Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gV4VLXSj2IUJNPNae7a1-Hp_ndM.roa
File: gV4VLXSj2IUJNPNae7a1-Hp_ndM.roa (raw, json)
Hash identifier: Uq7Jqd/sYlFXHolWT8Wy6GorS9LHg2QdKs/fi6vrqEg=
Subject key identifier: 81:5E:15:2D:74:A3:D8:85:09:34:F3:5A:7B:B6:B5:F8:7A:7F:9D:D3
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019D445DE5F4F7E77919F50BE6F8AA3211F2
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gV4VLXSj2IUJNPNae7a1-Hp_ndM.roa
Signing time: Tue 31 Mar 2026 14:48:17 +0000
ROA not before: Tue 31 Mar 2026 14:48:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214366
IP address blocks: 153.51.46.0/24 maxlen: 24
153.51.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:5d:e5:f4:f7:e7:79:19:f5:0b:e6:f8:aa:32:11:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Mar 31 14:48:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=815e152d74a3d8850934f35a7bb6b5f87a7f9dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:95:66:65:93:7a:1c:10:96:a7:cf:a2:45:
4f:ad:cc:56:a0:37:fb:df:07:bb:16:ee:1f:da:f2:
7a:8e:0c:c3:e1:4c:fe:3d:dc:eb:f2:1c:29:c6:d4:
5d:20:a0:a5:d5:80:28:c9:d9:5d:98:e6:23:08:7d:
5c:0a:c4:36:5c:f3:15:ed:e5:de:1d:44:4c:ea:00:
83:9c:69:10:46:5c:9a:b1:e4:d2:45:eb:16:85:bf:
b9:77:ec:fd:36:c8:41:81:c7:85:94:8d:5a:a6:bc:
28:ce:df:05:ee:81:aa:f7:dd:9b:b4:c6:e2:d4:7b:
af:fb:75:11:00:e9:f6:c2:e3:9f:54:c0:5a:de:38:
a9:a4:26:2a:04:21:85:5a:91:d3:0c:1a:c4:2c:47:
bb:3a:bd:22:c2:7e:56:67:7a:84:c6:bc:df:59:51:
99:26:2e:6c:77:cf:9e:e2:e0:40:69:b0:b5:ce:38:
9c:0e:33:d4:ea:19:2a:93:91:d1:f2:fe:45:d8:69:
7b:c1:de:2b:ba:96:1b:61:0b:75:75:31:95:c6:9b:
d9:61:a1:4a:8c:5c:8e:3b:a8:51:2b:77:06:81:15:
27:db:f3:d8:1e:da:15:fb:d5:fe:30:8e:84:9b:96:
e7:3e:86:9e:61:e6:a0:31:b7:c4:95:51:cb:6d:ce:
0c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5E:15:2D:74:A3:D8:85:09:34:F3:5A:7B:B6:B5:F8:7A:7F:9D:D3
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/gV4VLXSj2IUJNPNae7a1-Hp_ndM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.46.0/24
153.51.50.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:ed:99:e3:5e:3d:0b:68:c9:b1:7f:4e:3b:cf:79:09:ad:59:
e6:75:88:7a:3c:08:1c:6f:6e:6c:50:f7:ce:97:87:7b:66:db:
fb:d4:ba:99:20:cc:d3:bb:17:89:37:ec:f9:33:a1:81:01:6a:
e8:be:19:e8:0a:9b:18:0b:d3:2b:90:f5:e0:c0:f3:e8:73:f7:
18:a5:b1:f2:b5:23:21:8f:13:dc:4e:2b:37:7a:c9:df:46:27:
2d:f6:b8:7c:02:25:ea:52:b2:51:ca:4b:1c:59:9f:e5:ee:47:
90:b9:39:30:94:13:0b:96:01:f2:ce:ed:21:5a:4e:2e:9a:0c:
4a:d6:4b:de:96:08:1f:51:a2:7f:fa:69:10:62:f8:b8:d1:a6:
45:aa:9b:30:99:0c:ea:49:4f:07:66:1f:4d:83:38:fa:48:d2:
d7:36:91:28:cf:c7:5f:ac:8e:9e:63:a9:29:d1:d0:d9:f6:3d:
c5:55:46:20:31:ed:00:83:b9:82:f8:d5:7a:74:2b:ec:04:4e:
ab:7a:83:e5:e2:78:79:ac:7c:c2:79:c6:19:fe:5f:25:b2:71:
03:9c:3d:8f:4b:24:ed:b4:82:8a:6b:2a:70:0c:aa:21:de:90:
18:4b:1c:ca:bc:58:0c:43:d4:a8:11:64:91:e7:58:87:d9:75:
42:ff:69:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:43:09 2026 by rpki-client