Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ViuRZ-Bx3WuQjheVJP4XV6RCpZ0.roa
File: ViuRZ-Bx3WuQjheVJP4XV6RCpZ0.roa (raw, json)
Hash identifier: q5cP23Hl8n+bL0VYrhHY/EYAb6i1jMjhHJXJ787Ireo=
Subject key identifier: 56:2B:91:67:E0:71:DD:6B:90:8E:17:95:24:FE:17:57:A4:42:A5:9D
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019EFAC23EC7280D2FF5A985ADB01B87D53B
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ViuRZ-Bx3WuQjheVJP4XV6RCpZ0.roa
Signing time: Wed 24 Jun 2026 17:51:34 +0000
ROA not before: Wed 24 Jun 2026 17:51:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46635
IP address blocks: 9.151.192.0/20 maxlen: 20
9.151.232.0/22 maxlen: 22
9.232.24.0/22 maxlen: 22
9.232.76.0/22 maxlen: 22
9.249.100.0/22 maxlen: 22
138.226.16.0/20 maxlen: 20
138.226.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:c2:3e:c7:28:0d:2f:f5:a9:85:ad:b0:1b:87:d5:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jun 24 17:51:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=562b9167e071dd6b908e179524fe1757a442a59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:77:63:30:3c:84:fb:21:ea:f9:cb:47:64:bf:
96:06:b3:d8:35:1b:28:cf:06:0b:3a:34:f4:0a:9c:
f8:b8:d2:a1:15:91:45:d6:64:1b:71:a6:8e:c2:f6:
bc:cc:24:f7:c3:08:06:bd:ae:18:c1:72:52:1a:22:
6e:77:51:69:20:f3:5e:6c:ca:26:33:e1:73:bc:5b:
14:47:5b:c3:a3:b0:9b:d2:8b:51:2a:1b:36:2f:72:
72:f4:39:66:68:cf:c7:e4:d0:62:01:9c:89:0a:b8:
27:f8:a5:9f:59:bc:cd:05:87:da:92:52:77:4f:be:
36:60:d2:b5:c6:53:96:f6:89:9b:37:1d:3e:05:cd:
33:bd:db:50:58:08:f6:88:5b:de:a8:32:7c:8a:21:
a9:61:34:b7:8d:c4:63:13:59:65:bf:1c:10:54:ab:
0a:09:2c:5e:37:00:cc:af:b2:9b:d1:20:bd:23:d5:
97:89:12:04:99:46:33:72:5a:ba:72:b2:4c:78:30:
e9:03:91:79:68:53:19:13:97:80:67:92:35:41:95:
1f:f3:9a:c1:43:81:21:bd:43:53:22:80:12:35:7d:
4a:4e:00:60:5a:e4:86:da:43:d4:36:89:3a:cc:f9:
8c:15:ab:c3:ff:3e:74:07:7b:5a:40:d4:20:ae:9f:
02:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2B:91:67:E0:71:DD:6B:90:8E:17:95:24:FE:17:57:A4:42:A5:9D
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/ViuRZ-Bx3WuQjheVJP4XV6RCpZ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.192.0/20
9.151.232.0/22
9.232.24.0/22
9.232.76.0/22
9.249.100.0/22
138.226.16.0/20
138.226.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:36:ea:cf:e6:fe:09:82:b5:df:7a:d2:f9:c5:83:58:e4:e3:
7f:92:cb:9f:f3:e0:34:b6:e1:98:f0:34:cd:99:2b:c8:b7:54:
68:8c:8c:9f:27:79:f2:21:b8:f5:21:6a:c0:51:78:95:a7:16:
69:3f:41:95:38:5b:58:3a:97:5b:c1:81:9a:ec:6d:c2:47:a7:
65:7e:76:b6:1b:c0:8b:4f:d7:c0:03:f2:81:48:12:33:b3:2b:
b3:31:fd:a9:fb:30:8d:be:ec:9e:57:3f:37:60:22:6b:7d:0c:
68:53:51:7b:63:8d:a9:20:d0:d4:34:4f:04:ee:4c:29:02:6c:
8d:dc:8b:49:30:ad:45:c0:39:ba:27:72:70:ad:5a:ee:9a:12:
50:24:3e:1d:df:a0:98:39:ae:ba:83:06:85:ee:df:4c:bc:0a:
05:9b:f7:c4:82:8f:8b:14:c8:c7:05:1a:94:ed:27:da:53:26:
14:4c:fd:7a:b9:d2:be:01:bf:88:09:8a:b4:66:d3:a8:d5:b6:
05:b6:94:5d:db:d2:ef:a8:20:87:9b:08:07:c6:a7:97:30:0c:
0d:c4:b4:b8:38:02:d0:d6:38:cc:21:90:f7:37:bb:86:9c:41:
55:8b:77:04:ac:9b:e6:7b:0b:86:15:c5:76:cf:97:51:a1:83:
90:bf:38:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:56:53 2026 by rpki-client