Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoPw0IU_3O-g_467n5d7BeEuRMw.roa
File: VoPw0IU_3O-g_467n5d7BeEuRMw.roa (raw, json)
Hash identifier: OkZRXWJB+iXciM0zqR1C2QSSXIpgxhEEsKaYXrzaBqY=
Subject key identifier: 56:83:F0:D0:85:3F:DC:EF:A0:FF:8E:BB:9F:97:7B:05:E1:2E:44:CC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A144521F81E86BF17ECA68B53B5362F844
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoPw0IU_3O-g_467n5d7BeEuRMw.roa
Signing time: Fri 16 Oct 2026 10:46:35 +0000
ROA not before: Fri 16 Oct 2026 10:46:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 151.241.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:52:1f:81:e8:6b:f1:7e:ca:68:b5:3b:53:62:f8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 16 10:46:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5683f0d0853fdcefa0ff8ebb9f977b05e12e44cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:1c:1f:9d:f4:cb:7b:ad:fd:8a:37:e1:c0:
e2:aa:e9:46:5b:b7:13:0b:3b:dd:70:e0:20:c7:a4:
21:87:b5:ff:52:4a:d4:1f:6c:60:02:f9:b5:05:ed:
0d:40:82:0e:80:54:1c:ab:c7:35:19:5b:ba:16:70:
82:4d:69:91:48:10:87:d9:9b:0e:84:8b:65:10:36:
31:bc:c0:b6:d4:2f:2f:43:29:54:47:7b:57:30:06:
a2:5d:2e:ad:3d:a9:ab:8e:22:bd:f2:aa:9b:a0:29:
c0:23:bf:48:23:84:f2:a8:29:1a:7e:f6:56:4b:5d:
30:bb:87:cb:42:e1:ac:5c:2b:e2:a3:92:28:a0:de:
6b:48:81:c3:98:ae:80:95:7d:9d:6a:9b:da:73:54:
d4:97:1c:7c:2b:1c:19:aa:35:e1:09:18:cf:d8:42:
56:b9:56:1a:6b:23:41:99:c6:a8:69:51:50:0a:be:
44:9a:ed:64:de:89:83:47:72:3e:5b:64:94:71:e2:
b2:e2:dc:48:10:f6:ef:2e:05:f4:f9:78:c7:1e:90:
f3:bf:a1:41:c2:74:2c:44:0b:30:7a:16:9c:b4:6e:
f0:ec:5d:c0:1e:78:c5:d5:34:de:46:01:ff:3c:48:
cc:27:e4:16:af:ca:8d:d3:88:98:b0:3d:5f:2a:a5:
4b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:83:F0:D0:85:3F:DC:EF:A0:FF:8E:BB:9F:97:7B:05:E1:2E:44:CC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VoPw0IU_3O-g_467n5d7BeEuRMw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
Signature Algorithm: sha256WithRSAEncryption
93:6b:ce:b9:63:2a:60:15:e8:48:9b:3c:6c:28:57:f7:28:41:
84:7d:73:f7:29:c7:32:b9:7c:bf:bc:78:14:73:23:39:11:42:
1a:15:76:a7:4a:77:30:5a:a6:97:c8:be:4a:a4:f6:f1:c5:9b:
80:1a:15:82:54:35:b2:bd:ed:a8:3b:6b:b0:74:5b:c3:dd:ea:
48:e2:b2:3d:98:07:58:30:18:e7:af:34:fa:a4:fe:1a:fd:cb:
ce:32:a7:cf:0a:39:60:b2:be:b3:80:25:d6:7d:f3:56:54:ea:
89:86:70:6e:fb:47:1e:8a:51:3b:f0:82:bd:b3:f1:ba:2b:f7:
7c:ee:0b:03:20:a4:0a:9c:80:71:d2:31:94:f6:7d:27:d3:f0:
fc:e7:05:8e:66:13:e4:75:89:f4:d6:7e:cf:93:32:e2:c1:7a:
b1:6d:ef:1a:cd:4b:ac:d0:79:1a:a0:13:39:ce:91:31:a4:05:
2b:d8:53:98:ee:7c:38:ec:9a:f3:d0:d1:74:de:46:ad:03:16:
bb:fe:b7:56:c2:07:d9:ae:70:4e:5f:82:40:e2:1a:db:3a:f3:
60:87:fb:02:b3:dd:36:8a:a9:22:67:a8:b1:9f:62:65:93:01:
87:82:cf:13:e4:31:22:a1:1c:b7:80:a0:6c:df:12:9b:b2:2e:
0c:af:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 02:28:39 2026 by rpki-client