Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/VRhw_fRM9jAzC_jp7EXs7OxLil0.roa
File: VRhw_fRM9jAzC_jp7EXs7OxLil0.roa (raw, json)
Hash identifier: AB9hVmBjo6ZhGYEOgtx/yX50Or9Lly3jgJBDfkouOC8=
Subject key identifier: 55:18:70:FD:F4:4C:F6:30:33:0B:F8:E9:EC:45:EC:EC:EC:4B:8A:5D
Certificate issuer: /CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Certificate serial: 019E91E69BBA86502B3C49FFFC12253EEEF8
Authority key identifier: 0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/VRhw_fRM9jAzC_jp7EXs7OxLil0.roa
Signing time: Thu 04 Jun 2026 09:11:09 +0000
ROA not before: Thu 04 Jun 2026 09:11:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207714
IP address blocks: 150.241.0.0/19 maxlen: 19
150.241.0.0/24 maxlen: 24
150.241.0.0/28 maxlen: 28
150.241.0.16/28 maxlen: 28
150.241.0.32/28 maxlen: 28
150.241.1.0/24 maxlen: 24
150.241.1.0/28 maxlen: 28
150.241.1.16/28 maxlen: 28
150.241.1.32/28 maxlen: 28
150.241.1.48/28 maxlen: 28
150.241.1.128/28 maxlen: 28
150.241.1.144/28 maxlen: 28
150.241.1.160/28 maxlen: 28
150.241.2.0/24 maxlen: 24
150.241.3.0/24 maxlen: 24
150.241.4.0/24 maxlen: 24
150.241.5.0/24 maxlen: 24
150.241.8.0/23 maxlen: 23
150.241.10.0/23 maxlen: 23
150.241.12.0/23 maxlen: 23
150.241.14.0/23 maxlen: 23
150.241.16.0/24 maxlen: 24
150.241.17.0/24 maxlen: 24
150.241.18.0/24 maxlen: 24
150.241.22.0/23 maxlen: 23
2a10:1500:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:e6:9b:ba:86:50:2b:3c:49:ff:fc:12:25:3e:ee:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fe88e3fd0655d4c9a577b316220def8317755b1
Validity
Not Before: Jun 4 09:11:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=551870fdf44cf630330bf8e9ec45ececec4b8a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:5a:2f:d1:4b:0e:a3:58:70:78:51:8a:e2:
3b:ed:ed:8e:2a:f5:67:b2:ec:31:a2:12:c6:ca:4a:
84:32:5c:30:d5:68:d1:58:21:c2:8f:f4:7d:20:57:
dd:5b:bd:53:e0:d8:8c:5d:b6:05:fa:38:03:e1:47:
29:b3:93:55:53:5b:63:48:ad:f2:a0:e6:72:f0:00:
68:a7:0e:30:af:17:12:25:bd:f7:10:e5:61:59:41:
88:ec:d1:3c:05:69:f7:d6:e2:4e:17:67:d1:8c:41:
54:05:d1:f6:89:f2:36:50:fd:48:fa:93:3f:8a:d4:
2c:64:36:d0:f8:59:be:09:76:6c:79:9c:56:e3:9b:
fb:0c:93:f1:b1:ab:6a:0e:bc:d6:36:89:48:e7:9f:
16:f8:92:8b:1f:70:04:b8:f2:0a:82:54:c1:8f:3a:
6b:05:39:a4:47:98:3b:b0:a2:14:58:d7:1e:90:da:
6f:0c:c6:23:95:41:2c:ee:d7:23:d9:f6:6f:5d:3e:
3e:b6:66:e6:cc:de:22:c6:79:5f:9a:4c:0c:0a:2d:
59:60:16:e2:84:8a:99:be:1a:b2:2f:fa:50:a4:dc:
92:16:9d:19:a0:27:14:c8:2f:b5:2b:da:9f:31:fb:
89:29:fc:30:59:f8:77:d5:ec:dc:60:cf:01:5d:a9:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:18:70:FD:F4:4C:F6:30:33:0B:F8:E9:EC:45:EC:EC:EC:4B:8A:5D
X509v3 Authority Key Identifier:
keyid:0F:E8:8E:3F:D0:65:5D:4C:9A:57:7B:31:62:20:DE:F8:31:77:55:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-iOP9BlXUyaV3sxYiDe-DF3VbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/VRhw_fRM9jAzC_jp7EXs7OxLil0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/09e0cc-362e-4629-8063-332493c989c7/1/D-iOP9BlXUyaV3sxYiDe-DF3VbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.241.0.0/19
IPv6:
2a10:1500:4::/48
Signature Algorithm: sha256WithRSAEncryption
54:f3:8c:00:ac:22:be:5e:25:f6:37:ff:a8:4a:17:f3:9e:c8:
91:02:b4:af:8e:4b:2b:6e:b9:ff:2d:82:93:eb:b6:e6:90:1f:
6b:be:fd:c9:7d:b0:54:33:dd:01:5c:9a:1b:22:4c:e0:c5:b8:
fe:19:4f:8a:7c:bb:35:e7:e5:c0:07:f8:2d:2d:fa:db:6e:77:
1a:e8:d1:48:ec:72:22:08:cc:d4:d2:24:59:a2:16:25:e4:4b:
1e:e9:6a:18:18:54:cb:63:b4:5b:a9:88:36:c6:91:9f:2d:2c:
62:64:90:23:6a:24:2c:08:cd:fc:1b:5c:f3:c2:53:d5:75:46:
09:5b:5a:15:cf:da:53:22:57:74:10:c4:ee:6b:32:d9:c9:14:
d7:93:96:58:3b:23:a5:83:73:b8:eb:a6:12:4c:a5:48:02:18:
79:41:57:bb:a0:b6:3d:c0:46:e5:ae:ce:bb:af:e6:82:32:40:
8c:25:ef:4e:13:52:7f:74:bd:57:1f:fe:bf:e8:63:f5:39:ea:
c8:08:58:66:6d:f4:64:b8:84:88:2e:e9:d7:c9:95:c5:7c:18:
ad:a8:9a:48:8b:79:ca:06:fd:e4:0c:5b:fc:76:e8:55:70:ad:
e3:84:ca:87:12:b5:ca:92:3e:12:a9:a8:60:7e:50:31:fd:6a:
ef:91:84:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:14:48 2026 by rpki-client