Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lXUEvLdmkKLKeWQghq3p56aE634.roa
File: lXUEvLdmkKLKeWQghq3p56aE634.roa (raw, json)
Hash identifier: 9TdlE3XZ0xhw+tOkbrqeVp+qUkaBcZwUmk65oG+7bcI=
Subject key identifier: 95:75:04:BC:B7:66:90:A2:CA:79:64:20:86:AD:E9:E7:A6:84:EB:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D1E95B260EA6812BAB2CD35A8E9CCB6BE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lXUEvLdmkKLKeWQghq3p56aE634.roa
Signing time: Tue 24 Mar 2026 06:43:40 +0000
ROA not before: Tue 24 Mar 2026 06:43:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 151.242.77.0/24 maxlen: 24
151.243.165.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.90.0/24 maxlen: 24
151.247.128.0/24 maxlen: 24
151.247.150.0/24 maxlen: 24
151.247.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:95:b2:60:ea:68:12:ba:b2:cd:35:a8:e9:cc:b6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 24 06:43:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=957504bcb76690a2ca79642086ade9e7a684eb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:30:b9:b7:e8:08:23:80:2c:f6:d4:4f:ac:62:
3e:7c:80:69:50:f9:96:90:31:7a:12:38:10:70:29:
3a:5d:04:35:18:a7:a6:af:a0:51:08:c0:8f:ca:27:
c9:a1:c4:77:80:d1:a4:40:74:40:ee:65:1f:15:7a:
33:4e:d5:9f:8b:71:2f:7f:6e:b5:45:3a:40:b2:32:
b8:ca:da:97:51:78:8b:0f:66:0a:cc:8c:3e:a6:9e:
58:3a:04:ad:a7:e7:13:72:c9:dd:de:69:8a:62:50:
e9:35:dc:75:f7:ae:29:5f:20:86:2b:42:d0:c9:b9:
fe:76:02:7c:c3:0f:3b:e6:c8:67:58:3b:9b:37:63:
14:17:ea:ae:59:30:da:9d:1d:0d:1d:52:30:eb:b0:
bf:2c:37:8f:de:12:ff:ef:0d:65:eb:ed:a0:de:f3:
a9:db:36:f8:1f:78:5b:ca:d2:0c:a3:be:59:19:f4:
6a:1f:74:12:30:5e:8c:c9:47:50:32:af:34:3a:f7:
e1:bc:8f:02:da:f4:cf:fc:2c:ba:cb:65:67:a8:6f:
4f:c0:25:40:31:d2:85:4f:5d:2e:02:45:2e:2a:19:
cf:3b:c1:94:4b:33:d5:49:5c:5e:37:f2:f3:c8:70:
c3:dc:b0:22:28:f6:89:40:33:fa:88:50:df:6e:a3:
f4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:75:04:BC:B7:66:90:A2:CA:79:64:20:86:AD:E9:E7:A6:84:EB:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lXUEvLdmkKLKeWQghq3p56aE634.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.77.0/24
151.243.165.0/24
151.244.4.0/24
151.244.90.0/24
151.247.128.0/24
151.247.150.0/24
151.247.163.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:1d:b0:51:9b:a3:a8:f2:93:6c:00:e6:4a:f3:da:8b:3d:63:
63:cc:83:d0:bc:54:a7:ca:92:ac:5a:e8:33:29:b5:df:87:78:
d0:1b:0a:05:7c:1f:23:bd:46:cc:a6:32:1a:27:7c:a2:9b:af:
de:4c:47:40:58:4b:b1:46:4c:43:4d:eb:a2:b4:32:89:a6:9a:
eb:cb:2c:eb:b7:13:ba:ef:25:c7:04:a2:88:06:17:dd:47:8d:
50:93:9e:11:f4:22:3f:70:9b:6d:81:59:44:ea:1c:85:d1:69:
51:c0:45:d5:46:b0:3c:ea:55:10:9b:84:45:47:9d:2a:74:e4:
a1:26:23:e6:d4:a0:01:e1:be:6a:38:cd:bf:93:d0:b0:49:ef:
64:4c:e3:f7:00:78:22:1e:59:0b:dd:45:0b:73:8f:33:9b:86:
07:ef:5a:81:4f:b6:0a:d5:9a:66:55:cc:a5:4f:e8:03:ec:34:
61:d5:1b:dc:aa:64:76:0f:ea:ba:79:ae:95:99:3a:60:c6:90:
f0:75:23:d8:7e:ca:3c:3b:37:47:12:75:91:b5:1b:26:90:f1:
32:40:ed:b7:ac:ea:c4:98:b7:fa:cb:2b:03:54:6e:9b:c6:0d:
aa:1e:3a:85:11:3e:d8:ce:e8:67:f7:6e:39:82:89:46:a2:db:
4f:d0:1b:6b
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZ0elbJg6mgSurLNNajpzLa+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzI0MDY0MzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTc1MDRiY2I3NjY5MGEyY2E3OTY0MjA4NmFkZTllN2E2ODRlYjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDC5t+gII4As9tRPrGI+fIBpUPmW
kDF6EjgQcCk6XQQ1GKemr6BRCMCPyifJocR3gNGkQHRA7mUfFXozTtWfi3Evf261
RTpAsjK4ytqXUXiLD2YKzIw+pp5YOgStp+cTcsnd3mmKYlDpNdx1964pXyCGK0LQ
ybn+dgJ8ww875shnWDubN2MUF+quWTDanR0NHVIw67C/LDeP3hL/7w1l6+2g3vOp
2zb4H3hbytIMo75ZGfRqH3QSMF6MyUdQMq80OvfhvI8C2vTP/Cy6y2VnqG9PwCVA
MdKFT10uAkUuKhnPO8GUSzPVSVxeN/LzyHDD3LAiKPaJQDP6iFDfbqP0bQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFJV1BLy3ZpCiynlkIIat6eemhOt+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbFhVRXZMZG1rS0xLZVdRZ2hxM3A1NmFFNjM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/JNAwQA
l/OlAwQAl/QEAwQAl/RaAwQAl/eAAwQAl/eWAwQAl/ejMA0GCSqGSIb3DQEBCwUA
A4IBAQBLHbBRm6Oo8pNsAOZK89qLPWNjzIPQvFSnypKsWugzKbXfh3jQGwoFfB8j
vUbMpjIaJ3yim6/eTEdAWEuxRkxDTeuitDKJpprryyzrtxO67yXHBKKIBhfdR41Q
k54R9CI/cJttgVlE6hyF0WlRwEXVRrA86lUQm4RFR50qdOShJiPm1KAB4b5qOM2/
k9CwSe9kTOP3AHgiHlkL3UULc48zm4YH71qBT7YK1ZpmVcylT+gD7DRh1RvcqmR2
D+q6ea6VmTpgxpDwdSPYfso8OzdHEnWRtRsmkPEyQO23rOrEmLf6yysDVG6bxg2q
HjqFET7Yzuhn9245golGottP0Btr
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:22:12 2026 by rpki-client