Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LmeWD7F61KP34CVk8KVSFrK1iGo.roa
File: LmeWD7F61KP34CVk8KVSFrK1iGo.roa (raw, json)
Hash identifier: Vd22oizK2JfUfOLnRb8cWpO+9j6rlBLi+gnPVSB1ykI=
Subject key identifier: 2E:67:96:0F:B1:7A:D4:A3:F7:E0:25:64:F0:A5:52:16:B2:B5:88:6A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E9B914F0D1BDC20CDCEF09EF41ABC3C94
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LmeWD7F61KP34CVk8KVSFrK1iGo.roa
Signing time: Sat 06 Jun 2026 06:14:11 +0000
ROA not before: Sat 06 Jun 2026 06:14:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 141968
IP address blocks: 151.243.222.0/24 maxlen: 24
151.245.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:91:4f:0d:1b:dc:20:cd:ce:f0:9e:f4:1a:bc:3c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 6 06:14:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2e67960fb17ad4a3f7e02564f0a55216b2b5886a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a3:27:76:da:a4:c8:0a:fc:1f:5c:e9:7a:08:
e1:4f:e6:92:c9:2d:22:02:56:2b:0f:95:95:62:9d:
f8:18:64:46:b5:fa:9b:e9:e7:ad:15:91:fe:45:7f:
3d:11:14:82:90:55:42:a6:3c:0f:9c:40:97:a9:ba:
a5:5e:56:d1:f2:6b:f4:40:b6:88:8a:fe:32:ec:25:
8b:a8:12:cf:af:8b:bf:c7:f8:82:e7:fc:89:b4:d3:
5b:f3:95:2a:b1:66:d1:7c:4a:ff:07:95:b1:6f:0e:
09:b5:2a:73:7a:44:57:51:d5:83:be:ba:4b:a9:39:
ce:6f:16:b8:e3:45:9c:92:83:e4:2b:e2:0a:01:b1:
e5:4b:51:d9:85:43:bd:b5:86:68:93:d5:d8:6c:c8:
0b:28:4b:65:70:52:4a:d0:34:e6:65:3f:cb:02:45:
83:93:1f:03:b8:22:c9:fc:ad:36:f7:4f:7f:4c:db:
6b:3b:22:97:04:20:08:8e:f0:7c:41:3e:35:2e:be:
3e:59:cc:61:68:a2:6d:d9:8e:ee:f9:f7:b8:47:46:
6a:9b:7b:29:b7:36:44:09:ca:b4:9f:8f:6a:89:81:
45:8e:da:f9:00:81:e0:53:03:c7:c9:a6:98:8a:1a:
13:13:5b:b7:a6:c2:e5:ae:d2:81:7b:6b:56:8d:e9:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:67:96:0F:B1:7A:D4:A3:F7:E0:25:64:F0:A5:52:16:B2:B5:88:6A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LmeWD7F61KP34CVk8KVSFrK1iGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.222.0/24
151.245.85.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:10:98:ea:91:3a:af:45:5d:72:05:d8:2d:13:93:02:9b:95:
9c:18:a6:55:ec:f8:7a:a9:a4:df:f1:fb:d0:31:31:bc:02:0f:
cc:23:23:f5:d5:b8:08:d9:b8:63:1d:09:8b:a5:81:35:a7:0a:
da:f5:bf:9c:c6:10:69:65:0f:37:bb:11:6a:9b:66:05:f1:14:
e6:b9:2f:d8:75:75:38:14:09:c8:5e:4b:dc:45:ba:e9:87:1e:
4c:f0:67:f7:f3:28:a7:8d:a7:f9:06:8e:b5:80:10:63:b9:4f:
cd:3d:fe:1e:85:6b:8b:83:85:5c:cb:16:7a:3e:af:0f:56:4c:
dd:35:00:2e:4b:30:ee:64:3d:53:b9:d7:87:c6:ef:f2:ea:e3:
8e:13:07:15:bd:73:57:1c:c9:4d:aa:e6:4f:db:ec:49:4d:b8:
a4:ee:3a:ff:7b:7a:77:f3:be:f8:a0:00:6f:3d:63:ef:2e:e4:
14:17:74:5f:e5:0e:8f:66:f5:fb:2a:e2:03:1e:3f:04:49:53:
3e:90:a7:a1:e9:db:ae:bd:2f:ca:79:ee:4e:f9:22:f2:da:0d:
bc:bf:8d:59:a1:85:b4:81:60:15:47:d1:36:f3:0e:f4:a1:e7:
3b:5f:e1:98:6b:da:83:d3:2f:72:ca:f4:9e:d5:87:b3:bd:40:
8c:89:a6:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:49 2026 by rpki-client