Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/xBI2fXrHUQIZhQ-kfXWaR5nlvEs.roa
File: xBI2fXrHUQIZhQ-kfXWaR5nlvEs.roa (raw, json)
Hash identifier: BFgvI6ewznhWaVgNP//jYhzMWkTp4FaSi4q4AsoGCXk=
Subject key identifier: C4:12:36:7D:7A:C7:51:02:19:85:0F:A4:7D:75:9A:47:99:E5:BC:4B
Certificate issuer: /CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Certificate serial: 019D445FBB83DA0E9FE7DBB07F16C8C5AA1D
Authority key identifier: 2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/xBI2fXrHUQIZhQ-kfXWaR5nlvEs.roa
Signing time: Tue 31 Mar 2026 14:50:17 +0000
ROA not before: Tue 31 Mar 2026 14:50:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213705
IP address blocks: 153.51.32.0/22 maxlen: 24
153.51.36.0/22 maxlen: 24
153.51.40.0/24 maxlen: 24
153.51.41.0/24 maxlen: 24
153.51.42.0/24 maxlen: 24
153.51.43.0/24 maxlen: 24
153.51.44.0/24 maxlen: 24
153.51.45.0/24 maxlen: 24
153.51.47.0/24 maxlen: 24
153.51.48.0/24 maxlen: 24
153.51.49.0/24 maxlen: 24
153.51.51.0/24 maxlen: 24
153.51.52.0/22 maxlen: 24
153.51.56.0/22 maxlen: 24
153.51.60.0/22 maxlen: 24
153.51.96.0/22 maxlen: 22
153.51.100.0/22 maxlen: 22
153.51.104.0/22 maxlen: 22
153.51.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:44:5f:bb:83:da:0e:9f:e7:db:b0:7f:16:c8:c5:aa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c07bf3b733a5c3a71d9ca8c3626948df712705b
Validity
Not Before: Mar 31 14:50:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c412367d7ac7510219850fa47d759a4799e5bc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:70:e4:70:af:df:ce:b0:bf:95:6d:79:62:
db:80:bc:e4:c5:10:42:ee:a0:5b:da:02:15:fe:9c:
2d:44:cd:4c:4a:3f:9a:a6:c5:34:f7:5a:d9:06:61:
8a:a1:d6:3c:69:60:fc:c4:48:3e:c2:2f:66:59:ab:
d8:03:9a:ef:47:b2:e7:ed:8e:7f:d4:c9:14:db:fe:
21:9d:c5:69:f9:77:9d:50:d0:3d:2c:1e:bc:e5:b2:
23:2e:e0:b8:7b:02:eb:5a:15:f2:5e:c2:f1:76:d5:
fa:a8:eb:ec:d0:58:1a:d0:5d:20:9a:56:e9:b3:e5:
b4:e7:87:d9:9c:9d:47:54:0f:ed:6c:f4:2c:2c:57:
24:89:68:56:16:9d:21:c6:8f:be:9e:d5:71:d3:58:
db:bc:23:dd:7b:ae:44:ce:c5:59:f1:5f:ad:a2:82:
26:df:94:44:d0:ef:fc:c9:df:a3:53:e8:0a:bd:cf:
76:98:03:3f:a1:68:70:70:cb:e0:79:17:fd:f6:a5:
fe:24:8f:76:e6:ee:d2:12:1a:6a:98:54:3b:90:be:
93:79:4d:56:5d:fe:9c:06:c9:3f:4b:a2:8a:39:97:
80:27:88:0d:93:39:ed:60:2b:f1:5e:cc:f3:d3:67:
c3:a5:53:01:12:bf:aa:49:19:2c:24:bc:97:1c:24:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:36:7D:7A:C7:51:02:19:85:0F:A4:7D:75:9A:47:99:E5:BC:4B
X509v3 Authority Key Identifier:
keyid:2C:07:BF:3B:73:3A:5C:3A:71:D9:CA:8C:36:26:94:8D:F7:12:70:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LAe_O3M6XDpx2cqMNiaUjfcScFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/xBI2fXrHUQIZhQ-kfXWaR5nlvEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/160905-126b-47df-9899-1199bb979d5a/1/LAe_O3M6XDpx2cqMNiaUjfcScFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.51.32.0-153.51.45.255
153.51.47.0-153.51.49.255
153.51.51.0-153.51.63.255
153.51.96.0/20
Signature Algorithm: sha256WithRSAEncryption
17:16:c8:82:6b:1a:1c:1e:02:d0:40:6d:f7:a8:e0:3f:0b:cd:
49:00:56:da:bf:a2:87:bf:4c:2b:eb:68:7e:30:93:ec:5a:b8:
54:8e:59:7f:fb:88:69:a7:ce:1d:8e:c7:53:a6:70:24:0c:03:
31:08:14:41:b6:81:1f:dd:30:7e:2b:77:7d:51:25:bd:44:37:
b1:68:28:26:96:fd:fa:f4:72:f7:d0:45:a0:68:8f:81:bf:89:
a9:22:07:31:72:13:c5:52:83:d4:bd:6f:c2:24:6d:ab:f2:7d:
cb:fe:33:44:98:b1:04:19:42:00:52:b5:5d:f0:62:c5:40:ca:
2e:13:44:9b:b1:0b:20:9a:6a:8c:d5:aa:b9:01:be:a8:95:d7:
32:06:f8:a9:cc:4c:bb:bd:49:9d:1b:cf:48:36:d9:5a:51:40:
03:3b:26:6b:28:28:27:3d:66:7b:7b:29:f5:11:f2:f8:8d:10:
79:51:a4:35:57:2c:90:ed:fd:e3:15:8d:fc:a3:2e:2e:d9:e1:
d5:87:0d:3e:50:17:b0:2f:81:e8:8d:cf:9d:c2:c7:9f:86:ef:
6e:e4:2f:b9:b1:ad:69:9c:30:74:05:e8:26:8b:13:fd:eb:e2:
17:ae:6f:af:e8:f0:2a:f0:cd:1a:14:62:18:dc:18:fd:dc:cb:
c4:56:3e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:51 2026 by rpki-client