Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUB-0o8wKyEfHk77DmmFs6bC0So.roa
File: vUB-0o8wKyEfHk77DmmFs6bC0So.roa (raw, json)
Hash identifier: Zj10R7ddUOtpHbS36MLRzF+PO9fG7Z/+QLQZWpKdXgw=
Subject key identifier: BD:40:7E:D2:8F:30:2B:21:1F:1E:4E:FB:0E:69:85:B3:A6:C2:D1:2A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EBC06A5F77A24DFFBC8CB047FF66EB975
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUB-0o8wKyEfHk77DmmFs6bC0So.roa
Signing time: Fri 12 Jun 2026 13:30:12 +0000
ROA not before: Fri 12 Jun 2026 13:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153947
IP address blocks: 151.244.136.0/24 maxlen: 24
151.246.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:06:a5:f7:7a:24:df:fb:c8:cb:04:7f:f6:6e:b9:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 12 13:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bd407ed28f302b211f1e4efb0e6985b3a6c2d12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ad:b6:45:c3:d3:b4:d6:34:5e:48:17:07:4b:
4e:9a:2d:b6:00:09:32:51:ee:9f:15:7f:5c:af:fa:
f6:e6:ee:0d:7c:14:5d:ff:b6:17:c5:c0:aa:0f:11:
7f:d4:57:72:c6:20:0a:9f:25:3e:c2:31:ec:e6:0a:
a4:a5:d0:30:fd:8c:5d:61:c4:3c:32:de:36:5f:bf:
77:d4:c1:6e:4f:a6:ee:21:d2:86:9d:98:86:60:63:
21:75:c1:da:f3:30:ec:84:4d:a4:82:eb:76:97:96:
df:3f:a7:40:f5:14:74:c5:62:a1:bf:13:3f:ca:bc:
6f:1f:d0:4b:ff:0f:39:37:ac:6e:5c:12:86:9a:05:
fb:76:12:34:b2:17:bf:ee:a7:9a:d2:14:16:6d:57:
a6:19:c0:36:cb:d3:b4:62:70:30:e5:15:d9:5c:01:
69:dc:4d:62:be:11:c0:08:94:14:26:e7:d9:dc:dc:
4e:30:48:9a:8e:2e:bf:a6:83:77:29:c6:4e:30:9b:
f6:e8:9e:fe:fb:e9:a5:15:82:14:19:5d:32:3d:6d:
61:02:01:18:6c:a2:7b:bb:88:8b:9a:b4:97:90:bb:
d9:4d:ed:c7:80:48:b1:a0:f0:76:da:26:f6:e2:91:
1e:dd:ae:1c:09:1c:b4:45:ea:10:32:72:c0:02:24:
74:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:40:7E:D2:8F:30:2B:21:1F:1E:4E:FB:0E:69:85:B3:A6:C2:D1:2A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vUB-0o8wKyEfHk77DmmFs6bC0So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.136.0/24
151.246.153.0/24
Signature Algorithm: sha256WithRSAEncryption
17:b5:bb:8a:01:0e:86:af:dd:63:bd:22:0c:46:fb:c8:20:03:
f1:b3:33:60:90:97:3c:a2:91:de:25:63:ca:93:9a:ab:e7:d2:
dd:2a:2a:fb:9c:1c:d8:62:d4:74:66:24:dd:d5:ae:47:42:6c:
d4:80:ac:91:c2:9b:f0:18:ab:0a:41:2d:6e:cc:18:b9:7d:59:
02:38:d3:3d:ee:81:41:48:8c:9a:27:c8:72:0d:f2:3c:e5:e0:
e8:a0:16:4f:e9:4c:70:23:d9:f3:1d:54:de:51:29:36:55:77:
c2:7e:b8:82:1a:84:48:bc:2c:0b:b5:66:ff:b1:14:62:70:44:
35:79:f2:eb:d5:4f:e7:7f:4e:4b:f7:36:be:78:a5:34:7c:65:
53:b9:72:bd:8c:13:6e:41:1f:ff:12:68:dc:d8:db:9a:30:19:
e7:41:9d:3b:93:eb:e8:d7:65:e0:40:44:ba:64:8f:ba:8e:35:
cc:05:86:a4:36:63:10:49:6a:06:58:2c:f5:b0:cb:59:41:61:
ea:62:28:25:0e:7f:d2:ce:4f:b0:87:41:8c:09:f8:7c:28:63:
5f:43:33:25:11:cd:ca:f8:73:69:aa:14:63:1f:43:a7:d0:ef:
c5:96:7a:a2:bc:94:cd:14:89:49:0a:37:bd:b1:58:76:c0:64:
07:6e:d7:74
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ68BqX3eiTf+8jLBH/2brl1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjEyMTMzMDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDQwN2VkMjhmMzAyYjIxMWYxZTRlZmIwZTY5ODViM2E2YzJkMTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt622RcPTtNY0XkgXB0tOmi22AAky
Ue6fFX9cr/r25u4NfBRd/7YXxcCqDxF/1FdyxiAKnyU+wjHs5gqkpdAw/YxdYcQ8
Mt42X7931MFuT6buIdKGnZiGYGMhdcHa8zDshE2kgut2l5bfP6dA9RR0xWKhvxM/
yrxvH9BL/w85N6xuXBKGmgX7dhI0she/7qea0hQWbVemGcA2y9O0YnAw5RXZXAFp
3E1ivhHACJQUJufZ3NxOMEiaji6/poN3KcZOMJv26J7+++mlFYIUGV0yPW1hAgEY
bKJ7u4iLmrSXkLvZTe3HgEixoPB22ib24pEe3a4cCRy0ReoQMnLAAiR0awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFL1AftKPMCshHx5O+w5phbOmwtEqMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdlVCLTBvOHdLeUVmSGs3N0RtbUZzNmJDMFNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/SIAwQA
l/aZMA0GCSqGSIb3DQEBCwUAA4IBAQAXtbuKAQ6Gr91jvSIMRvvIIAPxszNgkJc8
opHeJWPKk5qr59LdKir7nBzYYtR0ZiTd1a5HQmzUgKyRwpvwGKsKQS1uzBi5fVkC
ONM97oFBSIyaJ8hyDfI85eDooBZP6UxwI9nzHVTeUSk2VXfCfriCGoRIvCwLtWb/
sRRicEQ1efLr1U/nf05L9za+eKU0fGVTuXK9jBNuQR//Emjc2NuaMBnnQZ07k+vo
12XgQES6ZI+6jjXMBYakNmMQSWoGWCz1sMtZQWHqYiglDn/Szk+wh0GMCfh8KGNf
QzMlEc3K+HNpqhRjH0On0O/FlnqivJTNFIlJCje9sVh2wGQHbtd0
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:17:46 2026 by rpki-client