Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VjCxGj1GEH-XXvV5dQ5xEDNfv08.roa
File: VjCxGj1GEH-XXvV5dQ5xEDNfv08.roa (raw, json)
Hash identifier: VXR23ly4M7G3mEiK1beMl7KxA+OaOEWhoBg1sOQy2SM=
Subject key identifier: 56:30:B1:1A:3D:46:10:7F:97:5E:F5:79:75:0E:71:10:33:5F:BF:4F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0EC2BAA7128F56D7184E46B65336C7A73
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VjCxGj1GEH-XXvV5dQ5xEDNfv08.roa
Signing time: Tue 29 Sep 2026 07:57:59 +0000
ROA not before: Tue 29 Sep 2026 07:57:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 37.202.196.0/24 maxlen: 24
151.246.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2b:aa:71:28:f5:6d:71:84:e4:6b:65:33:6c:7a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 29 07:57:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5630b11a3d46107f975ef579750e7110335fbf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ae:fa:57:55:97:d8:0a:2b:84:fe:d0:14:11:
ff:56:24:ac:51:b9:17:2f:f6:a4:98:9a:a7:39:9e:
cf:7c:84:d9:70:ab:f1:bf:02:ed:3d:5e:2a:25:37:
74:52:e9:a8:6b:32:df:cb:e4:86:ae:5a:3b:47:27:
66:6f:fe:1d:06:60:6c:19:4c:43:86:66:43:ed:a6:
d0:92:99:ab:5f:ed:8d:ae:ef:e7:fc:a3:2a:20:29:
54:97:08:96:ae:3a:c8:22:47:6c:78:32:4c:f8:06:
f8:29:31:3b:cc:24:e7:d6:b5:82:99:bf:16:b5:a8:
5b:e7:ff:53:1e:b0:b2:ec:ae:f3:4e:b0:f4:df:5f:
b8:ff:4d:13:bd:84:6c:df:13:37:13:d9:23:32:c2:
19:32:7b:10:5b:73:86:6b:5e:e7:dd:16:2d:43:5e:
2e:d4:4c:f2:ad:d2:70:d0:76:2c:07:c1:0b:a5:1a:
3c:dd:05:13:3b:a3:c4:1f:d4:9f:61:3b:3a:07:06:
84:43:35:c1:bf:5b:d1:65:55:f6:71:b1:54:a3:8d:
67:3c:1c:6b:87:33:2a:9a:d6:53:c0:80:d7:54:17:
7d:f7:42:74:a1:58:aa:f9:1c:5d:23:a4:74:9b:e0:
10:03:af:5d:c9:59:b9:57:fb:f7:59:2a:43:be:a4:
1d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:30:B1:1A:3D:46:10:7F:97:5E:F5:79:75:0E:71:10:33:5F:BF:4F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VjCxGj1GEH-XXvV5dQ5xEDNfv08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.196.0/24
151.246.170.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:c8:4a:84:fd:b5:54:3a:51:5b:3b:fb:a6:b0:64:d1:f1:c0:
b3:73:2a:d5:67:4f:ba:7c:7a:52:4b:fc:49:5c:db:38:a1:25:
66:05:2f:42:d3:9c:33:d6:7d:82:63:78:45:21:99:a1:db:44:
3a:9d:d0:ee:1a:5a:86:15:b2:76:89:a8:dd:5e:e4:18:3a:39:
5b:97:3b:22:20:c5:82:f6:ab:9e:c0:df:da:70:bd:ff:85:45:
94:9f:e7:85:64:31:2f:72:b8:46:47:f0:07:3f:e3:13:8e:74:
56:73:b4:83:e6:5b:ea:3c:16:cb:81:8e:09:2b:12:fd:c8:ee:
5a:57:e9:01:c1:b0:4f:96:17:a2:a6:ac:d0:fc:3e:46:51:4f:
d8:01:dc:a9:85:65:e2:38:cf:11:f0:66:c7:26:47:b1:db:d3:
49:d7:9c:21:e7:8c:b7:f1:cb:fe:bf:13:56:4e:5b:53:74:ef:
2e:79:ab:56:5e:43:2e:e4:48:de:30:dc:eb:fb:a1:25:3e:63:
b8:18:4d:f9:84:75:b3:97:22:44:01:f2:be:c2:71:07:85:07:
61:df:85:3d:65:9b:79:33:25:67:17:78:d6:93:74:3a:b3:29:
1f:7f:50:9b:25:19:e9:d8:99:0b:7f:c9:2e:c9:90:76:7e:77:
a9:06:79:3d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDsK6pxKPVtcYTka2UzbHpzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTI5MDc1NzU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjMwYjExYTNkNDYxMDdmOTc1ZWY1Nzk3NTBlNzExMDMzNWZiZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7a76V1WX2AorhP7QFBH/ViSsUbkX
L/akmJqnOZ7PfITZcKvxvwLtPV4qJTd0UumoazLfy+SGrlo7Rydmb/4dBmBsGUxD
hmZD7abQkpmrX+2Nru/n/KMqIClUlwiWrjrIIkdseDJM+Ab4KTE7zCTn1rWCmb8W
tahb5/9THrCy7K7zTrD031+4/00TvYRs3xM3E9kjMsIZMnsQW3OGa17n3RYtQ14u
1EzyrdJw0HYsB8ELpRo83QUTO6PEH9SfYTs6BwaEQzXBv1vRZVX2cbFUo41nPBxr
hzMqmtZTwIDXVBd990J0oViq+RxdI6R0m+AQA69dyVm5V/v3WSpDvqQdYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFYwsRo9RhB/l171eXUOcRAzX79PMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVmpDeEdqMUdFSC1YWHZWNWRRNXhFRE5mdjA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJcrEAwQA
l/aqMA0GCSqGSIb3DQEBCwUAA4IBAQCeyEqE/bVUOlFbO/umsGTR8cCzcyrVZ0+6
fHpSS/xJXNs4oSVmBS9C05wz1n2CY3hFIZmh20Q6ndDuGlqGFbJ2iajdXuQYOjlb
lzsiIMWC9quewN/acL3/hUWUn+eFZDEvcrhGR/AHP+MTjnRWc7SD5lvqPBbLgY4J
KxL9yO5aV+kBwbBPlheipqzQ/D5GUU/YAdyphWXiOM8R8GbHJkex29NJ15wh54y3
8cv+vxNWTltTdO8ueatWXkMu5EjeMNzr+6ElPmO4GE35hHWzlyJEAfK+wnEHhQdh
34U9ZZt5MyVnF3jWk3Q6sykff1CbJRnp2JkLf8kuyZB2fnepBnk9
-----END CERTIFICATE-----
Generated at Mon Oct 19 22:46:11 2026 by rpki-client