Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VG6759cwPY3vbeLIeBqN5PvukZk.roa
File: VG6759cwPY3vbeLIeBqN5PvukZk.roa (raw, json)
Hash identifier: JRG9Pb+xv+6LiGA2rqvBIfjcIJ98vHcE9VlHD7kwiEM=
Subject key identifier: 54:6E:BB:E7:D7:30:3D:8D:EF:6D:E2:C8:78:1A:8D:E4:FB:EE:91:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C95C0EB7DC71DC4B0FE89849F33F746D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VG6759cwPY3vbeLIeBqN5PvukZk.roa
Signing time: Tue 22 Sep 2026 13:44:08 +0000
ROA not before: Tue 22 Sep 2026 13:44:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 151704
IP address blocks: 151.242.176.0/24 maxlen: 24
151.242.178.0/24 maxlen: 24
151.242.184.0/24 maxlen: 24
151.242.187.0/24 maxlen: 24
151.247.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 08:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5c:0e:b7:dc:71:dc:4b:0f:e8:98:49:f3:3f:74:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 13:44:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=546ebbe7d7303d8def6de2c8781a8de4fbee9199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:76:ca:04:7a:da:2d:32:32:6c:29:dd:a0:
86:55:d3:52:9a:02:d1:df:0a:bb:ab:6a:d5:70:4b:
d0:57:eb:65:3b:61:1c:ee:69:de:f7:78:df:71:4d:
f2:64:5b:3c:27:b8:71:d4:61:31:44:f5:58:90:13:
38:5f:10:39:aa:a6:a6:21:a1:ed:70:f4:33:d4:57:
6c:43:66:39:e8:43:81:c5:01:e7:08:ec:4d:b2:69:
31:0b:02:8e:d8:9e:c9:00:e2:eb:11:a6:8f:d4:5e:
f3:34:c6:b7:3c:cc:d0:2c:ae:c8:2e:36:34:82:da:
ce:69:08:8d:e2:af:50:77:70:39:7e:2e:46:d3:a2:
36:51:fb:ae:ac:e6:f8:96:f1:63:03:73:2b:8e:5a:
9d:b7:eb:76:f7:10:e3:2c:2e:d9:7f:a2:4d:f5:42:
d5:2f:29:48:7b:2e:9d:a7:1a:03:a5:5e:d1:99:91:
6d:5a:d4:83:5b:e6:7c:34:55:7d:5a:20:a0:8b:20:
1e:a6:f4:10:a2:1b:c9:88:9b:07:e4:91:a7:47:fd:
aa:b3:c4:9e:f5:8b:bb:32:94:10:0e:1d:77:e6:e4:
a9:36:3c:43:35:ee:93:d9:81:69:83:d9:34:5c:3d:
d4:21:2e:2f:98:64:f3:99:bd:72:4a:d8:3a:d0:e6:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:6E:BB:E7:D7:30:3D:8D:EF:6D:E2:C8:78:1A:8D:E4:FB:EE:91:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VG6759cwPY3vbeLIeBqN5PvukZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.176.0/24
151.242.178.0/24
151.242.184.0/24
151.242.187.0/24
151.247.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:52:8c:90:06:02:a7:7e:4b:b0:23:bf:c2:f6:54:3d:79:60:
8d:3b:04:74:5e:07:1f:44:5c:0c:3c:0d:04:ea:84:5c:02:00:
62:3e:a5:e5:95:12:ac:e8:11:28:23:0a:9e:0c:25:d0:fb:c9:
5a:67:c7:7a:ee:ef:47:79:29:8b:a5:a1:7d:79:eb:d1:c7:28:
53:95:29:4f:ca:25:40:b4:bf:ad:71:39:36:59:f8:2a:36:d5:
9f:2a:d1:72:f0:7f:4b:ae:fc:40:d9:d5:48:9d:7b:43:d5:d9:
bd:65:48:22:1f:23:ae:c2:d5:7f:58:dd:7a:95:4f:06:7a:15:
58:ad:05:4d:2b:86:2c:d5:7f:87:48:ab:25:87:9f:9a:e0:6b:
99:0d:2f:7e:3d:1c:1c:87:4b:9f:e1:e9:b9:88:20:80:f9:37:
c8:47:32:8f:d9:44:17:64:18:3c:2b:28:0d:6e:1b:3d:7e:7f:
b6:1f:ed:96:1f:88:ec:71:3b:8b:9c:95:7f:ac:69:51:99:d1:
93:c3:2c:f4:df:ce:87:b4:90:e6:1b:b9:79:55:84:f0:24:b3:
f3:1c:8f:5b:99:50:f7:b1:65:74:d5:9e:56:c0:ce:3f:77:60:
89:08:de:85:5b:4c:3c:e9:53:70:5a:27:f2:80:4f:25:93:f1:
af:3a:5c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:34:08 2026 by rpki-client