Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vg7WdCyA6Qc9OTbIPc7rVFgZt6I.roa
File: Vg7WdCyA6Qc9OTbIPc7rVFgZt6I.roa (raw, json)
Hash identifier: x/sPWC0v75i8lVarM6tm9+G/SATOFyaJYie9XK44wt0=
Subject key identifier: 56:0E:D6:74:2C:80:E9:07:3D:39:36:C8:3D:CE:EB:54:58:19:B7:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EF849A891655C032DE70544E22F3E3551
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vg7WdCyA6Qc9OTbIPc7rVFgZt6I.roa
Signing time: Wed 24 Jun 2026 06:20:37 +0000
ROA not before: Wed 24 Jun 2026 06:20:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209363
IP address blocks: 151.244.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:49:a8:91:65:5c:03:2d:e7:05:44:e2:2f:3e:35:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 24 06:20:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=560ed6742c80e9073d3936c83dceeb545819b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fc:0a:e1:ac:1d:0c:e5:a4:88:b2:ce:e2:9e:
e4:0a:11:61:c2:4a:35:70:fb:d2:6b:7d:cb:45:9d:
37:40:f7:23:4a:0d:f8:d0:9b:b1:35:ed:43:59:60:
04:23:fa:b6:2c:e2:85:a3:4d:48:29:09:76:b0:28:
3f:a5:b2:c1:82:58:f5:0e:c0:5f:3f:0b:93:4a:f1:
9f:dc:38:a9:e8:0b:90:4e:38:0c:cc:00:15:a5:25:
5e:a2:71:b5:48:48:dc:81:47:72:36:e6:1a:60:c0:
b5:4c:0b:b8:47:6c:66:15:cc:d4:e0:9f:91:6d:e8:
20:57:5d:e9:af:7b:90:2c:df:61:a5:93:be:3f:97:
80:31:98:90:40:68:cc:da:f6:47:70:c3:b7:cb:9d:
d6:31:c6:4c:65:63:48:bd:8a:f7:9d:d3:2a:0c:6c:
db:5d:82:8a:00:2f:54:48:83:22:41:db:e5:40:de:
8c:ec:18:a6:74:f2:23:5d:bf:6f:fc:b1:29:ec:ae:
f7:9f:29:a9:94:21:dd:71:0a:bb:ce:8a:75:17:1e:
5e:86:61:68:cf:97:60:b4:4b:18:5b:b3:50:dc:15:
f4:6d:f8:04:13:83:96:d5:9c:df:dd:5b:09:7d:a8:
c2:90:01:8e:e0:72:26:9f:8f:fc:02:06:49:d8:24:
35:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:0E:D6:74:2C:80:E9:07:3D:39:36:C8:3D:CE:EB:54:58:19:B7:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vg7WdCyA6Qc9OTbIPc7rVFgZt6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.201.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:ad:b3:dd:47:46:80:93:1d:bf:a3:4a:36:46:3a:74:f9:7d:
38:c3:c4:9d:4a:e3:27:06:42:40:26:77:71:83:51:aa:2c:e7:
75:54:62:ac:f7:16:26:7b:6c:54:98:aa:21:92:24:9a:b2:71:
ca:c4:cd:35:ca:fa:79:af:7d:bc:e4:63:8d:78:98:ad:c0:95:
0e:6e:9b:d9:08:2d:1f:c4:80:f1:d9:c3:61:68:4a:6e:79:03:
19:7c:6e:24:fb:11:6e:9f:18:cd:ec:2f:80:33:55:5e:13:e1:
b1:10:85:08:4e:a9:ba:be:67:4d:a3:50:50:0b:6a:18:3b:16:
94:ae:5c:45:ef:37:81:c7:77:01:17:95:73:62:33:30:ce:42:
96:f5:76:35:63:d2:71:88:26:49:4a:28:fa:a3:26:79:10:fe:
8d:4c:41:a6:16:a8:64:5a:d0:85:c7:7e:61:b9:dc:e5:2f:fd:
2d:65:89:5c:78:8a:06:89:32:33:17:a6:f7:25:20:a2:c9:e9:
d7:bf:4c:df:64:97:f5:e2:36:6b:64:ff:67:c9:9a:90:1f:b1:
46:20:0b:33:22:cf:97:d0:c2:42:9c:78:14:6e:ff:ce:b0:32:
a5:dc:07:2c:5c:9a:7e:5d:b1:9b:7f:23:0c:92:76:fe:3b:ca:
10:23:71:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 19:20:48 2026 by rpki-client