Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l6d_gIMPiiazpJEGa_b72V90hiY.roa
File: l6d_gIMPiiazpJEGa_b72V90hiY.roa (raw, json)
Hash identifier: 2LXyi+DWHI4dudLjdWTnBBbSfbQBL3UeZ0VV7MVZsh8=
Subject key identifier: 97:A7:7F:80:83:0F:8A:26:B3:A4:91:06:6B:F6:FB:D9:5F:74:86:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D714380F03942EAA3E61337BF222A86BA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l6d_gIMPiiazpJEGa_b72V90hiY.roa
Signing time: Thu 09 Apr 2026 08:02:22 +0000
ROA not before: Thu 09 Apr 2026 08:02:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397563
IP address blocks: 151.247.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:23:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:71:43:80:f0:39:42:ea:a3:e6:13:37:bf:22:2a:86:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 9 08:02:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97a77f80830f8a26b3a491066bf6fbd95f748626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:38:a8:3f:36:c0:0f:37:d1:8f:3e:ad:d2:
89:08:39:71:0d:02:11:36:6b:b7:20:56:af:4e:3f:
95:be:f4:77:d3:74:a8:b1:61:f3:f4:99:22:99:fe:
9d:d8:06:dd:d3:36:e8:52:19:6c:59:5b:a0:44:26:
7d:f0:8a:9b:39:8b:73:3b:f0:de:58:29:e5:62:57:
c5:55:cc:a6:33:93:18:fe:25:8a:9b:45:92:05:81:
4e:69:bf:4c:5a:84:10:19:26:34:f5:28:a1:9b:a1:
f3:05:89:e5:86:42:ea:bb:6e:26:4d:e1:04:a6:e8:
10:7e:f3:a9:f4:5a:57:f6:51:d4:1d:5f:36:2d:cd:
4c:1e:fa:4c:f8:c4:3c:f7:ed:ef:a2:c0:d5:78:5d:
a3:37:cf:01:c7:c9:7c:79:06:2f:bb:f5:49:64:b0:
c4:b6:f7:ff:a2:e6:76:01:fe:24:5f:f0:9a:ed:c7:
e7:10:81:88:9e:88:22:c4:ba:62:9b:6a:db:dc:94:
61:b8:88:66:60:5e:2c:e6:22:d4:af:0a:8f:f1:e2:
b1:71:e2:ac:f4:85:f3:45:c7:38:c9:b4:67:45:3a:
69:d7:47:7f:ac:c9:a9:93:27:9e:b0:88:c0:a1:18:
32:b8:5e:92:af:4c:02:4e:88:4f:c3:fa:25:04:91:
c3:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:A7:7F:80:83:0F:8A:26:B3:A4:91:06:6B:F6:FB:D9:5F:74:86:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/l6d_gIMPiiazpJEGa_b72V90hiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.213.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:20:c4:7c:26:cf:b8:8e:19:01:66:22:ec:d9:10:cd:12:9d:
28:a4:a3:ca:03:a8:82:e7:e2:75:26:82:26:89:bb:57:e1:6d:
83:1a:2b:b5:51:e8:d3:b6:b1:51:eb:f8:c9:7a:18:99:7f:fb:
81:d5:f2:7c:79:93:30:24:0a:d2:22:1e:ff:6a:5d:a5:0c:40:
fb:df:f0:c2:99:fe:d4:e6:1e:87:5c:a3:74:5e:fa:b0:d9:78:
4f:80:78:ea:31:5d:74:e2:00:a1:28:bd:57:2b:03:d7:64:78:
88:38:cd:b4:98:e4:95:20:2c:69:16:80:f8:f8:cd:0e:90:ad:
c5:82:b4:db:83:04:f5:e9:21:3f:cb:45:63:d4:b8:44:79:36:
cb:a0:f2:0a:1d:e6:fe:eb:26:ce:0b:e6:34:18:79:94:cc:44:
18:54:e0:25:02:0e:69:e2:fc:ef:ff:ef:99:95:ea:13:a8:46:
5b:2c:d3:c3:28:9e:78:d5:52:a6:cd:51:93:1d:62:b0:a9:c1:
4b:6e:8a:4d:cb:30:31:b0:94:c1:14:21:64:3b:0f:c7:ed:17:
8d:d3:e8:d4:ca:bf:df:9c:9c:7d:06:1e:aa:00:63:bb:fc:01:
00:bf:3f:ad:ef:da:d0:9e:cb:d8:52:85:c0:9a:c7:25:57:1c:
2a:0f:ab:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1xQ4DwOULqo+YTN78iKoa6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDA5MDgwMjIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2E3N2Y4MDgzMGY4YTI2YjNhNDkxMDY2YmY2ZmJkOTVmNzQ4NjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLA4qD82wA830Y8+rdKJCDlxDQIR
Nmu3IFavTj+VvvR303SosWHz9Jkimf6d2Abd0zboUhlsWVugRCZ98IqbOYtzO/De
WCnlYlfFVcymM5MY/iWKm0WSBYFOab9MWoQQGSY09Sihm6HzBYnlhkLqu24mTeEE
pugQfvOp9FpX9lHUHV82Lc1MHvpM+MQ89+3vosDVeF2jN88Bx8l8eQYvu/VJZLDE
tvf/ouZ2Af4kX/Ca7cfnEIGInogixLpim2rb3JRhuIhmYF4s5iLUrwqP8eKxceKs
9IXzRcc4ybRnRTpp10d/rMmpkyeesIjAoRgyuF6Sr0wCTohPw/olBJHDzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJenf4CDD4oms6SRBmv2+9lfdIYmMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbDZkX2dJTVBpaWF6cEpFR2FfYjcyVjkwaGlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/fVMA0G
CSqGSIb3DQEBCwUAA4IBAQCzIMR8Js+4jhkBZiLs2RDNEp0opKPKA6iC5+J1JoIm
ibtX4W2DGiu1UejTtrFR6/jJehiZf/uB1fJ8eZMwJArSIh7/al2lDED73/DCmf7U
5h6HXKN0Xvqw2XhPgHjqMV104gChKL1XKwPXZHiIOM20mOSVICxpFoD4+M0OkK3F
grTbgwT16SE/y0Vj1LhEeTbLoPIKHeb+6ybOC+Y0GHmUzEQYVOAlAg5p4vzv/++Z
leoTqEZbLNPDKJ541VKmzVGTHWKwqcFLbopNyzAxsJTBFCFkOw/H7ReN0+jUyr/f
nJx9Bh6qAGO7/AEAvz+t79rQnsvYUoXAmsclVxwqD6u3
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:10 2026 by rpki-client