Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLRKq6arDjyw81RExLiYDbblnLs.roa
File: mLRKq6arDjyw81RExLiYDbblnLs.roa (raw, json)
Hash identifier: 6CE1/5AG/w68ArcK31JaktTf1pZSeCgPZt55h5rpFnk=
Subject key identifier: 98:B4:4A:AB:A6:AB:0E:3C:B0:F3:54:44:C4:B8:98:0D:B6:E5:9C:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D28E43E00178A04DF0129212A69DA4821
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLRKq6arDjyw81RExLiYDbblnLs.roa
Signing time: Thu 26 Mar 2026 06:45:39 +0000
ROA not before: Thu 26 Mar 2026 06:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 151.240.144.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:56:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:e4:3e:00:17:8a:04:df:01:29:21:2a:69:da:48:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 06:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=98b44aaba6ab0e3cb0f35444c4b8980db6e59cbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:1b:8f:94:57:47:18:8f:99:62:4e:7e:ec:
5e:0f:07:09:22:ae:a0:79:89:50:b0:b8:48:03:5c:
45:3f:87:ad:42:6c:14:79:fb:30:cc:c7:fa:e5:40:
ee:70:2b:4b:21:d3:38:6c:00:ff:2d:d9:33:5e:a1:
ec:eb:bd:cd:ba:c8:ce:46:2e:fd:e0:a6:c5:80:a7:
fb:81:00:a9:e2:a1:bb:11:30:d0:69:94:9f:cf:50:
7a:d1:97:37:ea:13:14:e6:b6:95:4e:9f:63:a6:94:
9c:be:dc:67:46:cc:eb:04:b5:72:d4:ed:9e:d0:a8:
ab:a6:b7:d1:9a:3b:fb:f4:e2:23:38:d3:83:63:bc:
9c:b6:e9:68:3d:72:11:f5:4d:b2:71:f5:76:90:21:
3f:17:c6:ac:9c:39:f7:a7:5e:43:37:cc:6e:a5:9e:
da:37:1f:d1:a1:45:8e:eb:f4:9e:99:d7:9a:49:e9:
e5:db:a6:a5:e6:c8:f3:25:19:5b:c1:a9:27:8d:73:
21:f8:bb:cb:74:86:64:a0:9d:7a:f2:b3:4f:13:69:
1a:da:5e:c4:29:56:ec:a2:7c:d1:a1:f6:df:7b:53:
b5:5e:af:15:80:82:9b:4c:a5:6d:59:74:20:27:07:
fe:17:7b:62:13:cf:f3:b6:e8:67:e9:f6:62:8b:b1:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:B4:4A:AB:A6:AB:0E:3C:B0:F3:54:44:C4:B8:98:0D:B6:E5:9C:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mLRKq6arDjyw81RExLiYDbblnLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.144.0/24
151.242.139.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:78:f5:f1:89:18:c0:62:39:c9:f5:a9:16:31:fe:d1:7d:c6:
ba:dc:a7:f0:61:c2:8d:44:17:62:7c:65:01:d4:15:78:92:b4:
67:88:43:83:52:20:e1:35:62:6e:fa:c3:67:6a:83:b4:80:c3:
60:f3:21:dc:54:a2:59:0b:2e:94:84:a0:13:eb:3b:a8:19:c6:
c5:09:7e:c5:ed:d0:d9:78:af:1f:8c:86:cb:04:7e:f7:6a:32:
cb:a8:a1:67:7e:82:eb:06:8b:17:66:99:de:6e:0b:ef:9e:68:
10:64:28:49:0d:ac:79:6e:49:69:aa:54:b9:4f:e6:e5:a5:03:
32:11:7d:16:b2:ee:48:17:bb:72:4a:03:7b:16:a6:9d:22:f6:
d9:29:64:db:ac:38:e0:79:aa:dd:12:96:69:99:03:ed:c2:26:
ed:8e:52:9c:42:ec:b2:04:e9:a2:27:5f:2c:d8:ac:01:98:a1:
86:4d:95:93:83:cc:3c:31:49:ae:fb:8e:27:6c:01:99:44:99:
f7:13:30:f3:53:ac:15:9b:e4:1f:5e:32:f4:1a:85:92:44:c2:
7e:f4:f2:6b:e1:36:eb:81:85:65:19:4b:72:77:f4:e3:d0:f3:
3a:ea:f7:c4:26:23:dd:6c:cd:c7:29:7a:c4:e9:d1:4b:6d:42:
4f:64:b1:8b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0o5D4AF4oE3wEpISpp2kghMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzI2MDY0NTM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OGI0NGFhYmE2YWIwZTNjYjBmMzU0NDRjNGI4OTgwZGI2ZTU5Y2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcQbj5RXRxiPmWJOfuxeDwcJIq6g
eYlQsLhIA1xFP4etQmwUefswzMf65UDucCtLIdM4bAD/LdkzXqHs673NusjORi79
4KbFgKf7gQCp4qG7ETDQaZSfz1B60Zc36hMU5raVTp9jppScvtxnRszrBLVy1O2e
0KirprfRmjv79OIjONODY7yctuloPXIR9U2ycfV2kCE/F8asnDn3p15DN8xupZ7a
Nx/RoUWO6/SemdeaSenl26al5sjzJRlbwaknjXMh+LvLdIZkoJ168rNPE2ka2l7E
KVbsonzRofbfe1O1Xq8VgIKbTKVtWXQgJwf+F3tiE8/ztuhn6fZii7EZxQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJi0Squmqw48sPNURMS4mA225Zy7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbUxSS3E2YXJEanl3ODFSRXhMaVlEYmJsbkxzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/CQAwQA
l/KLMA0GCSqGSIb3DQEBCwUAA4IBAQBtePXxiRjAYjnJ9akWMf7Rfca63KfwYcKN
RBdifGUB1BV4krRniEODUiDhNWJu+sNnaoO0gMNg8yHcVKJZCy6UhKAT6zuoGcbF
CX7F7dDZeK8fjIbLBH73ajLLqKFnfoLrBosXZpnebgvvnmgQZChJDax5bklpqlS5
T+blpQMyEX0Wsu5IF7tySgN7FqadIvbZKWTbrDjgeardEpZpmQPtwibtjlKcQuyy
BOmiJ18s2KwBmKGGTZWTg8w8MUmu+44nbAGZRJn3EzDzU6wVm+QfXjL0GoWSRMJ+
9PJr4TbrgYVlGUtyd/Tj0PM66vfEJiPdbM3HKXrE6dFLbUJPZLGL
-----END CERTIFICATE-----
Generated at Thu Mar 26 16:11:36 2026 by rpki-client