Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LBCDXhJkivSplxrzeWIWrbGl6ak.roa
File: LBCDXhJkivSplxrzeWIWrbGl6ak.roa (raw, json)
Hash identifier: LiKyzatPA76E3QaQcLuX23XTlryyiD0kfWhkNCdxato=
Subject key identifier: 2C:10:83:5E:12:64:8A:F4:A9:97:1A:F3:79:62:16:AD:B1:A5:E9:A9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1CA6DC0070B529479E155437887BACDE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LBCDXhJkivSplxrzeWIWrbGl6ak.roa
Signing time: Wed 01 Jul 2026 07:48:44 +0000
ROA not before: Wed 01 Jul 2026 07:48:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20326
IP address blocks: 151.241.65.0/24 maxlen: 24
151.241.178.0/24 maxlen: 24
151.243.244.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.171.0/24 maxlen: 24
151.245.8.0/21 maxlen: 24
151.247.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a6:dc:00:70:b5:29:47:9e:15:54:37:88:7b:ac:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:48:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2c10835e12648af4a9971af3796216adb1a5e9a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:74:42:69:83:be:54:5f:aa:b2:f3:72:6d:4b:
75:56:85:0f:e7:e0:cc:03:fc:3c:13:19:97:c5:fc:
5d:7f:45:f5:14:2e:b5:88:8f:a6:e0:b6:8a:29:b8:
6f:fd:b0:e2:30:c3:fc:c8:19:69:36:50:21:54:60:
05:44:f0:2f:d1:7d:b1:c8:cc:6b:e3:25:01:15:a6:
fb:3c:0b:cd:86:83:d7:7f:0a:9e:a8:79:29:71:b6:
77:11:98:91:28:c4:0e:32:30:fb:62:4e:ce:6c:a2:
59:7b:c8:d6:25:c6:0d:b2:ee:2a:46:6d:4a:13:29:
15:30:8a:30:d4:d7:05:97:0e:d5:69:1c:75:9c:c6:
8d:5c:a7:f0:67:fd:5b:6e:e8:f6:ab:ae:ff:8b:db:
50:83:62:7d:9a:ae:6b:67:f7:4c:11:17:b2:29:a5:
01:05:f6:26:63:e4:f1:d0:3f:a9:4c:c2:2b:88:fb:
05:7a:3f:5b:a0:d4:2b:75:b1:a3:17:47:5f:32:4d:
25:55:a8:55:55:f3:97:e3:56:1a:de:12:56:04:ca:
83:67:0c:bd:d2:fc:26:58:25:ad:1c:09:e9:bc:60:
a6:17:ed:d0:0c:56:1f:86:5c:90:85:db:4a:e5:7a:
e0:70:aa:10:0a:95:e4:ed:38:a6:a2:2d:7e:f7:2c:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:10:83:5E:12:64:8A:F4:A9:97:1A:F3:79:62:16:AD:B1:A5:E9:A9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LBCDXhJkivSplxrzeWIWrbGl6ak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.65.0/24
151.241.178.0/24
151.243.244.0/24
151.244.2.0/24
151.244.171.0/24
151.245.8.0/21
151.247.132.0/24
Signature Algorithm: sha256WithRSAEncryption
47:26:1e:76:88:b5:a3:c3:aa:d1:42:73:71:6d:ad:e0:95:f9:
9a:76:c1:34:dd:5a:6d:c2:80:60:1b:fb:17:10:c8:fc:3f:b8:
62:f2:42:eb:c4:fc:b7:c6:8e:a5:93:5b:7f:4e:ff:5a:a8:0c:
29:07:e5:07:d8:e9:6b:da:9c:a2:59:11:e4:5c:9b:cf:c2:fe:
c6:ef:21:0c:54:a1:02:b5:f0:08:f7:bd:e8:f0:ad:52:c6:c3:
0c:6a:d2:9d:8f:05:0c:4e:9e:42:86:59:37:47:bf:49:9c:7b:
a7:80:99:58:bf:45:0a:65:ec:89:0f:98:45:7b:41:71:ce:16:
5c:bc:71:b8:42:26:37:5d:fe:87:09:a3:cf:62:76:2d:24:2b:
ac:df:e6:53:6c:9f:96:46:e7:d9:59:55:ba:77:bd:48:58:cd:
30:78:cf:fe:d0:f6:75:8a:90:5c:52:c0:d5:56:22:c5:03:3e:
b3:65:2d:02:2d:8b:91:3e:21:0d:a9:aa:58:6e:e8:a7:26:d1:
dc:a0:f3:a2:61:8e:1b:e3:b4:8b:4f:9f:94:06:37:1e:18:54:
f8:2b:01:ca:37:fd:93:3a:0d:ee:06:f0:17:8c:5b:0e:b4:76:
c9:44:8d:34:60:09:79:82:56:ba:7f:5c:23:d1:a3:b2:7e:82:
72:c7:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client