Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VHGXcfPCOQE6rapEF22sKDikRtY.roa
File: VHGXcfPCOQE6rapEF22sKDikRtY.roa (raw, json)
Hash identifier: 2QktUxV0V2TR4G+ndJ8/Vj7/eZRyEKv1Nm62HY1w9ZA=
Subject key identifier: 54:71:97:71:F3:C2:39:01:3A:AD:AA:44:17:6D:AC:28:38:A4:46:D6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0905E07219AB55C63BD4BE3645659C00E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VHGXcfPCOQE6rapEF22sKDikRtY.roa
Signing time: Fri 11 Sep 2026 12:07:56 +0000
ROA not before: Fri 11 Sep 2026 12:07:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402390
IP address blocks: 151.240.253.0/24 maxlen: 24
151.244.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Sep 2026 14:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:5e:07:21:9a:b5:5c:63:bd:4b:e3:64:56:59:c0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 11 12:07:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=54719771f3c239013aadaa44176dac2838a446d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7a:91:92:8b:f8:ad:c3:01:9b:7a:e5:85:27:
17:21:6c:65:a2:9e:40:1d:54:46:5c:87:51:7e:86:
4e:4b:2b:dd:65:8f:2f:a2:ec:ab:4e:7f:10:bc:95:
1c:00:8f:16:31:22:f4:e8:ea:7b:f7:c4:4c:ce:ee:
63:cf:15:65:62:70:ea:66:3b:30:54:ac:64:1d:b6:
19:ac:a5:ef:04:a4:a6:8f:3e:f3:aa:7c:10:fa:90:
38:44:7d:c9:20:8c:49:e7:69:05:57:2d:0b:bb:fe:
9e:93:c8:09:7a:c7:5a:0b:3e:69:35:c3:21:bb:44:
1f:c6:a8:96:c7:7f:ea:e5:09:ec:4e:d7:16:c5:0b:
35:b5:53:f0:9b:47:41:19:d4:30:52:94:1a:89:98:
aa:cb:d1:21:36:c8:b0:6a:64:91:0e:a7:93:19:d8:
17:10:e4:7e:e0:e4:8b:ab:99:36:cb:8d:bf:b6:3c:
8b:02:da:26:3e:62:d5:17:63:93:db:e1:63:e5:c4:
31:9f:b8:e7:51:2f:60:6f:42:b6:80:fb:f2:41:06:
6f:89:90:86:93:44:36:ea:aa:92:98:f1:6c:b4:9d:
27:07:e1:f5:38:19:56:a4:09:d6:af:39:87:fc:0b:
81:4e:95:3c:01:93:90:44:88:61:13:e8:fb:e2:f5:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:71:97:71:F3:C2:39:01:3A:AD:AA:44:17:6D:AC:28:38:A4:46:D6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VHGXcfPCOQE6rapEF22sKDikRtY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.253.0/24
151.244.223.0/24
Signature Algorithm: sha256WithRSAEncryption
86:de:55:6f:f1:a8:68:0c:65:4d:52:60:a5:90:4c:90:25:af:
14:d4:f3:3e:47:15:4f:43:22:9e:79:4b:ea:7b:82:c1:ab:b3:
c7:4a:bc:4b:48:14:67:30:3a:a8:df:f2:f4:c5:ba:68:4d:5d:
26:47:6a:3b:98:e9:b9:d1:7f:d4:26:97:b2:85:17:6c:d3:e7:
80:89:17:65:d6:f3:d8:11:83:bd:47:3e:99:97:fa:ed:e2:cd:
e9:41:95:f5:1c:bc:4f:36:a8:65:18:2a:11:7c:ba:b3:f9:af:
b8:22:ab:22:b5:57:75:1e:6a:e5:da:6a:9c:e9:f0:b6:03:48:
a3:2a:b1:1f:8c:a5:b3:bb:81:8b:cf:e8:bf:72:81:c4:3d:ba:
2e:65:a9:2c:d1:18:33:1b:07:fa:96:03:67:0e:cf:3e:9c:81:
27:c2:90:6c:2a:45:5d:84:1a:90:a1:04:67:29:ef:ac:f3:1c:
a8:6e:71:5a:18:48:fc:c5:2b:0e:fe:ac:0f:e1:3d:ed:dc:1f:
3b:46:8b:1e:28:e6:c2:9c:93:80:b2:18:d2:a5:6c:35:83:eb:
b3:53:b7:c3:80:11:e3:be:e8:56:63:fa:3e:bb:ba:4c:2d:7b:
34:61:84:14:30:8a:eb:2b:91:67:58:c6:03:7d:f5:fd:ec:ba:
6c:b2:b0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:17:31 2026 by rpki-client