Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTDQr-aRnzSdSNtETp0BaCkUFbM.roa
File: lTDQr-aRnzSdSNtETp0BaCkUFbM.roa (raw, json)
Hash identifier: eJrEpYnGUHpEmnA+ic1a4hLD6sFAq66M2Y5N5QUDNqg=
Subject key identifier: 95:30:D0:AF:E6:91:9F:34:9D:48:DB:44:4E:9D:01:68:29:14:15:B3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C8FF98B1A62D4CDB71A3B36E00E5B907
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTDQr-aRnzSdSNtETp0BaCkUFbM.roa
Signing time: Tue 22 Sep 2026 12:03:08 +0000
ROA not before: Tue 22 Sep 2026 12:03:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209693
IP address blocks: 151.241.137.0/24 maxlen: 24
151.241.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:ff:98:b1:a6:2d:4c:db:71:a3:b3:6e:00:e5:b9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 12:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9530d0afe6919f349d48db444e9d0168291415b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:c6:0a:67:8a:74:27:86:94:c4:3b:75:6a:
a5:e0:5e:63:a3:20:38:40:f4:b6:69:7f:21:34:fb:
43:55:fd:d6:a3:f2:23:c2:b8:ad:36:08:60:4d:d4:
b4:e0:ff:e7:95:02:a1:37:b8:9d:fe:a2:60:bb:66:
fb:2f:85:92:87:81:1b:95:58:e6:41:eb:e7:a5:b6:
d2:9b:3d:cb:7d:4c:8a:2c:38:6a:c9:fa:b7:41:d0:
8b:92:67:e4:91:4f:d3:27:e6:99:e5:66:00:bd:e7:
44:c2:3f:5c:52:18:11:10:f0:60:20:32:49:5e:47:
3a:53:8a:9f:56:75:1b:71:33:06:ad:5f:cd:7a:2b:
7b:d4:6d:cc:8f:ae:50:99:b5:32:83:1a:c7:dc:40:
93:91:07:f4:b7:fe:a0:8d:13:b9:a2:33:2d:74:a7:
e6:37:33:3a:90:81:72:d7:48:6e:98:f0:d1:be:1f:
c6:0a:d7:6f:60:20:23:59:1e:99:08:91:d2:50:2f:
bd:9a:b2:3b:7c:00:00:08:ae:51:95:3b:7c:27:29:
0a:fd:9e:ad:c0:c5:1f:e1:e3:1d:0a:04:55:6a:61:
ff:e2:d0:69:26:f9:cc:d3:90:95:11:89:85:cf:0e:
92:ce:72:8d:9f:07:46:34:a1:80:cb:f0:15:5a:c5:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:30:D0:AF:E6:91:9F:34:9D:48:DB:44:4E:9D:01:68:29:14:15:B3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lTDQr-aRnzSdSNtETp0BaCkUFbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.137.0-151.241.138.255
Signature Algorithm: sha256WithRSAEncryption
40:0e:bb:59:76:cf:02:fc:8f:74:bb:10:b6:98:ad:07:a2:70:
0c:e0:f3:0c:29:7c:35:38:06:8e:f6:d9:e7:34:1b:f0:2b:96:
49:62:37:e8:8a:88:24:b0:93:2e:fa:f0:f2:59:9d:ba:62:1e:
52:87:38:92:aa:35:3c:e6:b8:ac:f7:e1:bd:a6:7b:8f:09:e1:
fb:95:61:eb:05:f4:a6:2b:b7:6d:2f:e7:1f:c4:e6:25:91:ea:
64:68:af:2c:ef:86:4b:ed:f4:89:6f:81:ee:16:30:b0:e3:0b:
33:64:69:5e:bf:80:9b:4a:67:d9:fd:d7:9a:60:38:85:9b:97:
b6:09:d1:34:32:ed:38:20:52:65:27:7b:74:f1:d4:a1:74:c8:
9e:af:44:9e:58:a2:0d:ac:4a:4e:2a:60:66:d1:57:c8:d9:87:
8c:51:d0:b5:08:4f:29:07:1f:7e:04:4d:30:57:87:ac:7c:9e:
9f:2b:fa:e7:f4:2b:5b:dd:fc:f8:65:66:1a:ad:c1:a6:46:9e:
66:b5:d7:d0:22:8d:4a:1b:b9:30:c2:43:5a:6f:a3:29:01:f4:
ba:5e:4d:f0:2d:f2:c5:2c:d3:d4:d3:eb:e6:1f:7b:92:97:99:
67:10:7d:01:06:ea:36:5c:0f:04:90:41:ac:cc:71:7b:13:be:
4e:20:08:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:14:25 2026 by rpki-client