Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vp3oXyigyBwSUWnNIWIzwpiGA8M.roa
File: vp3oXyigyBwSUWnNIWIzwpiGA8M.roa (raw, json)
Hash identifier: P11lFKSbsWvo/QFJuSUO3bt61MLWAFqMP2rb2GsGpsQ=
Subject key identifier: BE:9D:E8:5F:28:A0:C8:1C:12:51:69:CD:21:62:33:C2:98:86:03:C3
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F4C1A1458EB68E775B67F14C95A182242
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vp3oXyigyBwSUWnNIWIzwpiGA8M.roa
Signing time: Fri 10 Jul 2026 12:56:45 +0000
ROA not before: Fri 10 Jul 2026 12:56:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134926
IP address blocks: 151.242.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:16:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:4c:1a:14:58:eb:68:e7:75:b6:7f:14:c9:5a:18:22:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 10 12:56:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be9de85f28a0c81c125169cd216233c2988603c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:9c:93:6c:8b:33:b4:23:99:57:49:f9:eb:99:
85:64:90:fc:5f:c1:a5:91:e2:91:21:5f:39:22:ee:
e2:c4:5f:e4:c1:cd:f3:03:24:2a:0c:99:51:77:82:
85:28:40:c7:f0:6b:09:33:2f:aa:35:f5:70:02:e8:
8f:c1:0e:ef:2e:82:c1:1b:e4:84:53:a4:a5:62:2a:
31:a5:a2:c9:3b:fb:21:6c:d1:3b:5d:6a:ff:f5:9b:
22:1f:56:83:4d:c8:7c:42:d7:06:9a:49:24:35:69:
10:ee:03:30:58:fc:fc:1f:44:d3:e9:cd:1f:8a:42:
25:c6:39:27:14:80:bb:03:d1:75:a0:1d:63:a6:eb:
08:4c:68:b4:53:ca:af:b8:ff:8a:91:4b:75:a1:b8:
40:f7:c7:63:7e:7f:07:53:5d:c5:09:c5:e4:a0:fa:
d5:4e:bd:63:30:4f:68:ae:fc:2b:47:cb:5b:a7:97:
b7:98:51:da:bb:74:75:c1:71:80:44:85:4e:db:30:
80:0f:ea:d2:f2:ec:71:c1:e1:01:c0:1a:60:b5:5d:
5d:fa:7d:14:94:53:1c:75:80:c8:c4:7b:42:99:14:
ba:16:4f:23:ac:fe:ce:f8:a7:c8:04:7c:93:b8:cc:
9c:4b:7c:2c:01:75:c9:cb:07:fc:b1:56:5e:56:0e:
01:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9D:E8:5F:28:A0:C8:1C:12:51:69:CD:21:62:33:C2:98:86:03:C3
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vp3oXyigyBwSUWnNIWIzwpiGA8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.195.0/24
Signature Algorithm: sha256WithRSAEncryption
38:79:b8:72:91:23:5b:e8:0d:67:42:ae:54:a4:b4:b1:a6:74:
c0:aa:de:f5:f7:bd:f2:31:43:98:92:ad:3a:f1:95:a2:c5:ec:
bf:b6:3f:94:f5:0b:09:1b:3e:57:ef:24:6c:b2:ae:4b:91:44:
02:f4:22:6e:04:c1:49:2a:6c:fa:a3:eb:e9:36:46:67:48:ba:
80:9c:a0:7b:f4:0a:57:76:c8:ea:36:c2:01:44:d9:9a:45:5d:
3f:c2:d7:0b:bd:2b:6a:40:97:78:a5:6a:44:52:14:c9:ee:46:
95:98:0e:b2:41:fb:1f:36:eb:34:90:1d:c6:cf:b6:ff:bd:6c:
91:33:1e:81:8d:32:10:98:ad:fb:da:53:33:f2:d2:53:dc:c2:
56:53:41:b5:67:13:34:8f:93:87:13:98:ba:0e:da:19:ee:91:
fc:b9:00:c9:d6:ec:7b:48:a2:33:95:d2:0d:e4:3d:8f:71:10:
c2:92:6e:ba:0e:3e:4c:fc:db:21:cf:77:7f:a6:8c:01:e5:36:
e8:98:f5:b3:de:0d:1b:10:0a:38:ef:34:e6:be:f8:da:d6:76:
7a:4f:73:9d:4f:31:3d:62:41:24:51:ee:35:9f:4e:03:cc:7a:
3a:3e:e7:48:32:42:eb:dd:e6:b0:0f:45:a8:df:ab:83:8b:a8:
76:3a:07:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9MGhRY62jndbZ/FMlaGCJCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzEwMTI1NjQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTlkZTg1ZjI4YTBjODFjMTI1MTY5Y2QyMTYyMzNjMjk4ODYwM2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35yTbIsztCOZV0n565mFZJD8X8Gl
keKRIV85Iu7ixF/kwc3zAyQqDJlRd4KFKEDH8GsJMy+qNfVwAuiPwQ7vLoLBG+SE
U6SlYioxpaLJO/shbNE7XWr/9ZsiH1aDTch8QtcGmkkkNWkQ7gMwWPz8H0TT6c0f
ikIlxjknFIC7A9F1oB1jpusITGi0U8qvuP+KkUt1obhA98djfn8HU13FCcXkoPrV
Tr1jME9orvwrR8tbp5e3mFHau3R1wXGARIVO2zCAD+rS8uxxweEBwBpgtV1d+n0U
lFMcdYDIxHtCmRS6Fk8jrP7O+KfIBHyTuMycS3wsAXXJywf8sVZeVg4BMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL6d6F8ooMgcElFpzSFiM8KYhgPDMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdnAzb1h5aWd5QndTVVduTklXSXp3cGlHQThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl/LDMA0G
CSqGSIb3DQEBCwUAA4IBAQA4ebhykSNb6A1nQq5UpLSxpnTAqt71973yMUOYkq06
8ZWixey/tj+U9QsJGz5X7yRssq5LkUQC9CJuBMFJKmz6o+vpNkZnSLqAnKB79ApX
dsjqNsIBRNmaRV0/wtcLvStqQJd4pWpEUhTJ7kaVmA6yQfsfNus0kB3Gz7b/vWyR
Mx6BjTIQmK372lMz8tJT3MJWU0G1ZxM0j5OHE5i6DtoZ7pH8uQDJ1ux7SKIzldIN
5D2PcRDCkm66Dj5M/Nshz3d/powB5TbomPWz3g0bEAo47zTmvvja1nZ6T3OdTzE9
YkEkUe41n04DzHo6PudIMkLr3eawD0Wo36uDi6h2OgeB
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:51 2026 by rpki-client