Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/l8XwbbJw24-quxZEn6DNPzCPtQ8.roa
File: l8XwbbJw24-quxZEn6DNPzCPtQ8.roa (raw, json)
Hash identifier: X6CZp/lJQVG23+jPNOS99TJV1YAbrmzFBiz/CMHczr0=
Subject key identifier: 97:C5:F0:6D:B2:70:DB:8F:AA:BB:16:44:9F:A0:CD:3F:30:8F:B5:0F
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019EAFE9BD7804E33F92B53EFAC881122BE1
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/l8XwbbJw24-quxZEn6DNPzCPtQ8.roa
Signing time: Wed 10 Jun 2026 05:03:11 +0000
ROA not before: Wed 10 Jun 2026 05:03:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206596
IP address blocks: 45.135.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:af:e9:bd:78:04:e3:3f:92:b5:3e:fa:c8:81:12:2b:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: Jun 10 05:03:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=97c5f06db270db8faabb16449fa0cd3f308fb50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2b:5d:56:7d:5e:25:9e:bb:fb:26:72:44:dc:
be:4c:04:ae:68:8c:c1:62:e6:17:23:1f:b5:e0:e9:
67:71:c3:2e:e4:a8:47:11:0e:4c:94:fd:ee:c4:7e:
94:20:67:42:10:de:79:fd:ae:4a:ff:0c:34:9f:e9:
50:02:f7:19:31:54:88:ea:08:68:5b:8a:37:b0:64:
5d:97:da:73:0d:5e:88:fb:f5:9c:81:eb:de:a5:29:
37:a7:6d:2a:c4:d4:03:b8:51:6f:27:bb:40:2b:1d:
1a:7c:4e:2b:83:66:9d:c3:ff:cb:46:fa:24:9c:9f:
4b:2a:d5:bb:b5:3c:7d:21:2e:f7:9b:8b:96:9a:28:
8c:aa:96:f2:e9:81:f0:f3:e3:84:50:5c:88:7a:8e:
c3:20:79:4d:92:e2:b2:a1:6e:e4:3d:be:8d:a2:f7:
6f:c1:f3:5d:b7:e9:33:76:eb:6d:39:41:f7:c4:1e:
50:d2:81:c9:0c:60:22:69:60:2b:ff:33:70:8e:55:
14:2a:e7:46:35:01:fd:e0:07:6b:04:cf:3a:8d:b8:
cb:ad:74:72:7f:61:4c:ab:87:28:83:45:80:2e:bb:
8d:72:5f:c9:0c:96:7c:75:e5:d7:46:65:41:db:f3:
e2:c6:92:06:13:d4:d0:f2:b3:2b:be:27:f0:aa:a1:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C5:F0:6D:B2:70:DB:8F:AA:BB:16:44:9F:A0:CD:3F:30:8F:B5:0F
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/l8XwbbJw24-quxZEn6DNPzCPtQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.242.0/24
Signature Algorithm: sha256WithRSAEncryption
29:c5:b8:8d:88:e3:e7:01:37:00:7d:af:33:58:83:c7:e2:de:
79:29:59:8a:a0:53:45:a7:7b:01:a9:78:be:57:f8:2a:7c:07:
c3:f7:26:f3:5a:c2:c7:6b:e7:ef:d5:5f:66:45:b3:3c:1d:34:
14:d6:86:5c:a2:ce:69:ff:3a:43:c6:6e:a3:97:da:59:ce:ce:
d4:5b:64:f6:3b:13:b4:32:5c:3e:89:5a:ab:09:aa:37:a7:87:
0a:b0:da:5d:1f:b3:75:0e:e0:f3:b6:c8:1e:99:a0:d3:2b:7b:
c7:a9:0e:aa:67:3f:76:8a:e9:fe:b6:94:d3:01:f6:d8:71:75:
2f:d1:30:1c:67:93:ff:2d:5e:f7:d1:ec:f8:12:52:94:64:8f:
da:c0:90:ff:62:14:13:81:7d:2b:8d:e9:71:9f:12:7b:6c:46:
78:1f:82:cc:36:15:c9:1d:b5:ed:ec:a5:8b:ca:e4:48:35:0b:
39:fd:c1:93:51:53:26:d2:d7:29:f0:99:d5:ee:8f:ed:52:83:
03:dc:a5:20:8e:ae:0e:98:27:d3:46:1b:08:0b:37:7a:3e:4b:
8a:ae:46:97:bb:3c:b9:4d:92:9a:37:21:23:c1:5c:71:b6:fa:
bc:c4:b4:6f:18:4a:68:b4:50:27:9b:02:ed:0c:2d:c7:62:02:
c1:82:87:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6v6b14BOM/krU++siBEivhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj
YTQzYzUwHhcNMjYwNjEwMDUwMzExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5N2M1ZjA2ZGIyNzBkYjhmYWFiYjE2NDQ5ZmEwY2QzZjMwOGZiNTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkitdVn1eJZ67+yZyRNy+TASuaIzB
YuYXIx+14OlnccMu5KhHEQ5MlP3uxH6UIGdCEN55/a5K/ww0n+lQAvcZMVSI6gho
W4o3sGRdl9pzDV6I+/WcgevepSk3p20qxNQDuFFvJ7tAKx0afE4rg2adw//LRvok
nJ9LKtW7tTx9IS73m4uWmiiMqpby6YHw8+OEUFyIeo7DIHlNkuKyoW7kPb6Novdv
wfNdt+kzduttOUH3xB5Q0oHJDGAiaWAr/zNwjlUUKudGNQH94AdrBM86jbjLrXRy
f2FMq4cog0WALruNcl/JDJZ8deXXRmVB2/PixpIGE9TQ8rMrvifwqqGp4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJfF8G2ycNuPqrsWRJ+gzT8wj7UPMB8GA1UdIwQY
MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt
YWNmYzNkMmMyNTIyLzEvbDhYd2JiSncyNC1xdXhaRW42RE5QekNQdFE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy
LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfyMA0G
CSqGSIb3DQEBCwUAA4IBAQApxbiNiOPnATcAfa8zWIPH4t55KVmKoFNFp3sBqXi+
V/gqfAfD9ybzWsLHa+fv1V9mRbM8HTQU1oZcos5p/zpDxm6jl9pZzs7UW2T2OxO0
Mlw+iVqrCao3p4cKsNpdH7N1DuDztsgemaDTK3vHqQ6qZz92iun+tpTTAfbYcXUv
0TAcZ5P/LV730ez4ElKUZI/awJD/YhQTgX0rjelxnxJ7bEZ4H4LMNhXJHbXt7KWL
yuRINQs5/cGTUVMm0tcp8JnV7o/tUoMD3KUgjq4OmCfTRhsICzd6PkuKrkaXuzy5
TZKaNyEjwVxxtvq8xLRvGEpotFAnmwLtDC3HYgLBgoch
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:03 2026 by rpki-client