Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CY9hEBVr199JtSaxRPsmKcYRYMk.roa
File: CY9hEBVr199JtSaxRPsmKcYRYMk.roa (raw, json)
Hash identifier: tT4Bie37m1Wz+09W98HR7XUlVc97RWmb4e5Nj45E028=
Subject key identifier: 09:8F:61:10:15:6B:D7:DF:49:B5:26:B1:44:FB:26:29:C6:11:60:C9
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E9409300631D3E897224386E00C5C0C4F
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CY9hEBVr199JtSaxRPsmKcYRYMk.roa
Signing time: Thu 04 Jun 2026 19:08:10 +0000
ROA not before: Thu 04 Jun 2026 19:08:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 138.249.15.0/24 maxlen: 24
138.249.22.0/24 maxlen: 24
138.249.23.0/24 maxlen: 24
138.249.102.0/24 maxlen: 24
138.249.103.0/24 maxlen: 24
138.249.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:94:09:30:06:31:d3:e8:97:22:43:86:e0:0c:5c:0c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jun 4 19:08:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=098f6110156bd7df49b526b144fb2629c61160c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d2:17:59:3c:a9:67:45:bc:53:0d:42:38:29:
4e:77:d7:d5:94:ef:e2:8a:a4:be:8b:25:e6:2a:30:
57:e8:61:dc:41:9c:50:ca:2c:e0:7a:dd:ef:2b:28:
d0:2d:47:a5:6b:94:95:04:f8:ac:75:8a:88:d2:21:
a3:6c:e4:aa:53:d7:73:97:c7:47:fe:1c:c8:f7:0e:
47:fc:ae:d9:5d:54:3b:ff:cf:b1:c5:ae:d5:ea:29:
ff:41:63:75:ad:90:e6:4d:3f:44:39:e3:97:39:b8:
15:be:53:ce:f9:74:5a:4c:44:ab:f9:b6:30:61:e7:
de:54:8b:21:a8:6d:56:bd:ed:bc:6e:ec:ec:c1:95:
f7:b1:3c:88:ee:71:7f:94:1c:fd:4c:80:33:b1:19:
ed:6f:46:7c:65:68:3f:68:de:9a:2f:4a:2f:ba:c0:
e5:92:e1:ae:a8:8c:53:79:1c:88:ce:dd:2c:94:d5:
c2:f6:81:4a:f9:a2:09:d4:16:4a:8f:20:94:54:b8:
cf:fa:b0:1e:16:35:b4:3f:41:3a:6d:ed:6f:31:66:
f3:90:0e:d0:ed:35:03:5b:9e:fd:1f:69:b1:b9:5c:
15:45:0d:eb:20:b3:a6:34:e1:7c:9d:53:a0:50:91:
1d:bc:a4:b1:9a:47:51:ba:ee:10:4b:83:f8:a4:3c:
a0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8F:61:10:15:6B:D7:DF:49:B5:26:B1:44:FB:26:29:C6:11:60:C9
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/CY9hEBVr199JtSaxRPsmKcYRYMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
138.249.22.0/23
138.249.102.0/23
138.249.112.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ec:95:53:c5:8d:31:d8:6d:66:88:88:55:b9:d3:15:ed:91:
aa:62:9b:75:1a:2e:6a:83:17:40:1a:9f:b6:fe:df:b2:a3:a6:
3f:21:4f:43:30:a6:6b:d3:53:49:78:07:b4:1a:ba:83:68:96:
c1:4e:a2:30:77:15:fd:f7:1e:fd:18:dc:61:ed:87:06:10:80:
15:d4:05:96:21:8c:8d:c2:b5:00:4c:81:b0:b3:b3:a0:25:c2:
91:ff:bb:7a:65:f3:b7:42:51:5f:92:23:9a:19:78:dc:9c:df:
88:7a:9d:ae:55:14:4a:70:ab:96:cc:73:71:19:32:b1:9c:99:
ed:62:b7:9c:49:be:23:4c:79:45:6f:8c:88:14:f7:06:f8:56:
25:a5:c9:e3:ae:42:9a:1d:9f:da:65:d3:aa:e5:1e:1c:2d:55:
0f:bc:fe:51:2b:f3:ad:e9:49:07:d8:a0:48:c2:ba:a4:26:b3:
53:7c:a0:69:82:5b:69:5e:83:00:55:ed:80:a0:d2:7b:77:88:
e8:dc:f3:c0:0a:64:ea:cc:f1:1b:af:dc:7d:99:cd:ed:bf:5d:
32:29:7f:6b:d6:ef:0a:92:94:e5:d9:9a:77:5e:99:7e:57:9d:
3e:41:b5:2a:1c:b1:61:09:7c:ab:d7:02:f1:4c:fd:97:1a:c1:
ce:94:5d:b8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZ6UCTAGMdPolyJDhuAMXAxPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYwNjA0MTkwODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOThmNjExMDE1NmJkN2RmNDliNTI2YjE0NGZiMjYyOWM2MTE2MGM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dIXWTypZ0W8Uw1COClOd9fVlO/i
iqS+iyXmKjBX6GHcQZxQyizget3vKyjQLUela5SVBPisdYqI0iGjbOSqU9dzl8dH
/hzI9w5H/K7ZXVQ7/8+xxa7V6in/QWN1rZDmTT9EOeOXObgVvlPO+XRaTESr+bYw
YefeVIshqG1Wve28buzswZX3sTyI7nF/lBz9TIAzsRntb0Z8ZWg/aN6aL0ovusDl
kuGuqIxTeRyIzt0slNXC9oFK+aIJ1BZKjyCUVLjP+rAeFjW0P0E6be1vMWbzkA7Q
7TUDW579H2mxuVwVRQ3rILOmNOF8nVOgUJEdvKSxmkdRuu4QS4P4pDygCwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAmPYRAVa9ffSbUmsUT7JinGEWDJMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvQ1k5aEVCVnIxOTlKdFNheFJQc21LY1lSWU1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAivkPAwQB
ivkWAwQBivlmAwQAivlwMA0GCSqGSIb3DQEBCwUAA4IBAQCO7JVTxY0x2G1miIhV
udMV7ZGqYpt1Gi5qgxdAGp+2/t+yo6Y/IU9DMKZr01NJeAe0GrqDaJbBTqIwdxX9
9x79GNxh7YcGEIAV1AWWIYyNwrUATIGws7OgJcKR/7t6ZfO3QlFfkiOaGXjcnN+I
ep2uVRRKcKuWzHNxGTKxnJntYrecSb4jTHlFb4yIFPcG+FYlpcnjrkKaHZ/aZdOq
5R4cLVUPvP5RK/Ot6UkH2KBIwrqkJrNTfKBpgltpXoMAVe2AoNJ7d4jo3PPACmTq
zPEbr9x9mc3tv10yKX9r1u8KkpTl2Zp3Xpl+V50+QbUqHLFhCXyr1wLxTP2XGsHO
lF24
-----END CERTIFICATE-----
Generated at Sat Jun 6 12:03:56 2026 by rpki-client