Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VscCSp_Jd5mrUTY5FpThFLlHIv0.roa
File: VscCSp_Jd5mrUTY5FpThFLlHIv0.roa (raw, json)
Hash identifier: ED5VUTNIAuXNLrNynLo6d6bpoHNVvm5Qyl3iw5Hpqd8=
Subject key identifier: 56:C7:02:4A:9F:C9:77:99:AB:51:36:39:16:94:E1:14:B9:47:22:FD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0757AE1445CF32201240B21866DDDCD14
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VscCSp_Jd5mrUTY5FpThFLlHIv0.roa
Signing time: Sun 06 Sep 2026 06:49:42 +0000
ROA not before: Sun 06 Sep 2026 06:49:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.245.20.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:75:7a:e1:44:5c:f3:22:01:24:0b:21:86:6d:dd:cd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 6 06:49:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c7024a9fc97799ab5136391694e114b94722fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f7:7b:c9:d3:fa:e3:74:41:67:94:fb:7f:b2:
b6:43:09:b9:26:8c:9f:97:aa:b2:48:83:09:9b:2a:
cd:d4:91:84:20:94:f8:91:25:18:b0:76:7d:20:4c:
d1:6b:d3:26:ab:ce:19:55:5f:24:8d:37:e4:a3:90:
29:1e:55:0b:dc:b8:ed:d6:14:66:ce:4a:7a:b5:18:
ff:25:5a:61:2c:6b:3b:02:73:ad:a7:8b:19:1c:68:
71:7e:71:a5:98:f0:ff:13:30:d8:6f:91:84:4a:77:
2d:62:00:00:02:e5:d4:ec:e4:6d:b9:43:71:a1:52:
20:09:fb:5c:50:e4:d8:9d:11:d8:c0:0a:82:51:e6:
06:88:d4:9a:35:58:b8:44:95:d3:09:c2:e9:a1:71:
9f:e1:f5:4a:59:61:2b:c2:e1:f4:d8:17:49:5f:18:
76:14:68:45:e8:4c:34:0f:cc:9a:40:4a:12:f3:b9:
12:77:b6:f7:8a:18:98:d9:4d:a9:57:c9:06:2e:67:
f1:4c:8a:3d:95:74:9b:a5:55:34:37:3f:f1:78:0c:
16:f7:eb:6a:9a:0a:bf:c5:b0:f1:2e:23:8a:c5:19:
c4:b0:2a:4b:f9:bd:7e:77:66:bd:8b:c8:e9:d7:f2:
a4:ab:c9:22:80:88:86:bc:25:92:71:9d:77:a2:01:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C7:02:4A:9F:C9:77:99:AB:51:36:39:16:94:E1:14:B9:47:22:FD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VscCSp_Jd5mrUTY5FpThFLlHIv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.240.227.0/24
151.241.207.0/24
151.242.105.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.244.235.0/24
151.245.20.0/24
151.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ee:8b:e5:f4:df:eb:01:84:6d:29:4e:0a:b4:23:63:c1:f1:
11:41:89:9e:55:c2:b3:af:4a:9b:fa:bb:73:5f:2c:31:3f:5d:
5f:22:91:4c:48:65:3b:a3:cf:b4:f4:f1:dc:4c:0b:2f:82:c9:
7e:f7:cb:a7:9b:7e:1b:41:10:d1:7f:af:76:6e:a2:1a:5c:60:
45:23:c5:ba:37:c0:3c:be:fb:68:a2:5c:93:97:1a:c9:db:4f:
07:98:19:83:78:3f:52:b3:2e:24:bc:5b:82:f8:ea:92:4f:4e:
3f:cb:4f:f5:58:45:27:f3:4a:21:ee:4a:fd:68:88:0e:60:91:
f9:7f:09:71:92:d0:2f:17:e1:65:3e:12:79:82:ff:19:d2:d7:
b6:36:22:e6:b0:a0:3c:cc:85:57:99:46:47:4b:4d:17:33:d7:
70:93:a8:2d:60:0e:fd:d7:47:a1:5b:13:f4:26:c8:c2:65:8c:
47:4e:a0:bd:29:a9:e1:7b:74:12:81:19:29:f0:2e:67:97:be:
5d:28:6f:85:73:fc:3e:86:19:e3:c6:fc:c6:2f:97:81:43:2e:
77:a6:80:ca:ce:b3:5a:b9:07:7b:68:b1:1b:ec:17:b6:e8:4c:
c4:2f:54:07:f2:42:1e:1e:5c:8e:79:cf:30:4c:30:1e:44:4e:
25:40:6b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 05:32:37 2026 by rpki-client