Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d7lyxFFEafEG9IrFoDqnExHCUNs.roa
File: d7lyxFFEafEG9IrFoDqnExHCUNs.roa (raw, json)
Hash identifier: pGvC3zhUwaPJd7JSBw3U+rvFDZTrwKhc1+zjDZFNLOw=
Subject key identifier: 77:B9:72:C4:51:44:69:F1:06:F4:8A:C5:A0:3A:A7:13:11:C2:50:DB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DF3FE207F7FAF0272E003D8C81632B782
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d7lyxFFEafEG9IrFoDqnExHCUNs.roa
Signing time: Mon 04 May 2026 17:16:51 +0000
ROA not before: Mon 04 May 2026 17:16:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212980
IP address blocks: 151.245.214.0/23 maxlen: 23
151.246.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:fe:20:7f:7f:af:02:72:e0:03:d8:c8:16:32:b7:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 4 17:16:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=77b972c4514469f106f48ac5a03aa71311c250db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:52:0f:02:9e:10:d2:c6:0a:1e:6f:06:da:09:
44:de:d7:19:2e:2b:88:d6:74:f5:fd:94:cd:d0:33:
0e:f6:b3:83:85:da:cc:48:dc:88:30:b7:81:2e:81:
dd:e8:e9:d7:b6:85:2a:b5:46:8e:65:0e:c5:0c:8d:
3a:17:cb:51:87:f3:36:c7:82:9e:36:db:f8:e1:9f:
a8:6b:29:ba:ec:20:9d:49:02:cc:6f:54:be:82:50:
9e:95:63:de:5a:83:4c:7b:08:bf:d6:c8:60:a4:f3:
46:2c:9f:c8:b6:32:f4:af:11:d8:3b:a6:8d:25:b6:
84:ad:fd:88:32:d6:5c:1f:43:9f:18:03:a6:a2:91:
de:21:a9:2b:c5:95:de:82:ed:5d:d3:2e:69:9c:8e:
1c:30:71:0c:67:f6:1d:b6:d8:21:da:c3:48:3b:ce:
ee:31:59:11:55:2b:14:7c:1e:e8:af:4d:52:d0:31:
94:0e:bd:9f:71:f5:e8:0d:1b:91:b9:d1:ee:57:5a:
d2:d9:48:5f:17:be:5c:b9:18:1b:de:40:83:62:0e:
27:67:3a:58:f6:bd:0d:e9:0c:3b:62:9d:e2:84:e1:
7b:4f:7a:29:af:dd:e0:11:78:80:dd:49:dd:3d:90:
85:8e:34:ba:e1:e8:b5:08:8a:9d:54:96:ef:15:18:
ac:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B9:72:C4:51:44:69:F1:06:F4:8A:C5:A0:3A:A7:13:11:C2:50:DB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d7lyxFFEafEG9IrFoDqnExHCUNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.214.0/23
151.246.32.0/21
Signature Algorithm: sha256WithRSAEncryption
53:bc:9f:79:c6:65:59:c6:8b:59:5f:9c:24:3c:94:05:90:0f:
d2:4a:25:38:1c:8e:84:36:4b:73:36:ec:45:53:a3:a0:3b:d0:
ad:a6:d3:29:72:d1:54:c0:1e:e1:f1:08:f0:72:c4:f2:f8:ee:
22:99:13:17:d3:7f:8a:10:24:6e:d3:8b:ec:ea:3d:da:53:ba:
40:c2:3e:7a:68:e9:60:7d:44:6f:9a:97:55:4a:0b:ad:bb:f8:
29:92:97:19:54:ab:97:38:0a:dd:98:b3:a3:53:e0:80:17:3d:
b2:fd:c8:22:d0:da:2a:48:58:09:dc:db:a8:a4:d4:82:b0:f2:
fc:ea:b8:9c:e5:4e:48:6f:fd:e1:d8:70:58:25:8f:bc:5c:7c:
6d:df:95:3e:63:55:f7:9b:48:3c:f0:13:b4:e9:f3:24:a8:25:
14:14:25:5f:1d:54:cd:5e:5b:ba:c1:f8:3f:62:cb:1f:c0:07:
5f:09:47:e1:63:46:7b:85:31:dc:f1:46:59:6d:4b:fe:9f:0d:
a2:fc:ab:d5:30:da:c7:5d:ca:32:2f:be:47:f5:a0:95:30:f5:
e7:92:47:c3:8f:28:ff:3d:98:a0:ff:83:f6:81:58:62:56:be:
81:7c:d3:7a:75:d9:e2:41:b7:57:ef:bb:a4:65:20:40:67:e6:
36:35:ba:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ3z/iB/f68CcuAD2MgWMreCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTA0MTcxNjUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2I5NzJjNDUxNDQ2OWYxMDZmNDhhYzVhMDNhYTcxMzExYzI1MGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1IPAp4Q0sYKHm8G2glE3tcZLiuI
1nT1/ZTN0DMO9rODhdrMSNyIMLeBLoHd6OnXtoUqtUaOZQ7FDI06F8tRh/M2x4Ke
Ntv44Z+oaym67CCdSQLMb1S+glCelWPeWoNMewi/1shgpPNGLJ/ItjL0rxHYO6aN
JbaErf2IMtZcH0OfGAOmopHeIakrxZXegu1d0y5pnI4cMHEMZ/Ydttgh2sNIO87u
MVkRVSsUfB7or01S0DGUDr2fcfXoDRuRudHuV1rS2UhfF75cuRgb3kCDYg4nZzpY
9r0N6Qw7Yp3ihOF7T3opr93gEXiA3UndPZCFjjS64ei1CIqdVJbvFRisgwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHe5csRRRGnxBvSKxaA6pxMRwlDbMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZDdseXhGRkVhZkVHOUlyRm9EcW5FeEhDVU5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBl/XWAwQD
l/YgMA0GCSqGSIb3DQEBCwUAA4IBAQBTvJ95xmVZxotZX5wkPJQFkA/SSiU4HI6E
NktzNuxFU6OgO9CtptMpctFUwB7h8QjwcsTy+O4imRMX03+KECRu04vs6j3aU7pA
wj56aOlgfURvmpdVSgutu/gpkpcZVKuXOArdmLOjU+CAFz2y/cgi0NoqSFgJ3Nuo
pNSCsPL86ric5U5Ib/3h2HBYJY+8XHxt35U+Y1X3m0g88BO06fMkqCUUFCVfHVTN
Xlu6wfg/YssfwAdfCUfhY0Z7hTHc8UZZbUv+nw2i/KvVMNrHXcoyL75H9aCVMPXn
kkfDjyj/PZig/4P2gVhiVr6BfNN6ddniQbdX77ukZSBAZ+Y2Nboi
-----END CERTIFICATE-----
Generated at Wed May 13 00:34:13 2026 by rpki-client