Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LRUYBlVedDX8CD_t24sHmioqsi4.roa
File: LRUYBlVedDX8CD_t24sHmioqsi4.roa (raw, json)
Hash identifier: fVEtCYqu8R1Pg7WbDh2+i1KAr1N/Ewq5rIRAWnY0q5o=
Subject key identifier: 2D:15:18:06:55:5E:74:35:FC:08:3F:ED:DB:8B:07:9A:2A:2A:B2:2E
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01A08BE9C2A775763B4F00756A9F2669835C
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LRUYBlVedDX8CD_t24sHmioqsi4.roa
Signing time: Thu 10 Sep 2026 15:22:27 +0000
ROA not before: Thu 10 Sep 2026 15:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 153.51.214.0/23 maxlen: 23
153.51.214.0/24 maxlen: 24
153.51.215.0/24 maxlen: 24
153.51.216.0/21 maxlen: 21
153.51.216.0/22 maxlen: 22
153.51.216.0/23 maxlen: 23
153.51.216.0/24 maxlen: 24
153.51.217.0/24 maxlen: 24
153.51.218.0/23 maxlen: 23
153.51.218.0/24 maxlen: 24
153.51.219.0/24 maxlen: 24
153.51.220.0/22 maxlen: 22
153.51.220.0/23 maxlen: 23
153.51.220.0/24 maxlen: 24
153.51.221.0/24 maxlen: 24
153.51.222.0/23 maxlen: 23
153.51.222.0/24 maxlen: 24
153.51.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:e9:c2:a7:75:76:3b:4f:00:75:6a:9f:26:69:83:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Sep 10 15:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d151806555e7435fc083feddb8b079a2a2ab22e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:48:c9:c0:59:43:d5:95:c0:d9:95:9e:6d:f6:
cd:80:9e:ed:82:ea:17:9b:c4:66:77:3e:3b:c0:79:
4f:03:29:f9:18:fe:75:7e:0f:c4:5a:eb:fd:55:18:
70:a9:93:f2:36:31:19:d2:53:0d:53:42:bd:07:6a:
6b:da:35:84:81:63:10:6b:18:1d:2a:16:ab:04:96:
9b:32:0b:e4:b4:5f:5f:0e:f0:10:fd:2b:54:e9:9e:
6e:34:0f:c2:fa:6a:2a:f8:e4:0e:8b:6f:c8:64:ee:
4c:76:cf:62:f6:18:cb:2c:fa:90:7f:ad:43:1d:b5:
71:6e:d9:c9:62:30:f9:b5:08:dc:cd:86:52:bd:6b:
eb:f8:94:42:49:8e:ac:22:a5:ef:5b:f6:a1:73:72:
a1:dc:0b:49:b7:76:ac:25:04:ac:80:ff:f1:df:85:
9b:62:92:3f:c9:67:8a:a2:6b:20:36:06:d3:bb:91:
00:dd:cb:de:87:ef:c3:2a:f6:97:f4:c3:8f:64:56:
5f:8a:df:3a:9c:e0:23:ca:71:ba:11:d4:0e:61:72:
b1:cb:68:6f:06:ad:49:04:35:48:1e:6b:8b:00:8e:
b5:33:3d:f9:ec:5e:fd:a7:3b:31:b5:59:c0:09:98:
04:3f:c1:96:15:bc:72:6c:2c:7a:bb:0f:46:3a:00:
b1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:15:18:06:55:5E:74:35:FC:08:3F:ED:DB:8B:07:9A:2A:2A:B2:2E
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/LRUYBlVedDX8CD_t24sHmioqsi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.214.0-153.51.223.255
Signature Algorithm: sha256WithRSAEncryption
5e:b9:90:13:58:20:21:d6:31:b6:39:86:d6:fc:eb:19:d4:0b:
53:95:ac:db:5e:36:1d:b2:d8:a5:65:41:ae:e5:56:ac:0a:cc:
32:f1:bc:ea:99:72:9a:32:00:53:68:e0:94:d7:f5:c9:43:f2:
45:53:1c:b0:29:b0:bf:a6:9b:73:61:fd:cc:28:c4:5a:09:04:
ed:cd:3b:c9:05:39:bc:d2:9c:7f:91:31:9d:16:4f:21:f8:84:
8a:f3:18:9d:92:89:58:50:31:9d:56:02:03:39:88:5a:b4:3e:
d6:94:e2:fb:92:ed:c3:b6:20:ce:f5:7f:ab:18:52:cd:55:3a:
6e:0a:c9:12:e9:e4:83:4c:2a:0f:46:4a:76:f7:f5:e6:05:41:
4d:b5:e6:1e:3c:f3:02:3d:59:30:3d:a1:38:52:55:43:47:5d:
aa:38:26:a0:7b:c0:d3:e1:f5:b5:0a:35:fb:fb:b9:e5:14:6c:
6f:1b:f2:f2:dd:28:5e:db:d4:70:40:dc:63:f2:f9:d6:71:f9:
d8:67:80:81:c0:0f:ff:84:77:69:81:43:6b:8e:82:8a:d6:f9:
73:bb:a2:53:47:93:52:b7:28:40:0f:7e:3f:9f:c5:82:15:32:
a7:7a:e4:07:33:74:a5:14:b3:04:9c:ac:ee:85:09:96:53:5d:
b6:27:84:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:02:10 2026 by rpki-client