Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lzFDp_c4d48f3kVLcqGTD5NmgY8.roa
File: lzFDp_c4d48f3kVLcqGTD5NmgY8.roa (raw, json)
Hash identifier: nnIHw6o5CinzMx3QentMxzBS+Qs7wKq0SR41ihWSXWQ=
Subject key identifier: 97:31:43:A7:F7:38:77:8F:1F:DE:45:4B:72:A1:93:0F:93:66:81:8F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08A3A8FEAA75E0D21D745F68E3006B1EE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lzFDp_c4d48f3kVLcqGTD5NmgY8.roa
Signing time: Thu 10 Sep 2026 07:31:28 +0000
ROA not before: Thu 10 Sep 2026 07:31:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210699
IP address blocks: 151.244.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:3a:8f:ea:a7:5e:0d:21:d7:45:f6:8e:30:06:b1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 10 07:31:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=973143a7f738778f1fde454b72a1930f9366818f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:49:7f:7f:a0:79:2c:f7:72:f5:86:14:a0:4c:
c4:d2:31:3e:84:c3:1f:40:64:2c:e9:17:6b:12:50:
2a:fb:81:94:05:cc:f3:72:e5:2d:50:c3:cd:e6:f5:
de:f2:ab:74:84:99:e5:96:e0:82:04:5c:e9:95:c2:
8b:f7:60:d1:8b:58:8e:1f:fc:97:e9:15:93:25:ea:
eb:3d:7f:7b:0f:8c:0d:c8:dc:87:c1:23:3c:ff:9a:
1a:2c:15:f8:8e:38:68:73:e6:f9:a4:e4:b7:1f:dc:
f8:07:33:27:33:55:50:98:fd:34:a1:40:a7:2f:b6:
8e:e5:47:49:02:8d:ae:2a:1f:c4:4b:f0:39:2f:e6:
2f:74:5e:0b:0e:c3:b4:dd:00:05:47:b2:5c:bb:c0:
f5:cd:65:bf:e1:62:2a:03:b0:89:88:69:60:24:c1:
fc:53:c6:32:29:0c:bb:fc:59:6e:14:47:b5:36:da:
12:c2:12:f8:c3:9f:50:b3:20:94:08:9c:46:f2:76:
59:27:e5:86:ba:99:cb:37:45:30:dd:40:1a:c6:a8:
41:08:a2:8b:32:dc:99:96:51:2e:cf:b5:b4:75:c6:
06:93:8e:9d:8e:5f:9a:03:4d:51:f0:cc:46:1a:e5:
59:0d:83:2c:5f:fc:80:d6:07:ed:52:58:76:d8:28:
64:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:31:43:A7:F7:38:77:8F:1F:DE:45:4B:72:A1:93:0F:93:66:81:8F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lzFDp_c4d48f3kVLcqGTD5NmgY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.129.0/24
Signature Algorithm: sha256WithRSAEncryption
19:b5:27:ed:3d:a0:4d:d1:2f:21:d4:15:2e:db:b3:6f:a5:80:
04:a8:45:e1:5a:84:48:e6:ec:67:2e:b0:db:37:7d:42:fe:4b:
b6:b7:6f:64:5c:68:f7:e8:7e:93:28:c5:99:e9:c7:af:52:20:
cf:44:f6:ec:7c:5f:4c:31:9b:52:4b:99:4b:dc:b7:10:85:af:
a2:1d:67:f2:e1:f4:0f:b4:e2:5c:30:07:5c:f9:2f:5b:9c:6f:
9c:21:57:5e:0a:c2:23:51:1d:61:29:e2:b6:97:c2:63:4b:70:
1f:f1:c5:f8:dd:2a:74:3b:14:3b:78:9c:7c:4c:a0:5b:01:4a:
8e:07:14:19:a7:d4:07:8a:68:aa:c1:cb:ab:f6:28:fe:32:38:
09:9c:14:c9:01:b8:2e:b4:fd:dd:26:75:80:e0:18:aa:98:79:
28:33:03:f0:76:ed:50:e2:b7:1a:df:33:62:9d:1f:71:cd:2d:
b0:af:7b:03:ad:a9:83:48:36:85:6f:1f:95:4c:d6:e2:7e:d3:
64:08:86:12:4b:5d:cf:e0:ac:56:d5:05:89:4c:1e:a2:0d:c3:
59:2a:ac:41:39:e5:00:d2:a8:25:b1:4a:1c:88:26:1b:8c:0c:
4f:f6:5d:d8:f0:f7:ff:c8:94:c7:a5:3d:0f:d9:c6:b2:3e:ce:
6b:fc:6e:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:22 2026 by rpki-client