Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vty3rSKFoGaBnMjkm5QkmTReXyg.roa
File: Vty3rSKFoGaBnMjkm5QkmTReXyg.roa (raw, json)
Hash identifier: 6VHSs4hiCgj/bPd2ZHzMO+SlVR24n9Zo/gYrk1bibwI=
Subject key identifier: 56:DC:B7:AD:22:85:A0:66:81:9C:C8:E4:9B:94:24:99:34:5E:5F:28
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B04ECA031B5DD99E43C68E248C688F98
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vty3rSKFoGaBnMjkm5QkmTReXyg.roa
Signing time: Thu 17 Sep 2026 16:59:08 +0000
ROA not before: Thu 17 Sep 2026 16:59:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154845
IP address blocks: 151.246.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b0:4e:ca:03:1b:5d:d9:9e:43:c6:8e:24:8c:68:8f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 16:59:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=56dcb7ad2285a066819cc8e49b942499345e5f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0b:64:3f:ec:eb:a8:bb:b2:a9:e0:3c:a7:50:
a8:0d:8e:f1:cd:60:77:0a:11:fa:4b:b6:25:fb:f5:
51:8d:95:ec:98:53:c7:c5:79:27:29:f4:b6:6e:0c:
32:eb:12:2d:45:02:bd:65:39:41:0d:fa:b8:b4:fd:
3c:82:db:5d:4e:6f:fc:56:1d:23:e2:23:75:1c:eb:
9d:7a:70:07:d5:26:1f:48:a2:61:64:42:64:43:6a:
5e:81:a1:67:e6:b1:33:7e:15:80:80:b3:ea:b5:af:
42:34:ad:2d:2d:ae:e0:4c:08:de:61:d6:b2:7c:a6:
fe:05:31:e3:b3:6c:02:01:5c:f4:2c:45:07:ed:97:
ca:46:46:9f:99:30:a3:51:a7:87:e8:73:04:31:83:
40:59:22:88:c3:58:9f:b5:fc:4c:a6:47:49:2a:23:
4c:b4:17:4f:5f:8f:bf:c2:c1:e3:9f:a9:13:34:f5:
1a:42:e1:7d:c0:96:d4:b2:a4:34:2b:32:9c:67:50:
6c:33:36:ff:ee:75:41:60:5c:b6:15:a1:45:dd:23:
5c:62:1d:dc:e1:b3:a5:f6:a0:35:a4:fa:83:f2:4c:
23:78:b8:41:7d:5f:29:06:41:00:f1:f5:ac:ad:b9:
a3:38:1c:a7:c5:9c:5d:19:91:e2:08:47:b7:b9:3b:
f1:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:DC:B7:AD:22:85:A0:66:81:9C:C8:E4:9B:94:24:99:34:5E:5F:28
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Vty3rSKFoGaBnMjkm5QkmTReXyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.4.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:36:41:f0:cb:88:da:e9:72:98:21:aa:2f:56:ba:b1:d1:2b:
42:c9:fb:48:23:ca:c1:cd:08:0f:98:a7:e3:b1:42:0d:17:2d:
54:88:43:4e:9e:02:4a:58:ac:f4:5c:f2:be:34:c0:d8:a4:49:
06:0a:b0:c7:cb:59:b8:36:f9:4a:de:c2:42:b9:8d:eb:5f:51:
81:ac:e8:a6:21:a0:9e:a6:90:9d:6b:e0:1b:95:9e:12:c4:d0:
30:f2:c7:30:d0:24:ba:9f:7b:50:18:1f:9b:2b:36:fa:d1:5b:
d8:01:b6:25:b4:d6:43:f1:5f:a6:24:3a:59:59:f9:8d:5e:96:
2b:36:5a:c1:14:8a:f6:bb:4b:86:26:b4:29:f0:3b:3c:b6:34:
1c:54:8c:14:56:2c:63:5f:a9:ee:8a:9c:17:39:7e:46:e9:22:
a1:71:01:bf:43:95:2d:7b:2c:e4:9c:a8:37:41:a2:3c:7e:44:
74:84:16:fe:46:22:d5:e6:0e:7f:81:4d:4d:3a:45:03:c6:77:
f2:93:49:50:72:f9:04:32:8e:28:3c:6b:a7:49:14:59:44:aa:
03:0a:5a:24:58:dc:75:b5:2a:c0:ce:59:0a:aa:29:d4:87:68:
87:87:f7:56:c4:ba:f4:e9:d3:94:18:62:7a:e0:92:86:87:91:
ed:5a:cc:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:11:32 2026 by rpki-client