Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQG_pWkM67EqXOnI-13gAmtyR4E.roa
File: VQG_pWkM67EqXOnI-13gAmtyR4E.roa (raw, json)
Hash identifier: fW+dc/8j2so9xN0xqfDh7NYYeM8yDOFPZpv74fgSs3c=
Subject key identifier: 55:01:BF:A5:69:0C:EB:B1:2A:5C:E9:C8:FB:5D:E0:02:6B:72:47:81
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F93B154C6B2DDD4AB67E9DD31962898F6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQG_pWkM67EqXOnI-13gAmtyR4E.roa
Signing time: Fri 24 Jul 2026 10:35:00 +0000
ROA not before: Fri 24 Jul 2026 10:35:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215152
IP address blocks: 151.247.97.0/24 maxlen: 24
151.247.105.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:b1:54:c6:b2:dd:d4:ab:67:e9:dd:31:96:28:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 24 10:35:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5501bfa5690cebb12a5ce9c8fb5de0026b724781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:44:c1:ef:bf:bf:7d:af:df:1b:10:08:20:
30:01:3b:3f:71:ee:9a:db:ef:37:d3:8b:8d:28:a8:
0d:f0:45:3a:2b:f5:a5:22:3c:ce:61:4c:ef:4b:4f:
5c:a6:3f:2d:07:f6:ff:23:63:a4:e0:42:8d:ba:9d:
8d:ac:25:82:20:0e:d3:fd:26:fd:68:19:09:ee:47:
9b:21:f4:3d:56:12:d5:00:6e:5f:33:e9:e7:c1:36:
e0:d8:0c:db:31:72:c1:51:9a:3e:86:58:b5:c1:fa:
a6:8f:26:37:12:91:2a:aa:c8:b4:6e:ea:31:dc:75:
6c:51:37:30:ff:27:00:e1:ac:32:d1:00:c6:32:52:
51:32:b1:a8:45:e6:1c:6b:5c:3c:71:ad:89:8e:e5:
cb:03:79:77:6a:96:62:ee:9f:e6:b4:5b:c4:c3:96:
ae:b4:05:31:42:2a:08:39:13:6d:ca:43:42:b3:0f:
84:07:bc:14:66:2b:91:23:bc:3a:8f:9a:61:ba:ff:
1e:5f:29:2c:51:2d:a4:86:3c:83:f4:24:52:d3:d3:
1d:e0:6c:ef:44:0e:36:89:a1:b5:22:bb:4b:d1:a2:
b9:94:1c:82:03:c3:2e:83:0f:62:67:de:c6:5c:2b:
c2:0b:34:37:5a:12:ad:79:d0:33:fb:64:6a:41:13:
6e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:01:BF:A5:69:0C:EB:B1:2A:5C:E9:C8:FB:5D:E0:02:6B:72:47:81
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VQG_pWkM67EqXOnI-13gAmtyR4E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.97.0/24
151.247.105.0/24
Signature Algorithm: sha256WithRSAEncryption
14:63:46:d5:9f:ac:28:5d:53:40:2d:35:8f:e8:48:1a:1e:a5:
23:33:41:45:41:09:85:4b:e6:16:d7:89:85:93:df:d5:66:a8:
74:c9:b9:c6:b1:4d:ab:26:37:e3:3f:60:cf:8d:33:af:96:e2:
3d:8a:34:42:fa:90:4c:70:68:c6:7c:ad:84:23:47:ad:b6:d9:
1a:bd:7a:23:84:c6:3b:4a:65:1e:cc:f4:dc:40:7b:48:4a:13:
e8:fa:0b:08:98:3c:33:5d:cc:98:c6:5f:ea:45:52:04:c2:80:
8f:8d:f5:a2:ba:39:d3:6b:af:6c:3b:58:ac:c3:c0:96:f3:91:
b2:2f:03:44:a5:e8:67:3b:74:46:b8:34:33:fa:be:eb:21:be:
18:98:6c:fc:0d:0a:97:7b:bf:bd:ac:71:53:23:fc:25:de:8e:
a0:9d:1d:cf:e4:b2:a0:8e:c6:66:fc:42:72:f5:2c:e5:38:e8:
72:37:1c:89:11:7b:e5:a4:bb:9b:47:51:05:b3:d2:01:b5:18:
b3:75:0b:eb:39:6e:e4:1c:a6:54:4c:bf:21:2d:0c:0f:a7:a5:
16:86:9f:a1:81:a1:1d:ea:b7:90:fd:23:7b:24:74:55:47:f7:
bb:83:06:74:6a:9c:6b:76:ad:c4:d9:98:41:23:b4:b8:c6:95:
b6:4c:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:36:51 2026 by rpki-client