Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/id-lxRpZAXWjSQIYTHcFpR-BOiA.roa
File: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (raw, json)
Hash identifier: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=
Subject key identifier: 89:DF:A5:C5:1A:59:01:75:A3:49:02:18:4C:77:05:A5:1F:81:3A:20
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 019E92BEAC8F1002A606A6678281F50A70B6
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/id-lxRpZAXWjSQIYTHcFpR-BOiA.roa
Signing time: Thu 04 Jun 2026 13:07:09 +0000
ROA not before: Thu 04 Jun 2026 13:07:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213224
IP address blocks: 66.71.144.0/20 maxlen: 24
66.71.160.0/20 maxlen: 24
66.71.184.0/21 maxlen: 24
85.235.158.0/23 maxlen: 24
209.227.208.0/20 maxlen: 24
209.227.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:be:ac:8f:10:02:a6:06:a6:67:82:81:f5:0a:70:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jun 4 13:07:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=89dfa5c51a590175a34902184c7705a51f813a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:14:a7:5c:7a:99:20:d9:b0:0e:0c:7d:c1:05:
bd:d6:af:61:0b:7d:3a:ee:5d:00:7b:5c:ac:d3:96:
82:1d:6e:a8:17:f1:67:0b:e2:2f:4f:4e:70:67:49:
f9:10:46:6f:40:d9:d8:a7:77:83:ea:b0:07:46:24:
da:c5:6b:a9:86:b6:1f:53:8f:36:f9:49:8f:10:ca:
18:8f:d8:d9:57:4e:d0:71:36:c9:87:d2:82:79:19:
3b:47:57:e7:7f:c2:23:8d:27:15:92:1c:7b:8b:e5:
f1:d7:29:9c:a9:6e:70:a6:65:1f:d7:ff:6a:19:9f:
26:f6:f4:23:ed:7d:2d:09:2a:5f:3a:33:de:80:96:
a6:83:9f:de:22:3d:c0:4d:bc:68:ad:df:85:51:c9:
5c:4d:c7:cf:15:91:3a:13:d2:c1:e2:65:01:08:ca:
62:56:17:af:53:54:fa:4a:d3:8b:d1:0e:35:d0:93:
c3:8c:e7:ac:ea:1a:52:41:13:61:57:cf:85:63:52:
bf:1d:6e:64:8c:98:74:f8:09:09:f4:00:80:2b:35:
b9:f0:41:8b:0d:64:ff:0a:2a:95:12:38:6a:e6:e7:
f7:89:97:c4:66:fb:ec:59:4e:34:68:ef:76:48:29:
87:3a:09:b1:af:71:58:a3:ee:54:f2:c0:19:81:11:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:DF:A5:C5:1A:59:01:75:A3:49:02:18:4C:77:05:A5:1F:81:3A:20
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/id-lxRpZAXWjSQIYTHcFpR-BOiA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.71.144.0-66.71.175.255
66.71.184.0/21
85.235.158.0/23
209.227.208.0/20
209.227.240.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:09:11:b7:4c:18:40:05:8a:95:c2:8f:06:24:fb:72:fa:5c:
6e:0d:a1:94:3d:f3:5f:d0:4c:74:71:bc:4c:ab:0f:b7:a8:31:
99:9e:ec:13:b8:27:15:c0:90:9a:ad:32:81:2d:2c:2e:1a:e8:
4d:12:35:f7:48:49:c5:fc:d0:ac:84:e1:39:ef:dd:17:1d:5b:
3d:8e:02:bf:27:1e:1e:01:2a:c4:5e:b4:48:a5:ec:32:9c:64:
dc:ea:3e:64:06:05:a6:c5:90:47:b3:cb:d3:19:56:e3:67:9b:
c5:7f:7b:ef:be:d0:90:91:84:cf:f0:32:00:38:bb:a5:a5:93:
b4:8b:39:80:ce:59:35:92:51:22:1c:f7:2a:fb:65:13:8f:21:
94:fd:ef:e5:54:51:83:ee:dd:81:52:ab:98:e4:5f:88:6a:7a:
a8:d5:ba:d1:7e:04:cf:83:9d:66:b6:63:f9:5b:a9:22:96:eb:
2d:1b:7d:11:21:48:db:dc:88:06:02:ff:b0:27:9d:d0:01:04:
7b:bf:9f:bb:81:19:16:56:3d:95:cf:09:b7:a8:0f:69:e8:e1:
b5:03:ec:d3:9b:c3:59:3b:ef:72:81:80:b4:28:eb:2e:65:85:
b4:f0:6b:b6:6f:2b:31:13:ba:4a:a9:e7:6d:d0:d8:3a:6f:45:
dd:46:7c:11
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ6SvqyPEAKmBqZngoH1CnC2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjYwNjA0MTMwNzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OWRmYTVjNTFhNTkwMTc1YTM0OTAyMTg0Yzc3MDVhNTFmODEzYTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRSnXHqZINmwDgx9wQW91q9hC306
7l0Ae1ys05aCHW6oF/FnC+IvT05wZ0n5EEZvQNnYp3eD6rAHRiTaxWuphrYfU482
+UmPEMoYj9jZV07QcTbJh9KCeRk7R1fnf8IjjScVkhx7i+Xx1ymcqW5wpmUf1/9q
GZ8m9vQj7X0tCSpfOjPegJamg5/eIj3ATbxord+FUclcTcfPFZE6E9LB4mUBCMpi
VhevU1T6StOL0Q410JPDjOes6hpSQRNhV8+FY1K/HW5kjJh0+AkJ9ACAKzW58EGL
DWT/CiqVEjhq5uf3iZfEZvvsWU40aO92SCmHOgmxr3FYo+5U8sAZgRFwrwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFInfpcUaWQF1o0kCGEx3BaUfgTogMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvaWQtbHhScFpBWFdqU1FJWVRIY0ZwUi1CT2lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmMAwDBARCR5AD
BARCR6ADBANCR7gDBAFV654DBATR49ADBATR4/AwDQYJKoZIhvcNAQELBQADggEB
ACsJEbdMGEAFipXCjwYk+3L6XG4NoZQ981/QTHRxvEyrD7eoMZme7BO4JxXAkJqt
MoEtLC4a6E0SNfdIScX80KyE4Tnv3RcdWz2OAr8nHh4BKsRetEil7DKcZNzqPmQG
BabFkEezy9MZVuNnm8V/e+++0JCRhM/wMgA4u6Wlk7SLOYDOWTWSUSIc9yr7ZROP
IZT97+VUUYPu3YFSq5jkX4hqeqjVutF+BM+DnWa2Y/lbqSKW6y0bfREhSNvciAYC
/7AnndABBHu/n7uBGRZWPZXPCbeoD2no4bUD7NObw1k773KBgLQo6y5lhbTwa7Zv
KzETukqp523Q2DpvRd1GfBE=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:42 2026 by rpki-client