Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VfgxJxplpv9XLj2PTHwUSdO_lfw.roa
File: VfgxJxplpv9XLj2PTHwUSdO_lfw.roa (raw, json)
Hash identifier: VPG0TFYkcdRqh1IMUh7h+6ov448Vz/cDFaRSLC0NOa4=
Subject key identifier: 55:F8:31:27:1A:65:A6:FF:57:2E:3D:8F:4C:7C:14:49:D3:BF:95:FC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EA5B4D1BBD0C076E4ECD284565C22FB9F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VfgxJxplpv9XLj2PTHwUSdO_lfw.roa
Signing time: Mon 08 Jun 2026 05:29:11 +0000
ROA not before: Mon 08 Jun 2026 05:29:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31924
IP address blocks: 151.243.193.0/24 maxlen: 24
151.244.123.0/24 maxlen: 24
151.247.2.0/24 maxlen: 24
151.247.8.0/24 maxlen: 24
151.247.10.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:b4:d1:bb:d0:c0:76:e4:ec:d2:84:56:5c:22:fb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 8 05:29:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55f831271a65a6ff572e3d8f4c7c1449d3bf95fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:5b:e3:cd:db:79:69:e2:07:da:8d:d5:df:
8a:60:76:a1:c8:7a:77:79:35:e9:02:df:e5:84:45:
25:93:13:8a:4f:22:04:74:89:3b:1e:f0:49:85:a8:
98:e5:22:85:e4:a3:cf:7e:84:48:e6:d9:c9:fd:e4:
53:8a:cb:65:49:9e:86:d4:ef:92:f3:fd:f3:e5:cd:
5c:9c:ae:9b:51:24:85:ff:56:3f:a1:d2:55:e7:55:
23:11:20:b9:e7:9f:81:05:09:de:29:35:e3:fa:fa:
6a:ee:6e:e0:24:54:62:3e:c3:b2:0d:71:e8:1b:82:
e6:90:58:1b:10:19:f1:5b:41:9e:33:4d:1a:9b:a2:
c8:7b:9e:d9:70:1f:db:f3:39:5b:94:a4:b4:f5:07:
96:46:37:3a:d5:4b:8c:56:fa:66:a2:df:c8:7f:ac:
cc:b5:fa:a3:fb:31:3c:46:2b:85:a8:b0:d7:66:0a:
a5:37:4d:ef:8a:c0:62:75:db:20:ed:bc:8e:b2:3a:
34:5f:68:aa:2a:9b:89:dc:87:38:5d:74:43:85:1d:
e8:00:ee:f3:0a:b2:b3:79:7c:6b:2f:de:88:f3:96:
21:af:cf:2a:96:ab:d9:3a:b9:11:92:27:cb:99:39:
0f:2b:e4:81:26:d3:db:2a:25:ac:e4:cf:d4:50:c5:
2b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F8:31:27:1A:65:A6:FF:57:2E:3D:8F:4C:7C:14:49:D3:BF:95:FC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VfgxJxplpv9XLj2PTHwUSdO_lfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.193.0/24
151.244.123.0/24
151.247.2.0/24
151.247.8.0/24
151.247.10.0/24
151.247.15.0/24
Signature Algorithm: sha256WithRSAEncryption
47:33:0e:d3:15:31:24:27:e4:f7:4f:0b:aa:ff:bd:4c:9b:40:
3a:ec:b1:9e:3e:7b:66:2a:a7:8e:37:ec:f6:50:eb:17:e2:d6:
95:aa:45:e7:ef:98:f3:d9:f8:24:f8:df:4a:b2:47:55:62:b0:
a9:32:90:cf:ad:e3:3e:ca:9c:6f:fd:54:35:b7:7e:b7:92:f7:
45:ec:05:eb:64:34:93:c0:3d:c9:49:cf:db:29:58:4e:24:b4:
ac:61:a8:60:cf:9b:4d:5f:53:35:e9:1c:5f:6b:a5:49:15:8c:
b9:c5:c2:47:76:3d:7e:d1:49:4d:04:08:a7:85:15:58:ee:ac:
67:4e:83:7d:b7:ab:32:20:f4:28:d1:a7:c3:ee:6f:cd:67:df:
cd:f5:b7:56:23:77:8e:4b:3a:1a:bb:d9:77:3a:54:0e:a6:2d:
29:91:ba:79:30:2e:0f:e5:55:74:ad:7b:dc:c9:c2:fb:bc:97:
2a:61:81:2f:ae:ed:20:41:98:c6:01:ae:84:e7:70:b4:33:dd:
5e:bd:c4:19:44:29:2d:7c:59:2d:99:c5:5c:76:fd:a9:f1:c5:
8f:0f:04:2e:85:b5:58:f3:0b:28:05:db:bc:4a:6e:9b:76:f9:
fd:58:56:45:c6:bf:2a:93:ae:f4:25:51:b7:94:6d:a4:84:a0:
2e:b5:37:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:56:05 2026 by rpki-client