Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/lqu9J-KJckp6jyEEt-Zbg_-fI_E.roa
File: lqu9J-KJckp6jyEEt-Zbg_-fI_E.roa (raw, json)
Hash identifier: HNOjtdMCjOQq5KpkxM6f9zZ++Oz9wldgsWE/zI3Ktao=
Subject key identifier: 96:AB:BD:27:E2:89:72:4A:7A:8F:21:04:B7:E6:5B:83:FF:9F:23:F1
Certificate issuer: /CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Certificate serial: 019EF8F4D513B74905D85B4F94844817CF7E
Authority key identifier: 36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/lqu9J-KJckp6jyEEt-Zbg_-fI_E.roa
Signing time: Wed 24 Jun 2026 09:27:35 +0000
ROA not before: Wed 24 Jun 2026 09:27:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 151.123.179.0/24 maxlen: 24
151.123.180.0/24 maxlen: 24
151.123.181.0/24 maxlen: 24
151.123.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:f4:d5:13:b7:49:05:d8:5b:4f:94:84:48:17:cf:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3622fc2f8ad8b008357dbe6f0195960c9de61bd5
Validity
Not Before: Jun 24 09:27:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=96abbd27e289724a7a8f2104b7e65b83ff9f23f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:55:51:5e:d9:60:30:55:42:24:2d:61:1c:
2d:53:86:dd:16:c1:26:b7:e3:39:8e:94:47:a9:54:
4e:39:dd:bc:94:5e:9e:06:c8:2b:53:48:06:e3:4b:
36:03:23:b5:98:22:f7:2d:5e:e3:8d:be:cd:f8:fe:
9f:61:7b:2b:b6:2a:11:ac:99:cb:ec:18:a5:d3:b2:
92:a5:16:df:8c:f0:90:2d:3e:bc:ad:b1:60:03:93:
ab:46:4d:80:ef:91:0b:f6:3e:47:ab:da:b5:01:4d:
c0:1a:a4:f9:0e:fa:ff:65:5a:bf:d4:63:13:00:51:
16:b8:3e:ef:46:9a:da:bf:a6:f0:ac:ac:ed:7a:2b:
95:39:ad:f4:cd:97:5b:47:e2:43:35:d9:36:70:6e:
c3:6b:96:78:22:c4:78:b7:aa:84:0b:15:1c:9d:cc:
ae:65:84:b4:02:8a:b9:a9:f0:6a:14:29:db:b8:cd:
70:be:f2:75:10:b9:d3:77:99:54:21:9e:40:20:0d:
09:8a:15:91:f6:b1:fe:75:d4:79:ad:07:30:5b:b4:
8c:19:eb:59:8c:29:3d:c1:bf:d8:e5:1a:de:17:07:
72:6c:1b:88:f4:8e:1a:19:63:05:84:36:83:d2:d9:
04:1d:61:16:ee:29:e2:0f:21:33:ed:71:18:cc:f7:
09:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:BD:27:E2:89:72:4A:7A:8F:21:04:B7:E6:5B:83:FF:9F:23:F1
X509v3 Authority Key Identifier:
keyid:36:22:FC:2F:8A:D8:B0:08:35:7D:BE:6F:01:95:96:0C:9D:E6:1B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/lqu9J-KJckp6jyEEt-Zbg_-fI_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f63e58-9efc-4082-82bb-08835dff6c4f/1/NiL8L4rYsAg1fb5vAZWWDJ3mG9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.123.179.0-151.123.181.255
151.123.183.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:20:e1:4d:4d:02:30:4d:12:96:55:26:34:77:95:f8:59:43:
1c:96:4d:39:0d:b0:5b:65:c3:d5:93:39:4b:c1:d3:14:b7:da:
e7:cf:4d:ab:22:65:23:ac:76:b4:8f:42:5e:12:dd:87:fb:39:
5c:bf:8e:ad:46:84:14:bb:78:c8:0c:4c:46:c4:33:a6:92:a6:
43:f5:aa:57:f3:3f:69:b1:2e:cf:89:84:e0:8a:f4:e8:c4:d6:
10:eb:7b:d1:da:b1:a7:45:79:f2:b0:25:c9:3f:0d:18:55:69:
a2:60:9c:a8:c2:2d:64:12:9c:9d:57:f5:de:5e:b4:11:8b:ec:
c1:48:07:26:8f:63:56:54:56:d7:49:ae:1c:34:61:7c:ed:84:
a2:0f:75:7d:50:04:ec:27:a9:d4:f5:f2:22:62:70:c5:91:60:
47:3b:ac:72:c5:11:dc:97:9d:6b:66:39:79:68:8b:12:ae:54:
b2:59:24:5d:3d:af:01:72:0a:4c:43:28:fa:c1:f3:bb:fc:67:
be:79:04:7b:67:47:2b:8c:be:3d:a3:27:25:df:52:6f:2e:3c:
0d:81:b5:c9:75:22:98:e6:d8:12:e2:2e:76:10:76:5c:ad:6b:
ad:e0:18:a0:c3:08:6c:2e:12:fb:c3:f6:6d:3a:b3:b5:0b:77:
a1:29:68:7b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:16:32 2026 by rpki-client