Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VsH8BEPWjeTfmX2D4mfjgJr_H3Y.roa
File: VsH8BEPWjeTfmX2D4mfjgJr_H3Y.roa (raw, json)
Hash identifier: lGVTcxwN2eoyHaxlUvK+J2vCaIW0dxr0D0dC7jiV19M=
Subject key identifier: 56:C1:FC:04:43:D6:8D:E4:DF:99:7D:83:E2:67:E3:80:9A:FF:1F:76
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09EBE2FFDF296A37B954E271BB4328075
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VsH8BEPWjeTfmX2D4mfjgJr_H3Y.roa
Signing time: Mon 14 Sep 2026 07:07:39 +0000
ROA not before: Mon 14 Sep 2026 07:07:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399359
IP address blocks: 37.202.212.0/24 maxlen: 24
151.242.64.0/24 maxlen: 24
151.244.163.0/24 maxlen: 24
151.245.66.0/24 maxlen: 24
151.245.67.0/24 maxlen: 24
151.245.98.0/24 maxlen: 24
151.245.122.0/24 maxlen: 24
151.246.146.0/24 maxlen: 24
151.246.166.0/24 maxlen: 24
151.246.200.0/24 maxlen: 24
151.246.201.0/24 maxlen: 24
151.246.202.0/24 maxlen: 24
151.246.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:be:2f:fd:f2:96:a3:7b:95:4e:27:1b:b4:32:80:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 07:07:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56c1fc0443d68de4df997d83e267e3809aff1f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2d:d4:ca:a1:67:86:48:7e:42:75:cd:15:3d:
3d:49:01:26:23:a3:17:34:2b:46:40:a6:26:e0:42:
a7:b6:b7:5a:bc:15:99:4d:a4:48:14:72:2a:88:36:
c5:5d:c6:b6:97:6e:d4:39:43:b2:5b:50:bb:1c:c9:
01:42:33:45:cd:42:d2:52:73:bd:92:8f:c7:98:3c:
ac:56:70:19:fe:61:02:46:e0:4e:b3:1b:17:58:10:
fd:64:ce:c3:b9:19:57:55:8a:c9:bb:45:b9:24:22:
dc:d6:8e:03:b1:f8:0b:dc:75:a7:08:f8:f8:d0:d1:
d8:e5:76:6b:09:38:17:34:ba:eb:50:9c:53:e9:4c:
92:82:4a:af:75:6d:79:e9:ea:99:7c:44:82:59:95:
33:2c:83:98:26:ba:72:3e:12:81:37:f4:24:11:76:
4b:88:0d:d1:7e:c4:0b:0c:93:f3:59:12:48:e9:ac:
d8:9b:a8:95:c5:26:2e:e9:ca:36:01:f0:1c:07:68:
76:1a:f9:c0:a0:e5:54:8f:19:d0:ef:a8:cf:6f:7e:
85:74:04:91:f5:0e:df:00:ca:e7:7b:ee:9f:8c:cc:
cd:3f:4a:55:e2:bc:31:91:21:e6:c1:48:bd:2b:58:
a6:ee:f7:ad:0e:58:dd:30:a8:14:9a:97:fd:39:f6:
5f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:C1:FC:04:43:D6:8D:E4:DF:99:7D:83:E2:67:E3:80:9A:FF:1F:76
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VsH8BEPWjeTfmX2D4mfjgJr_H3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.212.0/24
151.242.64.0/24
151.244.163.0/24
151.245.66.0/23
151.245.98.0/24
151.245.122.0/24
151.246.146.0/24
151.246.166.0/24
151.246.200.0-151.246.202.255
151.246.214.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:d7:06:a5:b4:c9:b5:15:4b:21:25:20:dd:90:34:8e:de:c6:
e3:a7:af:f7:20:9d:23:6e:a5:0a:f4:e5:98:38:1d:39:62:7a:
27:1d:eb:09:b9:ea:2d:46:43:76:b3:32:74:f4:48:62:b4:68:
e9:4b:1c:f2:66:88:44:90:b5:c0:eb:88:7c:bf:dc:a4:ec:98:
27:26:ca:22:17:cc:10:ef:9c:49:ae:8f:bb:4c:9d:7f:77:38:
91:eb:63:03:30:34:b4:a3:83:33:6f:9c:7b:af:61:ad:90:b1:
7a:50:f9:3a:a2:e1:d7:85:e3:76:f8:c8:3f:16:89:da:d4:e3:
05:78:e2:b3:52:6e:d1:da:59:1b:35:6f:94:4b:10:f8:c8:3a:
b6:26:77:51:07:56:0c:fe:85:08:92:a5:7c:ee:b8:f5:d0:92:
20:11:7f:e0:a7:93:15:e2:51:a5:b4:f8:f0:f5:6a:ad:84:d6:
a7:a7:70:01:95:4f:8d:aa:6b:53:9d:da:70:6a:43:91:02:f3:
c8:91:b3:72:c6:b9:cf:3e:69:d5:35:66:68:59:f6:92:f8:81:
f2:0c:43:93:b7:42:67:ae:68:76:fb:b1:fe:b7:6d:cb:cb:50:
34:41:10:a9:ba:6d:df:9f:78:d0:6d:6c:c1:37:e1:7f:08:5a:
2f:7e:cf:21
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:13:54 2026 by rpki-client