Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa
File: 7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa (raw, json)
Hash identifier: r2glHg/T+YpYXCIT8+l4YxupOX2jMrXd200bHTuRVAA=
Subject key identifier: ED:7F:25:09:8B:00:4B:A1:8E:11:D4:7E:71:C1:D4:39:02:2B:BE:37
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019C7037D4491B7D53A5B03F5A3C5455BF75
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa
Signing time: Wed 18 Feb 2026 10:07:12 +0000
ROA not before: Wed 18 Feb 2026 10:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 11404
IP address blocks: 153.51.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:37:d4:49:1b:7d:53:a5:b0:3f:5a:3c:54:55:bf:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Feb 18 10:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ed7f25098b004ba18e11d47e71c1d439022bbe37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:00:da:e5:44:3a:cf:86:6e:78:ef:81:fa:ac:
1d:31:67:60:28:22:03:26:ac:3c:c9:ec:37:db:c0:
cb:31:28:b4:ec:66:c2:16:09:3a:68:9c:9f:93:d3:
7c:de:ca:82:23:89:fe:b5:80:68:75:3c:40:d4:6b:
4b:48:50:86:9d:cf:f0:1e:28:42:ad:a2:b0:59:d0:
8c:09:06:ed:01:07:9b:22:42:be:c9:b9:d3:44:f8:
95:62:80:32:77:4e:95:2b:1f:ec:1c:ad:ec:ca:d9:
21:f8:3d:33:64:5a:26:5e:1b:f2:c4:80:e1:cf:88:
bd:89:4e:89:fd:53:3a:cf:fe:f4:40:b3:c8:28:69:
4b:30:c8:47:fa:89:7c:75:86:a6:69:36:35:a0:48:
a1:ac:89:45:2d:37:4e:34:fa:c8:78:f2:e7:3e:25:
1f:7d:60:a2:47:1e:99:d7:81:8c:bd:62:62:75:74:
93:59:f8:cd:fe:cf:d1:b8:b6:f7:8d:6b:d5:1d:20:
12:fc:b3:4a:22:a3:7f:c0:5d:62:26:28:07:b7:12:
f3:36:31:9b:98:24:7a:30:7d:5d:91:1c:2a:cb:78:
cb:49:7d:7a:00:28:69:fd:bd:2e:83:59:bf:ad:7d:
9e:c7:36:3b:ec:fe:76:78:5c:a9:8b:63:3f:d0:8d:
b5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:7F:25:09:8B:00:4B:A1:8E:11:D4:7E:71:C1:D4:39:02:2B:BE:37
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/7X8lCYsAS6GOEdR-ccHUOQIrvjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.64.0/20
Signature Algorithm: sha256WithRSAEncryption
6a:29:9f:fd:84:0b:d9:da:95:42:cc:cb:82:81:01:b6:40:f9:
51:e5:55:a1:bf:e9:03:51:e8:95:fd:9d:be:93:1b:34:1f:46:
ea:db:7c:6a:40:81:e6:08:b6:97:9d:6a:a1:69:ee:64:0a:97:
4b:f5:46:84:24:09:0d:7e:c3:3c:4b:bc:5a:5b:10:73:21:83:
49:56:24:d1:90:3b:ee:69:3a:f1:d0:5d:a5:87:c3:13:ff:06:
0e:c5:e8:f4:70:60:9d:1f:77:54:67:dc:f3:32:25:88:85:50:
e3:9c:b0:cb:9a:a7:30:e9:35:71:ac:43:c1:8a:7b:00:90:36:
86:2a:e7:3c:5f:ef:e0:28:da:1a:32:82:93:1f:29:ee:fa:3f:
bc:f8:5e:fc:54:d2:c2:21:db:11:cb:85:01:b6:40:0c:52:07:
c9:bd:76:a1:3b:da:03:da:2a:1a:99:f2:1a:68:73:ed:d0:34:
fa:40:04:8d:1e:10:49:8f:f3:a6:3d:9f:45:14:85:c2:b1:b4:
c7:70:2e:59:fc:d4:43:33:59:39:7f:7b:3c:5c:38:c0:76:aa:
f7:9e:17:25:b9:f1:86:cd:27:cd:91:ae:e3:47:df:d8:9b:39:
cf:1b:f3:71:de:2c:bd:39:2e:8a:d6:b6:1c:b5:ac:02:a9:56:
cb:5b:bb:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxwN9RJG31TpbA/WjxUVb91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjMDdiZjNiNzMzYTVjM2E3MWQ5Y2E4YzM2MjY5NDhkZjcx
MjcwNWIwHhcNMjYwMjE4MTAwNzEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDdmMjUwOThiMDA0YmExOGUxMWQ0N2U3MWMxZDQzOTAyMmJiZTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzADa5UQ6z4ZueO+B+qwdMWdgKCID
Jqw8yew328DLMSi07GbCFgk6aJyfk9N83sqCI4n+tYBodTxA1GtLSFCGnc/wHihC
raKwWdCMCQbtAQebIkK+ybnTRPiVYoAyd06VKx/sHK3sytkh+D0zZFomXhvyxIDh
z4i9iU6J/VM6z/70QLPIKGlLMMhH+ol8dYamaTY1oEihrIlFLTdONPrIePLnPiUf
fWCiRx6Z14GMvWJidXSTWfjN/s/RuLb3jWvVHSAS/LNKIqN/wF1iJigHtxLzNjGb
mCR6MH1dkRwqy3jLSX16AChp/b0ug1m/rX2exzY77P52eFypi2M/0I21MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO1/JQmLAEuhjhHUfnHB1DkCK743MB8GA1UdIwQY
MBaAFCwHvztzOlw6cdnKjDYmlI33EnBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEFlX08zTTZYRHB4MmNxTU5pYVVqZmNTY0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xNjA5MDUtMTI2Yi00N2RmLTk4OTkt
MTE5OWJiOTc5ZDVhLzEvN1g4bENZc0FTNkdPRWRSLWNjSFVPUUlydmpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xNjA5MDUtMTI2Yi00N2RmLTk4OTktMTE5OWJiOTc5ZDVh
LzEvTEFlX08zTTZYRHB4MmNxTU5pYVVqZmNTY0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmTNAMA0G
CSqGSIb3DQEBCwUAA4IBAQBqKZ/9hAvZ2pVCzMuCgQG2QPlR5VWhv+kDUeiV/Z2+
kxs0H0bq23xqQIHmCLaXnWqhae5kCpdL9UaEJAkNfsM8S7xaWxBzIYNJViTRkDvu
aTrx0F2lh8MT/wYOxej0cGCdH3dUZ9zzMiWIhVDjnLDLmqcw6TVxrEPBinsAkDaG
Kuc8X+/gKNoaMoKTHynu+j+8+F78VNLCIdsRy4UBtkAMUgfJvXahO9oD2ioamfIa
aHPt0DT6QASNHhBJj/OmPZ9FFIXCsbTHcC5Z/NRDM1k5f3s8XDjAdqr3nhclufGG
zSfNka7jR9/YmznPG/Nx3iy9OS6K1rYctawCqVbLW7uB
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:55:12 2026 by rpki-client