Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lpXSoiviBwzwl8Og7GvYvE7Ed5U.roa
File: lpXSoiviBwzwl8Og7GvYvE7Ed5U.roa (raw, json)
Hash identifier: ncIP9e+7OAo0IbOIO643wjClE+3s4uBN+RD7fn14q7g=
Subject key identifier: 96:95:D2:A2:2B:E2:07:0C:F0:97:C3:A0:EC:6B:D8:BC:4E:C4:77:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019A162A513FF56C8AB97A25961B4CB29EB2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lpXSoiviBwzwl8Og7GvYvE7Ed5U.roa
Signing time: Fri 24 Oct 2025 12:21:03 +0000
ROA not before: Fri 24 Oct 2025 12:21:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 395517
IP address blocks: 151.243.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:2a:51:3f:f5:6c:8a:b9:7a:25:96:1b:4c:b2:9e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 24 12:21:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9695d2a22be2070cf097c3a0ec6bd8bc4ec47795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:09:db:92:cd:f0:9a:3c:f4:ae:4f:29:41:af:
5e:a8:30:e5:8e:30:c0:9a:a5:0b:c2:e3:19:46:35:
1f:78:de:b9:0e:84:84:be:56:ef:9c:56:d2:c0:9e:
c5:a7:23:d8:2b:c7:d5:be:79:58:44:cf:86:52:a6:
d2:ed:f9:ac:e4:eb:8a:e8:9b:73:af:70:ad:28:12:
f9:05:42:8b:9d:97:90:b9:36:77:cb:1c:c1:82:99:
d8:a6:bd:0d:01:4f:f0:bf:a9:ed:f7:1c:33:c2:d3:
a3:b8:9f:60:82:b2:8c:00:29:e3:95:32:1c:0b:1f:
66:fe:52:58:96:72:d8:f3:58:91:6a:b6:f0:13:96:
45:bf:7e:89:6b:4e:ee:02:a3:51:c6:52:0c:22:cf:
62:b7:f9:71:c0:b4:2b:e3:78:0a:21:ca:f1:8b:3e:
ee:8c:3b:24:e4:20:00:c0:fa:fc:7d:03:e1:6a:e0:
fe:da:fd:8b:38:b5:71:94:5d:fb:4d:6f:0e:ff:8f:
4c:7a:9f:25:bd:9b:e6:85:96:fc:bc:37:d7:d6:8a:
2f:cf:b8:ac:a9:ea:f8:2e:d0:70:c2:e6:ef:96:81:
33:83:2f:b3:ec:d8:b9:c5:86:6b:04:f1:0a:cd:f6:
15:74:a7:8c:1f:fe:f8:7e:81:5c:d1:d5:7e:60:9c:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:95:D2:A2:2B:E2:07:0C:F0:97:C3:A0:EC:6B:D8:BC:4E:C4:77:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lpXSoiviBwzwl8Og7GvYvE7Ed5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.14.0/24
Signature Algorithm: sha256WithRSAEncryption
43:fd:f4:52:d7:c5:87:22:ad:b6:b3:5d:dd:f7:a6:65:33:7b:
60:24:fa:6f:47:21:ca:00:05:94:e8:16:45:61:3a:61:71:c2:
8f:d4:33:a5:3c:4e:7c:26:58:f4:db:49:3a:e3:5a:40:f7:a6:
fd:a6:0f:dd:58:35:99:37:e2:4b:7f:8e:ea:81:07:db:0f:cb:
a0:ab:6f:25:c2:d0:1b:b4:04:cb:19:83:3e:9f:6d:3b:76:3c:
5b:2b:1d:86:27:43:c7:8b:25:c7:71:46:6b:af:f6:0f:62:fa:
87:43:c0:90:5e:de:63:81:1b:ff:fe:aa:99:46:d8:da:3d:4a:
43:5c:da:79:01:eb:6f:6a:f1:41:29:c9:50:30:23:b8:07:5e:
3e:6d:9c:48:9d:b4:ca:9f:36:cb:cd:4f:fa:25:8a:af:68:ab:
fd:39:2f:e4:9f:17:f2:93:68:6a:77:fd:f3:de:85:a6:c7:b4:
6d:de:71:28:d5:17:32:76:49:cd:b1:95:e1:b9:ca:43:d1:7c:
8c:02:92:01:d2:48:57:af:99:a3:f7:38:31:96:c6:44:60:d3:
ed:fb:7d:03:47:79:ab:40:56:e8:f5:af:1a:54:76:6b:39:17:
ca:c4:a1:64:a8:fb:55:98:e7:6e:c9:c6:4e:03:54:84:dd:a1:
1d:f6:a6:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZoWKlE/9WyKuXollhtMsp6yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUxMDI0MTIyMTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Njk1ZDJhMjJiZTIwNzBjZjA5N2MzYTBlYzZiZDhiYzRlYzQ3Nzk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Anbks3wmjz0rk8pQa9eqDDljjDA
mqULwuMZRjUfeN65DoSEvlbvnFbSwJ7FpyPYK8fVvnlYRM+GUqbS7fms5OuK6Jtz
r3CtKBL5BUKLnZeQuTZ3yxzBgpnYpr0NAU/wv6nt9xwzwtOjuJ9ggrKMACnjlTIc
Cx9m/lJYlnLY81iRarbwE5ZFv36Ja07uAqNRxlIMIs9it/lxwLQr43gKIcrxiz7u
jDsk5CAAwPr8fQPhauD+2v2LOLVxlF37TW8O/49Mep8lvZvmhZb8vDfX1oovz7is
qer4LtBwwubvloEzgy+z7Ni5xYZrBPEKzfYVdKeMH/74foFc0dV+YJzAywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJaV0qIr4gcM8JfDoOxr2LxOxHeVMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvbHBYU29pdmlCd3p3bDhPZzdHdll2RTdFZDVVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/MOMA0G
CSqGSIb3DQEBCwUAA4IBAQBD/fRS18WHIq22s13d96ZlM3tgJPpvRyHKAAWU6BZF
YTphccKP1DOlPE58Jlj020k641pA96b9pg/dWDWZN+JLf47qgQfbD8ugq28lwtAb
tATLGYM+n207djxbKx2GJ0PHiyXHcUZrr/YPYvqHQ8CQXt5jgRv//qqZRtjaPUpD
XNp5AetvavFBKclQMCO4B14+bZxInbTKnzbLzU/6JYqvaKv9OS/knxfyk2hqd/3z
3oWmx7Rt3nEo1RcydknNsZXhucpD0XyMApIB0khXr5mj9zgxlsZEYNPt+30DR3mr
QFbo9a8aVHZrORfKxKFkqPtVmOduycZOA1SE3aEd9qZb
-----END CERTIFICATE-----
Generated at Tue Nov 4 09:41:41 2025 by rpki-client