/HQAwQA
l/N0AwQAl/V/MA0GCSqGSIb3DQEBCwUAA4IBAQBUsnpk8nTtE9jBirOsVSk+FTRF
dY+yDfLudzfj8+fJFAYDIZLcmC++CoNUfatbGLQVPDnD0Ylno2EBOUV3fhwAFktc
Yv4jy23FRn50ZS5bcpEPh1JD/yymjDLiDdiLttl4gY35Ihb02afAnfgdHbJ92t0f
bgKOb10Vmui3+5FbP8rFueEjDshOr/l4HRSlMLQk6UATfd2EZvjucPwWX/82+jzX
CuAKuPJLRAHRE04ptY5ifD78gJP7VxyommDRlhdMSSBftBPRFw9nnFOjUqx6iiX4
62+6HB1n77RsfnnWdECpmbekHxsiRZk8/+q8cg05UNTMtnzUcXTQyjFZY/hy
-----END CERTIFICATE-----
Generated at Wed May 13 04:54:51 2026 by rpki-client