Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ViM3f1dyFvvuA68T8YG2Rv_uLQk.roa
File: ViM3f1dyFvvuA68T8YG2Rv_uLQk.roa (raw, json)
Hash identifier: pC6bfQkcx4jG81YruG44fLCM0ljYFXPlxLoOoiQowcc=
Subject key identifier: 56:23:37:7F:57:72:16:FB:EE:03:AF:13:F1:81:B6:46:FF:EE:2D:09
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C95B25C93B5969054889E7511213FCE4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ViM3f1dyFvvuA68T8YG2Rv_uLQk.roa
Signing time: Tue 22 Sep 2026 13:43:08 +0000
ROA not before: Tue 22 Sep 2026 13:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201724
IP address blocks: 151.246.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:5b:25:c9:3b:59:69:05:48:89:e7:51:12:13:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 22 13:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5623377f577216fbee03af13f181b646ffee2d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:67:dc:8f:ff:7a:d6:cc:a3:9b:bb:cb:ba:5c:
7c:88:49:3e:d7:0b:9e:1a:f2:12:f8:bc:75:ad:f4:
f8:14:59:b6:91:73:1d:be:fe:94:0f:d5:ab:d4:34:
10:1a:06:82:b5:ad:39:61:e4:a9:e7:45:2f:bb:07:
d2:22:14:cb:bf:a4:1d:10:0a:69:d5:61:0b:4a:da:
1f:13:06:a4:12:b2:8a:56:e2:2e:3a:2a:77:eb:ad:
f1:c5:a1:11:23:af:21:68:fc:1b:a6:0f:18:95:f3:
ad:33:51:a4:5b:91:07:f4:7f:e1:7c:b0:b1:f3:a5:
02:85:5f:9f:56:d0:8e:26:95:c2:ca:28:67:e2:35:
7e:6a:80:76:b7:e5:00:67:14:f5:f4:41:99:aa:0a:
61:55:0a:2f:46:c7:a6:e2:29:1a:17:d7:1e:8e:47:
6d:a1:eb:fa:c1:f5:94:d4:80:0c:fc:7e:66:a9:42:
65:95:63:db:a9:57:fb:f9:a7:de:3d:30:b0:37:2b:
13:83:2a:ce:61:9d:b8:61:9f:e0:b4:1e:72:0b:6d:
0f:44:1c:a3:85:f6:a6:5d:0d:d5:96:c4:a0:14:86:
d2:96:ec:0c:1b:69:1f:d3:ea:de:67:de:53:83:53:
cc:f6:44:91:1e:7d:9f:f3:f0:6b:96:3f:b7:cf:d0:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:37:7F:57:72:16:FB:EE:03:AF:13:F1:81:B6:46:FF:EE:2D:09
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ViM3f1dyFvvuA68T8YG2Rv_uLQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.28.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:40:47:c2:75:98:43:8b:21:53:25:2f:01:07:26:f4:6a:66:
83:2d:cf:7e:dd:f2:93:72:de:82:00:44:a9:db:ac:49:94:98:
38:d2:f8:34:d6:5c:ad:20:dc:cb:79:aa:6e:ac:7b:fc:1c:b6:
8a:85:7b:bb:10:b4:af:82:ef:35:6b:92:55:10:d8:1b:d1:d6:
14:41:55:a6:f0:12:b8:1b:4b:17:3e:fe:f7:8f:34:54:16:c8:
b5:86:75:fc:07:20:ef:59:68:f3:28:5f:42:ff:0c:80:76:86:
f5:d9:8e:9c:e0:60:14:13:a0:d7:1f:f5:4f:31:f0:0f:fd:fd:
81:32:8c:9f:0e:c0:8a:df:a3:25:31:f8:ff:cf:88:95:b1:28:
d9:e4:04:c1:4d:56:fc:dd:91:88:53:27:68:c5:0d:e6:1e:82:
bc:eb:ec:41:cc:f3:a7:50:74:4c:51:7a:81:be:73:5a:40:73:
cb:d1:36:3a:84:82:5a:3e:74:e8:cf:84:59:1a:94:59:34:f2:
9c:5d:17:5e:05:64:56:96:37:f4:55:d6:18:ff:4e:8d:d0:06:
0f:cd:aa:28:f2:cc:9c:01:9e:c4:c5:da:9d:43:1e:b3:a7:e8:
c2:54:2e:b4:49:70:be:ae:1f:c3:66:fd:82:51:01:7d:87:8e:
9a:35:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:22 2026 by rpki-client