Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLs8XYHs9gIrWQDsgsgIN8arfKA.roa
File: LLs8XYHs9gIrWQDsgsgIN8arfKA.roa (raw, json)
Hash identifier: GiKkA8UjXVh7GBE8uFkEFjeNCQkkFPt4hWDIdF/EuVw=
Subject key identifier: 2C:BB:3C:5D:81:EC:F6:02:2B:59:00:EC:82:C8:08:37:C6:AB:7C:A0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9B95DB456D9C562ABA20877D65888116
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLs8XYHs9gIrWQDsgsgIN8arfKA.roa
Signing time: Fri 17 Apr 2026 13:16:22 +0000
ROA not before: Fri 17 Apr 2026 13:16:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 17497
IP address blocks: 151.240.147.0/24 maxlen: 24
151.244.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:95:db:45:6d:9c:56:2a:ba:20:87:7d:65:88:81:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 13:16:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cbb3c5d81ecf6022b5900ec82c80837c6ab7ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:b1:43:f3:23:f2:13:1d:dc:5d:47:c7:d5:
00:cc:5b:0d:e3:0b:ca:61:d8:62:74:8b:a4:62:0e:
79:9d:1c:40:5e:16:c0:11:ca:51:e7:40:87:a0:9d:
f3:54:98:c3:ed:3b:72:97:ae:6e:ec:a9:47:4e:3f:
bc:45:ed:5d:15:4c:5e:4b:fc:58:6e:89:3a:21:25:
10:7d:1c:cd:22:4b:39:e4:29:cf:82:99:19:a2:db:
77:de:99:a4:0b:e1:9a:c5:f2:0b:85:5a:22:b4:e0:
c5:01:c3:fc:d9:0b:18:6b:01:b9:fd:01:7c:48:27:
84:5d:6f:39:45:ec:74:d9:94:ce:da:c1:84:d3:19:
20:5c:cd:53:91:25:51:39:31:93:44:ca:17:8f:32:
a0:c1:eb:b7:bf:42:ce:b4:19:82:3e:ab:8d:74:5b:
27:09:69:54:69:35:29:8a:a4:46:28:f4:ad:35:29:
82:59:36:43:86:c5:5e:7f:f1:55:55:97:7e:ae:01:
1e:44:ca:da:96:12:db:1e:5c:b8:0f:02:ff:11:0a:
e1:60:f4:42:ad:59:5a:43:74:0b:a4:a5:a2:2a:a4:
71:66:94:17:ec:c2:4d:a0:f9:2c:8e:07:2b:ae:db:
b9:17:78:e0:48:56:07:f8:12:be:9e:74:5b:d9:aa:
f1:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BB:3C:5D:81:EC:F6:02:2B:59:00:EC:82:C8:08:37:C6:AB:7C:A0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLs8XYHs9gIrWQDsgsgIN8arfKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.147.0/24
151.244.48.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:49:3a:5a:7c:75:17:2b:3b:7f:ce:1e:14:37:2f:12:0d:dc:
eb:3b:44:76:7c:43:17:ce:93:dc:b0:10:0c:96:8c:59:ee:b7:
3f:1b:91:48:75:12:00:fc:e0:fc:b1:73:7a:54:30:d4:7f:08:
06:87:60:88:b8:12:99:07:36:15:12:45:32:5c:0d:65:a7:7e:
eb:04:fe:58:cb:d4:b0:85:b5:c8:5a:31:46:09:9e:6a:1a:d8:
48:e1:12:e2:4e:bc:b0:80:be:34:d3:ae:80:01:f6:ee:28:28:
4e:04:8d:4a:db:5d:2b:81:e1:e1:81:7a:ec:de:28:85:67:cb:
9f:dc:60:6f:09:ac:ec:ac:55:0f:5f:15:14:cd:42:0a:38:df:
6c:a6:62:0a:88:8c:90:8c:10:ef:58:71:f4:4f:29:12:d6:55:
5f:ac:85:46:43:9f:c1:c5:e9:cf:c1:fd:da:a1:93:98:4b:09:
b3:b2:95:93:10:1e:28:9c:70:85:b8:ae:f0:d6:c6:9a:88:20:
23:7c:51:02:34:e7:68:fe:a4:6a:3d:71:ae:78:03:a7:be:31:
43:5b:74:bd:27:65:f0:5a:6f:74:45:92:f7:d4:f8:e7:c1:78:
f2:db:e3:f4:43:07:f1:c7:47:05:ae:ac:18:a9:da:5c:75:e0:
e7:5d:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:01 2026 by rpki-client