Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lud_OpPdafsKUS8d3q-vXEBczaM.roa
File: lud_OpPdafsKUS8d3q-vXEBczaM.roa (raw, json)
Hash identifier: I1D+WYQ+mea/RTZZX0INqoprpS0MKZK4zgKa7AJOqG0=
Subject key identifier: 96:E7:7F:3A:93:DD:69:FB:0A:51:2F:1D:DE:AF:AF:5C:40:5C:CD:A3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A05C38FF12B75A4708328985AA4BC13730
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lud_OpPdafsKUS8d3q-vXEBczaM.roa
Signing time: Tue 01 Sep 2026 09:07:14 +0000
ROA not before: Tue 01 Sep 2026 09:07:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 151.243.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:38:ff:12:b7:5a:47:08:32:89:85:aa:4b:c1:37:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 1 09:07:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96e77f3a93dd69fb0a512f1ddeafaf5c405ccda3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a6:2d:7c:72:bd:86:2d:81:0b:3e:e6:76:b6:
96:a5:b7:93:05:a5:7a:3d:4a:97:44:e8:5d:33:7c:
65:59:e1:3f:36:5d:94:50:bb:65:27:6c:f6:64:47:
ad:ed:87:2f:cc:80:93:01:a8:ea:c1:8d:b7:12:f6:
2d:83:65:4f:c7:70:27:b1:58:93:96:38:fd:3e:83:
1c:ee:16:2d:40:f7:8c:82:99:b6:81:fd:9d:96:c3:
a1:ad:2c:4a:c7:60:8c:96:23:7a:3a:98:8c:c0:f5:
cd:17:24:a6:75:c8:03:11:e3:87:48:e3:28:fb:96:
f3:96:c4:09:08:01:31:9b:fb:37:71:20:b9:4f:f2:
f6:20:8f:5e:9e:ba:2e:d2:0c:6c:a9:2d:20:c9:5d:
45:96:0e:9b:14:c9:26:7d:3c:0c:c3:27:45:2f:87:
8d:62:93:c0:ea:ea:b5:5b:98:aa:d5:88:74:ee:61:
20:6c:55:7d:ef:0a:13:f2:b0:73:06:02:64:c0:86:
30:7e:88:db:8f:09:eb:18:71:e6:4a:a5:49:62:b6:
6d:74:13:f6:06:4f:7e:61:1c:c8:f8:eb:f6:dc:2e:
11:2e:f9:77:68:e1:8f:5b:9e:94:9d:c8:e2:7d:91:
cb:7f:90:cd:00:0a:c8:29:7a:9b:f7:01:f7:2b:26:
ba:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E7:7F:3A:93:DD:69:FB:0A:51:2F:1D:DE:AF:AF:5C:40:5C:CD:A3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/lud_OpPdafsKUS8d3q-vXEBczaM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.16.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:2d:26:a0:6f:d3:dc:1b:e2:48:03:79:34:8f:5e:5d:e4:9e:
f7:bc:be:81:cf:cc:1d:4d:72:3a:dc:de:87:74:08:7f:21:82:
9c:2e:84:c4:b4:cc:e5:72:6b:49:c0:01:6d:07:2f:00:97:a6:
d8:7b:31:4f:68:8c:61:34:f6:81:05:18:d4:6b:9a:98:42:5a:
8d:83:16:6d:12:63:8a:f1:24:9c:0f:a2:c6:e5:e0:e6:18:8b:
46:a4:82:0c:39:00:19:11:26:80:65:7c:8f:ff:66:01:8c:6f:
ff:3d:1d:3c:73:55:9d:b8:60:df:5d:14:24:e7:0b:16:1b:f2:
8b:bb:08:29:df:59:ab:b0:89:ae:6c:f0:c8:43:b4:1e:88:14:
5b:13:de:7b:81:da:c8:ac:62:f1:22:46:e7:6f:44:33:1f:67:
23:52:e2:a6:11:29:dc:70:bd:19:73:68:db:5b:77:b1:9e:60:
2d:44:ae:52:d0:ed:28:98:08:ad:47:fa:e9:88:1d:a0:cb:d5:
de:d8:60:dc:cf:20:63:5a:15:7b:8f:02:a8:26:5d:45:fd:06:
a8:84:b0:53:7a:59:08:cc:b5:77:f1:45:54:13:2e:30:5b:70:
d7:b5:b2:5d:34:16:a7:07:60:8f:38:49:39:1c:07:b2:2a:dc:
f3:c5:8a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:13:31 2026 by rpki-client