Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VTXdJ5SoQNAuC_5YZ62m8smL3rs.roa
File: VTXdJ5SoQNAuC_5YZ62m8smL3rs.roa (raw, json)
Hash identifier: L5UsEJ3//Mdm45JKDAL5Bndofl2rkY46HnYedvdnxJE=
Subject key identifier: 55:35:DD:27:94:A8:40:D0:2E:0B:FE:58:67:AD:A6:F2:C9:8B:DE:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1F2F0D0910B8A105C3FA3BFB640FE39D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VTXdJ5SoQNAuC_5YZ62m8smL3rs.roa
Signing time: Wed 01 Jul 2026 19:36:44 +0000
ROA not before: Wed 01 Jul 2026 19:36:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399468
IP address blocks: 151.240.148.0/23 maxlen: 24
151.241.136.0/22 maxlen: 24
151.241.164.0/22 maxlen: 24
151.242.160.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.247.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1f:2f:0d:09:10:b8:a1:05:c3:fa:3b:fb:64:0f:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 19:36:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5535dd2794a840d02e0bfe5867ada6f2c98bdebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:6c:f7:2d:ad:a4:b2:06:7e:18:c5:5f:08:
ff:28:67:ca:4b:2d:e5:0d:db:1f:7a:65:5d:89:ee:
79:68:04:9a:9b:b6:8d:8e:9b:c1:3b:fd:72:e5:b2:
44:ba:5a:56:8b:93:a6:c8:38:ac:60:95:7a:24:7b:
a9:70:68:6f:96:7a:6b:e8:f6:1b:a5:f5:16:48:78:
c1:68:75:13:a5:e4:ea:ca:e7:2e:65:ce:2a:10:8e:
83:fb:3d:07:12:cf:0f:4e:78:7b:ab:74:23:90:e4:
60:22:26:af:de:e5:93:0a:c7:ad:59:17:cd:3d:9c:
67:73:ff:94:b9:95:80:70:f4:f9:50:76:75:4b:2e:
9a:f9:a7:4e:39:7e:85:a1:48:9c:64:ad:00:c4:85:
b1:7e:11:45:77:90:b2:03:eb:df:c8:ad:64:db:05:
e5:cf:76:6c:16:91:7f:6a:f5:e8:0a:a7:c2:57:8c:
81:c8:15:98:02:6e:c5:a7:f4:04:c9:b4:e0:28:f1:
7a:42:e6:3b:58:eb:db:b8:33:9b:48:d4:70:6e:54:
7a:09:e2:4e:de:fe:38:9c:00:7f:e6:62:b2:79:fb:
81:72:88:d0:c0:6a:31:de:d3:05:bb:e4:3a:1e:30:
49:ff:77:7e:bb:2e:cf:2e:69:61:00:76:76:75:4c:
9f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:35:DD:27:94:A8:40:D0:2E:0B:FE:58:67:AD:A6:F2:C9:8B:DE:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VTXdJ5SoQNAuC_5YZ62m8smL3rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.148.0/23
151.241.136.0/22
151.241.164.0/22
151.242.160.0/22
151.242.236.0/22
151.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:c9:8f:de:bd:f8:ac:d6:57:ee:73:36:31:4f:38:03:4b:93:
b2:40:5f:c8:38:76:e6:a2:12:18:7f:72:66:f9:ee:36:12:99:
08:9e:39:24:27:63:76:ce:85:b8:dc:64:11:99:44:48:d2:6c:
f2:17:34:da:e2:62:1b:7d:44:8a:ca:45:f8:07:68:66:ae:ed:
22:b2:05:f8:25:fb:4b:15:d2:53:db:32:60:f1:b4:2e:09:31:
dd:94:73:5e:bf:c1:cb:99:81:56:6a:f8:b1:26:9e:1b:65:0d:
c1:e4:30:d0:2e:39:10:72:d8:07:80:fa:44:93:3c:7f:0d:da:
51:7a:a7:d8:21:30:d0:03:d4:3d:7d:6d:6b:0b:7c:67:ea:35:
ff:24:d5:d4:a6:3c:af:49:e7:0a:88:7b:f6:34:99:26:a9:91:
95:0f:01:b6:a3:c1:ed:cc:ee:7f:0c:5d:ca:18:a4:64:f1:b9:
66:c1:ea:21:9b:16:56:a0:f5:cd:11:c9:7f:d8:43:4b:11:7d:
9e:34:14:0e:24:84:69:e0:9f:c9:38:f8:a4:da:ae:59:bc:6b:
1d:d4:23:7f:6a:11:4d:4d:9d:af:2e:42:16:11:82:c6:b1:45:
8f:b2:bb:8f:06:74:fc:b8:e8:d0:ec:52:32:2c:23:74:13:3a:
4f:f3:07:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:18:14 2026 by rpki-client