Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LW2wLDI7DiEyI2x3hpEixMTK6o0.roa
File: LW2wLDI7DiEyI2x3hpEixMTK6o0.roa (raw, json)
Hash identifier: BPU2yORsydY32P/c2hwMRyfm0D7yKHnSumzNKZtJWng=
Subject key identifier: 2D:6D:B0:2C:32:3B:0E:21:32:23:6C:77:86:91:22:C4:C4:CA:EA:8D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A13FB837D2B36B842B3498EBB2443D15F5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LW2wLDI7DiEyI2x3hpEixMTK6o0.roa
Signing time: Thu 15 Oct 2026 13:19:59 +0000
ROA not before: Thu 15 Oct 2026 13:19:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 151.243.19.0/24 maxlen: 24
151.243.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:b8:37:d2:b3:6b:84:2b:34:98:eb:b2:44:3d:15:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 15 13:19:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2d6db02c323b0e2132236c77869122c4c4caea8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:97:1b:1f:a5:7a:b9:36:54:3a:5f:7f:fb:3a:
eb:ab:2e:08:ff:81:b5:05:1f:69:d8:a0:af:d0:37:
75:33:2b:f2:54:f2:b7:cf:c9:4f:a0:2a:e1:6d:30:
7d:21:0a:88:db:2b:39:53:dc:6d:d4:c4:19:19:c1:
88:d2:49:d8:35:7d:8e:31:75:06:a4:af:bc:f8:34:
2c:e6:dc:cb:08:9d:81:d2:d7:54:11:10:2c:a2:59:
f6:d6:5e:81:3a:ac:d0:ad:e2:ae:0a:91:d9:be:cf:
32:27:9c:09:7b:ca:2b:8b:c4:18:46:f5:67:be:8b:
ce:4b:55:bd:62:c9:e0:cf:06:a1:02:5a:b3:6b:b6:
a3:f5:d3:c8:c0:27:45:6e:cc:16:fd:18:40:b6:21:
62:cc:16:87:26:21:d9:fc:93:cb:a8:2a:a8:b0:e5:
3c:0a:c1:e9:95:55:ba:68:04:ef:a5:d0:5f:26:2a:
c0:93:33:74:b6:48:9f:de:2f:92:c3:b4:21:a4:66:
02:c5:f7:0c:90:b6:88:16:f4:c9:7d:ee:30:f5:c1:
17:07:c3:39:cb:64:7b:12:af:d1:90:72:a3:b8:b7:
f9:32:a3:ca:64:a5:82:10:9c:45:c8:9c:51:94:4c:
1c:37:a8:ba:25:b2:b3:5e:b5:1d:57:8c:71:59:b5:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:6D:B0:2C:32:3B:0E:21:32:23:6C:77:86:91:22:C4:C4:CA:EA:8D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LW2wLDI7DiEyI2x3hpEixMTK6o0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.19.0/24
151.243.35.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:b7:17:12:41:5d:d8:61:d0:79:32:6f:b8:56:0a:37:35:48:
5e:a2:69:40:49:bf:05:26:be:75:d2:db:cd:7b:f1:88:bb:55:
f1:69:9f:11:b9:27:d3:8d:fb:e2:cf:a2:3a:76:d3:ac:4c:c7:
a2:f2:58:0f:cf:e1:30:58:7b:1c:8f:d7:ad:e3:51:f3:13:1a:
ef:fc:cd:0e:b9:88:2c:56:79:6a:08:a3:03:13:47:12:5a:0b:
e2:7a:ee:94:dd:65:66:ba:00:e6:cd:3f:ed:d2:96:4d:98:91:
d8:2e:29:95:04:8c:79:e7:6f:95:07:97:ba:ff:82:74:3f:85:
9b:c6:ae:7f:00:40:47:4d:3d:f2:e3:3b:83:80:f6:5f:5e:be:
2c:59:96:7f:21:a5:ae:45:c3:f1:6b:bf:30:28:75:47:74:91:
7c:af:fb:a8:d3:b2:12:90:83:24:ef:00:8f:03:32:7a:a3:54:
ac:4c:1d:ad:29:60:8c:75:b1:0b:0a:90:92:80:71:cb:e5:b3:
57:79:58:0c:7c:04:98:d3:f0:57:80:2a:f6:13:31:1f:37:bf:
57:e8:d9:6f:41:11:00:8e:25:db:71:e5:d7:f1:84:5c:b4:99:
5b:4c:37:e4:01:80:8d:82:b0:95:5b:4c:fc:80:14:48:f7:cf:
23:a0:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:32 2026 by rpki-client