Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLO2D3VtWJ2mWlaDjgKTiW70fRY.roa
File: LLO2D3VtWJ2mWlaDjgKTiW70fRY.roa (raw, json)
Hash identifier: TpCu72Pkpid3229Lhaealg/hnu0OeBE/LPEx09X6Wqo=
Subject key identifier: 2C:B3:B6:0F:75:6D:58:9D:A6:5A:56:83:8E:02:93:89:6E:F4:7D:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FB7FFB6BDEAC1301E9C5CAFBB0A2967CC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLO2D3VtWJ2mWlaDjgKTiW70fRY.roa
Signing time: Fri 31 Jul 2026 11:46:56 +0000
ROA not before: Fri 31 Jul 2026 11:46:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151576
IP address blocks: 151.242.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:13:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b7:ff:b6:bd:ea:c1:30:1e:9c:5c:af:bb:0a:29:67:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 31 11:46:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2cb3b60f756d589da65a56838e0293896ef47d16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:50:25:22:ac:5a:24:1e:f3:85:c3:c2:1e:77:
b8:3d:20:10:0b:26:d0:74:83:f8:29:58:e7:93:d3:
70:8f:16:9a:bb:de:8d:d3:eb:ee:0c:e8:c6:c1:c3:
28:77:30:1a:ed:65:f1:6f:33:af:1b:5a:25:7b:76:
84:84:e4:2c:9c:c2:5a:1a:e5:f7:13:96:d4:63:37:
cf:42:52:88:59:aa:2d:e2:bc:f4:90:bc:a9:95:8e:
b5:dc:52:9f:b0:49:88:ea:d4:86:7a:b5:89:be:16:
2b:e2:0a:4c:b9:bb:73:df:72:aa:b0:93:8f:f4:e8:
fe:ed:91:41:ce:a7:94:27:d9:e8:6a:36:bb:0f:63:
8f:8d:75:f7:e3:e8:28:f9:9f:da:91:36:d4:ad:c5:
e7:e9:a4:6d:6a:72:57:c2:04:69:9c:96:e1:e4:86:
47:d5:0d:d6:b9:dc:bf:0d:3a:17:3c:3b:f4:71:c0:
80:50:9a:76:4d:05:3c:6a:9c:07:b2:2b:51:49:66:
e8:7f:18:f9:75:43:5b:db:50:48:27:2b:18:1f:e0:
c5:cd:6f:a4:62:52:cd:cb:48:33:a8:7d:80:67:09:
e0:2f:c1:a7:95:96:9f:da:af:72:2b:85:98:67:7e:
3b:d1:18:06:b6:5b:5c:47:c7:b2:3c:d9:75:f5:66:
89:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B3:B6:0F:75:6D:58:9D:A6:5A:56:83:8E:02:93:89:6E:F4:7D:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LLO2D3VtWJ2mWlaDjgKTiW70fRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.173.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b0:b6:f3:d5:e6:9a:c9:4b:b0:97:47:d7:27:29:0b:d1:1b:
94:b0:4a:ba:00:37:76:f4:40:0c:1e:4a:4f:86:fc:85:53:1c:
c2:d0:82:db:48:62:10:d8:95:f5:25:3a:12:2c:3d:35:33:8f:
08:28:ab:98:2e:de:92:85:07:3b:69:0a:71:00:74:62:52:ec:
c8:09:d1:9c:2e:52:31:1c:16:d3:5c:73:9c:fb:22:9d:38:5e:
e0:3e:77:d4:41:24:1b:0c:1b:c4:2f:fd:e2:64:e5:8c:a9:3a:
ff:06:bf:34:c8:2b:15:9e:31:46:32:7c:6a:10:12:63:04:ca:
1c:ac:7e:2c:c8:89:23:05:5d:a7:76:c5:ee:25:78:c7:d9:9f:
62:43:cb:6c:5d:08:56:57:da:e0:fb:7c:de:65:34:fb:e7:7c:
ba:19:e1:90:3e:c2:96:80:5a:e1:a4:9a:4c:2c:5f:e4:b5:75:
da:35:5a:dd:21:14:94:c7:f9:5e:95:18:0d:54:d1:90:0c:5f:
e7:0b:ea:60:a8:f3:b9:df:64:39:54:2d:63:c0:87:1a:1d:d7:
f1:3d:d5:74:e0:95:54:b3:94:f1:49:d5:60:41:c6:68:40:61:
5a:f3:af:96:f5:9e:de:27:cc:d3:dc:26:d4:e0:a3:bb:d4:d4:
1f:5b:bf:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:29 2026 by rpki-client