Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/lSNMLrnc9Ovc80RjYYgbTiNSNC4.roa
File: lSNMLrnc9Ovc80RjYYgbTiNSNC4.roa (raw, json)
Hash identifier: ddLRIgsR3OaurvPlaqh/T1KmeoE4k62sFhw0t4pRoB0=
Subject key identifier: 95:23:4C:2E:B9:DC:F4:EB:DC:F3:44:63:61:88:1B:4E:23:52:34:2E
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019C95039573FF53187FD9C20959C55724BE
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/lSNMLrnc9Ovc80RjYYgbTiNSNC4.roa
Signing time: Wed 25 Feb 2026 13:36:05 +0000
ROA not before: Wed 25 Feb 2026 13:36:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 150.107.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:03:95:73:ff:53:18:7f:d9:c2:09:59:c5:57:24:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 25 13:36:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=95234c2eb9dcf4ebdcf3446361881b4e2352342e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:45:ef:c2:55:c1:21:ab:3b:cb:5c:91:62:
1f:68:05:f4:4a:d9:b0:8f:ef:e7:b9:10:ee:b1:56:
ac:05:a6:60:42:d9:bc:b4:74:58:2e:41:f5:18:4b:
66:82:c2:7d:de:54:b5:e6:e4:a2:53:13:11:fc:56:
6d:b6:a7:bc:12:aa:bb:42:cb:fd:e6:e6:14:ff:9c:
f5:ad:93:22:72:d9:48:4b:e7:cf:ab:1e:0d:fa:12:
5c:8e:be:1b:44:8a:82:61:96:0e:f2:19:6f:84:b2:
db:98:34:a4:e4:93:0e:b4:8b:10:d5:e4:10:05:91:
81:d0:fd:cb:c7:17:8d:ba:28:c7:b0:ad:bd:1a:85:
0a:05:77:8f:7b:85:42:58:1c:0f:a8:c8:00:82:ca:
ef:c2:ca:9b:23:07:12:a4:e9:25:87:f6:4c:6a:68:
0a:2a:ef:cc:da:19:7e:92:24:16:97:7e:f2:36:f8:
74:1a:1c:9f:0f:b2:01:bc:65:38:6d:de:07:fa:0d:
18:ab:c1:64:19:d9:f6:5b:b7:b2:6b:ce:d8:fb:d3:
1a:99:66:05:db:80:ad:3a:43:3c:c2:74:00:4f:69:
d3:68:24:e7:28:4d:61:6e:13:d0:2f:cd:a2:f3:16:
5b:f4:4e:a3:ce:a2:88:f8:79:cf:ba:e4:9c:12:21:
a2:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:4C:2E:B9:DC:F4:EB:DC:F3:44:63:61:88:1B:4E:23:52:34:2E
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/lSNMLrnc9Ovc80RjYYgbTiNSNC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.51.0/24
Signature Algorithm: sha256WithRSAEncryption
11:48:88:3c:2d:58:e3:2e:15:19:2a:4d:a2:ea:f6:1a:08:5d:
cc:56:1a:1e:51:74:07:eb:eb:df:73:79:b4:58:72:06:c9:0a:
44:bb:b3:82:6e:1e:4b:47:e4:8d:2c:05:4e:45:54:2b:b9:0a:
46:2a:c9:0b:67:10:6c:d1:31:6d:8a:64:ce:3a:f1:76:b7:f0:
d7:da:92:55:78:53:e9:93:85:c9:3a:03:b2:53:72:7b:26:f4:
a0:99:25:3e:c0:58:3c:a6:35:33:ab:79:89:a5:17:e2:6a:3c:
6e:6f:ea:33:d3:26:23:93:7d:64:dd:17:96:8e:90:0d:5a:14:
2e:fb:50:72:b3:56:81:8b:e0:5a:a0:73:77:d5:62:4a:e9:f3:
6e:cd:20:92:97:cc:2a:86:48:11:34:27:a1:20:8f:6e:fd:45:
5d:64:fc:08:e0:e1:14:3c:d1:03:02:36:3a:a8:86:64:1e:a6:
64:09:ae:df:3f:ff:04:3e:b2:c5:da:2f:fd:1e:4c:af:91:c3:
b8:48:75:41:e4:21:bb:66:5b:02:2d:35:88:ab:fe:21:e8:f6:
e8:ff:1a:b1:73:96:22:db:d0:6f:83:37:b8:58:0c:ae:9e:91:
0a:7d:c9:9d:03:51:2b:07:b1:8f:c2:c5:fa:7e:da:0e:ed:27:
ac:13:3f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:44:04 2026 by rpki-client