Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vMRTmehng-AIl3sEeMY0LDyoaYg.roa
File: vMRTmehng-AIl3sEeMY0LDyoaYg.roa (raw, json)
Hash identifier: ScoN/o6mN91Q8EyELHQcgTw7tRoWUmrpmhKgOHttD/Q=
Subject key identifier: BC:C4:53:99:E8:67:83:E0:08:97:7B:04:78:C6:34:2C:3C:A8:69:88
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FDA6C827A96EBC3B502084A774DAA29B9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vMRTmehng-AIl3sEeMY0LDyoaYg.roa
Signing time: Fri 07 Aug 2026 04:12:52 +0000
ROA not before: Fri 07 Aug 2026 04:12:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207359
IP address blocks: 167.17.45.0/24 maxlen: 24
206.245.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:da:6c:82:7a:96:eb:c3:b5:02:08:4a:77:4d:aa:29:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 04:12:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bcc45399e86783e008977b0478c6342c3ca86988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:b1:f8:20:66:b5:79:76:ac:f5:41:f9:88:
29:f0:d1:14:37:36:b6:7b:dd:25:99:6b:c5:75:38:
3c:9a:37:2c:82:6e:f8:d2:91:17:68:42:16:4c:bc:
b9:d5:ac:80:b4:1a:6a:e7:70:c2:e6:5a:6b:38:3d:
c9:79:35:51:36:24:1d:e8:e1:61:8d:cf:e7:bd:49:
8f:e7:21:05:56:58:47:51:e2:b1:9d:7e:37:fb:e7:
63:e6:c6:e3:d3:7f:62:0e:82:f1:b5:44:06:7a:8b:
10:73:12:0e:f0:29:68:9b:39:ff:e8:c4:29:54:b6:
34:99:53:0a:95:a7:3a:b0:55:20:47:3f:b9:8a:9f:
57:26:46:9b:19:29:8d:e1:d7:cd:b1:ee:fe:80:aa:
f1:30:ce:98:6f:a5:7a:70:1e:d2:6b:ad:29:c5:68:
ee:5b:ca:9b:00:e2:c7:ff:bb:45:57:94:af:81:2d:
4d:ec:5e:32:e3:1b:17:7d:08:ba:a3:70:b9:8a:5f:
dd:ec:65:48:af:d8:07:5e:d7:f0:09:f2:28:8c:29:
f2:b0:59:17:c1:9a:3c:ee:a4:e4:19:27:50:03:63:
25:68:cf:75:7e:df:89:c5:9f:20:0a:d0:0c:2d:7f:
20:f4:4b:15:7f:ea:72:1f:cf:a4:11:1c:09:8d:b4:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:53:99:E8:67:83:E0:08:97:7B:04:78:C6:34:2C:3C:A8:69:88
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/vMRTmehng-AIl3sEeMY0LDyoaYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.17.45.0/24
206.245.146.0/24
Signature Algorithm: sha256WithRSAEncryption
49:dc:82:23:0f:0e:5c:11:f1:c0:88:65:46:e7:35:65:ce:ef:
4f:89:ed:d7:d8:53:41:c4:2a:ef:81:ea:3e:40:d5:e6:4c:69:
6f:78:e4:5c:15:5d:39:d0:8d:24:26:f0:9d:78:4a:6a:44:4f:
df:be:de:2e:8b:37:34:98:ea:37:7f:1d:e6:25:e1:c4:ae:07:
69:5f:29:80:42:07:ee:64:43:21:e4:e2:87:19:a0:8e:70:63:
88:c8:83:de:90:cd:ac:cd:c4:ef:28:94:ad:3e:15:77:a0:b2:
46:57:51:6e:6a:ec:f2:3e:56:3b:7c:8b:a0:6b:00:69:5f:7b:
c5:fe:c3:33:ec:9e:54:ee:1b:0e:99:63:07:13:6c:34:3c:3f:
95:96:80:e7:0d:0d:4b:d7:b8:98:d7:d9:5d:c7:82:4a:b7:a0:
75:82:66:13:ed:2c:34:2a:b9:f4:9c:34:76:a8:93:ba:9d:d4:
7b:29:ec:34:ea:9f:ba:c6:2d:f2:49:a2:c7:60:62:10:1f:09:
d4:27:c7:8d:fa:fd:f0:cd:92:0b:f6:b7:04:c6:e1:16:72:62:
97:da:81:12:15:bc:cb:c2:a6:82:43:ea:5b:f4:47:d8:45:26:
ad:7a:55:11:87:8b:36:9b:1c:01:25:95:9d:41:ac:58:17:6a:
67:92:00:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:23:41 2026 by rpki-client