Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VCeyx0gq8Sut4X69foDfTRao718.roa
File: VCeyx0gq8Sut4X69foDfTRao718.roa (raw, json)
Hash identifier: Zbvn9m9RQAlSnNUYv097gRNolifg0BRVMMmIvsDWpRA=
Subject key identifier: 54:27:B2:C7:48:2A:F1:2B:AD:E1:7E:BD:7E:80:DF:4D:16:A8:EF:5F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA093F51429E6FF662952111E3256A9CB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VCeyx0gq8Sut4X69foDfTRao718.roa
Signing time: Sun 07 Jun 2026 05:35:11 +0000
ROA not before: Sun 07 Jun 2026 05:35:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18978
IP address blocks: 151.244.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a0:93:f5:14:29:e6:ff:66:29:52:11:1e:32:56:a9:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 7 05:35:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5427b2c7482af12bade17ebd7e80df4d16a8ef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:df:e0:6c:88:9b:f2:dd:25:01:df:a4:d5:93:
09:2a:d8:ed:48:e3:2c:03:ba:2b:7e:4a:fc:13:b9:
4f:00:e7:5b:99:19:15:d1:9e:3d:27:30:de:87:69:
d9:5e:a2:aa:dc:5a:e1:cf:22:8a:1b:94:9a:5d:a4:
a4:70:ed:70:12:d9:a4:f8:5f:1b:51:88:c2:07:a1:
59:f8:aa:48:13:5e:66:7a:ed:64:df:ae:91:6c:89:
d2:68:42:72:bf:40:93:e4:ea:3b:88:69:de:d1:36:
21:fc:95:84:0c:0e:46:73:59:81:f5:40:38:f1:ff:
f5:0c:71:b2:46:dd:31:a5:dc:59:8b:ed:d8:b4:be:
bb:7f:de:a6:bd:45:0c:c0:f6:32:c9:6b:3d:c5:6a:
70:ff:1f:fd:9c:4c:f7:07:9c:a0:c8:99:7e:32:04:
ac:be:e2:04:55:c5:77:3b:b0:84:54:e5:ae:9e:04:
0b:e5:60:40:90:c3:d8:ee:d2:8a:23:c2:b6:88:49:
77:1a:f6:d3:55:6f:98:81:99:ce:b2:6e:ae:23:63:
be:82:14:4d:86:0e:61:ce:cd:9a:dd:54:37:db:e5:
cd:39:5f:2a:f1:de:e5:c4:b4:6f:cf:12:38:ad:e0:
f7:e0:a9:f0:87:7e:4e:12:55:e3:4a:a4:cf:98:72:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:27:B2:C7:48:2A:F1:2B:AD:E1:7E:BD:7E:80:DF:4D:16:A8:EF:5F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VCeyx0gq8Sut4X69foDfTRao718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:22:03:09:2b:a1:ff:26:96:dc:05:02:b0:18:8a:e5:39:93:
fd:c1:f1:51:b9:97:01:24:50:a9:62:e5:ef:f1:c3:29:6b:2e:
1b:07:2d:a2:27:d7:f7:b6:27:7f:1f:87:79:2d:d2:4f:a5:3c:
41:0a:a9:71:fd:a7:55:88:8c:84:3a:83:9e:c6:83:26:e8:13:
59:a2:97:a9:a0:93:e5:f1:89:50:c0:c7:75:1e:37:df:90:e6:
dc:be:c7:d0:ea:1c:ec:9d:c9:87:f5:be:ca:ee:33:eb:b0:01:
59:9e:f9:23:93:5c:09:40:fd:b7:ea:d0:0c:c0:c0:0e:03:a7:
a4:7f:aa:e9:4c:f0:ce:16:0e:7a:cb:1b:e7:0b:6d:33:23:f3:
03:e0:65:1f:05:10:c9:09:d8:cb:9f:31:e8:5e:ed:f1:12:4c:
b6:2a:83:ec:11:fb:44:6b:db:cd:e4:00:04:7d:fa:9f:51:04:
80:32:5d:fb:3b:13:0d:39:de:6b:a3:8d:ff:7b:c3:5f:23:2a:
9a:70:29:f5:87:9b:16:ed:2f:de:0a:eb:e7:46:2a:b3:8f:74:
24:f3:85:6a:f6:dc:05:3a:d7:6b:8f:4b:b5:24:d5:af:7b:5c:
fd:de:1b:c7:1e:9d:82:d2:40:88:ec:e9:6c:45:e3:da:75:74:
55:b9:0b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:50:30 2026 by rpki-client