Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvBzvMJ27SD8ycUxebORRf5V1ro.roa
File: LvBzvMJ27SD8ycUxebORRf5V1ro.roa (raw, json)
Hash identifier: ltjyUc7lEg3SacwyGGGSHJ+o37ltW5ZezEyUsbLkIfY=
Subject key identifier: 2E:F0:73:BC:C2:76:ED:20:FC:C9:C5:31:79:B3:91:45:FE:55:D6:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A15FF9BA40DDD865DB7A1DCF026632974C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvBzvMJ27SD8ycUxebORRf5V1ro.roa
Signing time: Wed 21 Oct 2026 19:39:24 +0000
ROA not before: Wed 21 Oct 2026 19:39:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215228
IP address blocks: 151.243.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5f:f9:ba:40:dd:d8:65:db:7a:1d:cf:02:66:32:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 21 19:39:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2ef073bcc276ed20fcc9c53179b39145fe55d6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e4:6b:10:b3:6d:41:45:18:96:e1:d9:a1:a4:
3f:3c:d2:c4:f9:47:bb:68:92:79:f3:a4:3a:09:03:
5c:88:c8:90:de:89:a8:80:e5:a9:3a:2f:1a:d7:48:
dd:e8:33:c1:af:fa:81:64:c8:37:c7:74:00:f7:02:
c1:c4:ba:89:82:8b:52:e6:ef:21:2a:b3:b0:7a:5b:
f6:d2:5f:9a:80:f1:2d:c9:32:0e:4e:a9:58:a6:65:
a9:3e:4c:ce:f7:0c:36:6d:d9:ab:a5:35:98:05:2d:
2b:1e:e5:9a:06:1f:d3:e2:7e:0e:21:15:ef:10:c6:
ec:de:ea:70:49:8f:c2:af:6e:4d:0c:2a:59:0f:a1:
bc:62:13:4e:2e:cf:9f:24:57:ac:78:d0:d2:3e:04:
26:17:0c:59:06:da:e2:b3:99:c1:3c:a0:41:17:3d:
3c:70:04:75:e4:f7:41:76:3f:84:43:46:eb:b1:57:
e7:ff:2f:71:5b:6e:da:7b:0d:cb:92:f8:e1:15:c8:
6f:72:67:58:5b:90:57:5e:c3:c3:11:82:80:9d:ec:
1b:80:2d:03:ca:31:1c:0b:16:9f:c5:b8:65:cf:63:
ff:95:19:cf:4e:1b:bc:6d:c7:a9:fd:f1:d3:de:69:
74:23:64:5b:ff:cb:10:e4:5b:1c:18:08:70:5f:ff:
6f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:F0:73:BC:C2:76:ED:20:FC:C9:C5:31:79:B3:91:45:FE:55:D6:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/LvBzvMJ27SD8ycUxebORRf5V1ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.146.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7e:48:41:11:6a:9e:ef:47:2e:63:84:77:5d:4b:ae:a4:a9:
a3:dd:58:7b:f9:d4:9a:37:b6:9b:42:9e:0e:b7:37:39:db:8c:
39:88:65:12:1a:06:0f:44:02:f2:6d:de:83:82:16:81:6e:2b:
e4:72:2b:8f:b3:02:80:ac:35:b8:fd:ec:21:4e:dc:ca:54:1e:
41:ea:af:cb:99:77:f8:57:33:6b:5a:5a:e0:80:e0:2d:fe:f7:
6c:6e:3a:0f:e6:24:c2:43:a0:ab:ad:cc:ad:2a:9a:83:9d:93:
59:de:06:dc:41:bc:8f:4d:c2:b8:61:fa:d7:83:3f:6a:a9:47:
fc:a8:15:24:1d:7c:3e:12:56:b9:16:82:a9:a2:ff:a6:2b:51:
83:e9:95:30:5a:ab:4c:6a:55:ad:bf:80:e7:2a:46:44:0a:34:
3d:05:6f:8b:a6:2b:88:4d:c2:84:17:1a:d7:a8:e2:dd:bc:53:
b9:9f:ff:28:19:61:9b:10:11:1d:63:02:2f:d6:5c:44:4d:03:
5b:38:81:b4:6a:eb:3a:d2:7f:3a:f6:26:50:8f:7a:e4:24:47:
b1:54:d3:b9:88:5a:ff:32:79:fc:c5:c0:9e:4c:c6:98:ce:eb:
92:56:a5:9b:f9:8d:3c:4a:ee:5b:a2:60:4a:4a:79:dd:a5:ff:
9f:9e:be:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaFf+bpA3dhl23odzwJmMpdMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDIxMTkzOTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZWYwNzNiY2MyNzZlZDIwZmNjOWM1MzE3OWIzOTE0NWZlNTVkNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlORrELNtQUUYluHZoaQ/PNLE+Ue7
aJJ586Q6CQNciMiQ3omogOWpOi8a10jd6DPBr/qBZMg3x3QA9wLBxLqJgotS5u8h
KrOwelv20l+agPEtyTIOTqlYpmWpPkzO9ww2bdmrpTWYBS0rHuWaBh/T4n4OIRXv
EMbs3upwSY/Cr25NDCpZD6G8YhNOLs+fJFeseNDSPgQmFwxZBtris5nBPKBBFz08
cAR15PdBdj+EQ0brsVfn/y9xW27aew3LkvjhFchvcmdYW5BXXsPDEYKAnewbgC0D
yjEcCxafxbhlz2P/lRnPThu8bcep/fHT3ml0I2Rb/8sQ5FscGAhwX/9vJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC7wc7zCdu0g/MnFMXmzkUX+Vda6MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvTHZCenZNSjI3U0Q4eWNVeGViT1JSZjVWMXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/OSMA0G
CSqGSIb3DQEBCwUAA4IBAQC2fkhBEWqe70cuY4R3XUuupKmj3Vh7+dSaN7abQp4O
tzc524w5iGUSGgYPRALybd6DghaBbivkciuPswKArDW4/ewhTtzKVB5B6q/LmXf4
VzNrWlrggOAt/vdsbjoP5iTCQ6CrrcytKpqDnZNZ3gbcQbyPTcK4YfrXgz9qqUf8
qBUkHXw+Ela5FoKpov+mK1GD6ZUwWqtMalWtv4DnKkZECjQ9BW+LpiuITcKEFxrX
qOLdvFO5n/8oGWGbEBEdYwIv1lxETQNbOIG0aus60n869iZQj3rkJEexVNO5iFr/
Mnn8xcCeTMaYzuuSVqWb+Y08Su5bomBKSnndpf+fnr5U
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:33:56 2026 by rpki-client