Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vhWYo52SCV-1tFgQNTDuPJyvGDo.roa
File: vhWYo52SCV-1tFgQNTDuPJyvGDo.roa (raw, json)
Hash identifier: FxYBZN2mXs79hIfD/Ha+stNvd00NTTcGRxBclZkICsU=
Subject key identifier: BE:15:98:A3:9D:92:09:5F:B5:B4:58:10:35:30:EE:3C:9C:AF:18:3A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EABE85EB2C22564CF0A3569E4965A5BB1
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vhWYo52SCV-1tFgQNTDuPJyvGDo.roa
Signing time: Tue 09 Jun 2026 10:23:12 +0000
ROA not before: Tue 09 Jun 2026 10:23:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8796
IP address blocks: 151.244.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ab:e8:5e:b2:c2:25:64:cf:0a:35:69:e4:96:5a:5b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 10:23:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be1598a39d92095fb5b458103530ee3c9caf183a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:74:15:ba:02:d8:24:fa:37:a4:0b:fb:6e:
c4:38:6c:ee:d7:e7:cd:2f:fb:5a:c3:26:c4:78:25:
d7:8c:83:1c:14:9c:5d:ea:62:20:55:80:cb:de:9e:
38:68:05:20:c6:84:59:d4:67:a7:cd:b6:c1:68:4e:
c5:69:7f:66:cc:a9:f9:ab:6a:e8:2c:c9:f9:b8:37:
62:fa:bf:f3:38:13:48:d0:7d:0b:4d:3b:d2:65:14:
c2:a6:e0:ae:27:21:ad:03:bd:34:75:c0:b4:f4:d8:
58:5c:f1:a2:7c:7d:03:78:41:7e:3c:93:ba:3b:7d:
9f:88:84:f1:4c:25:02:ea:9f:eb:2d:0e:f2:63:69:
bb:b8:f4:28:d9:6f:71:7e:d5:48:3e:9d:8c:b0:dd:
cf:55:a3:2e:18:6e:84:69:5d:dc:16:e4:b4:f7:57:
7a:b8:9e:4d:71:f8:fd:6f:55:14:3d:cf:ca:f6:6a:
74:3f:3b:1e:0a:b2:5f:f3:a0:5b:dc:57:8b:00:02:
11:30:fb:a0:2d:16:4a:5a:63:c2:d0:ea:eb:b8:47:
98:18:98:01:27:3e:99:b0:4a:6b:f6:67:3f:1f:43:
e7:0f:04:7c:b3:b4:04:9c:5b:5b:5d:c2:48:aa:94:
44:b1:b7:59:68:69:7c:62:91:7d:cc:06:96:33:3d:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:98:A3:9D:92:09:5F:B5:B4:58:10:35:30:EE:3C:9C:AF:18:3A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vhWYo52SCV-1tFgQNTDuPJyvGDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.135.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:95:07:d5:ef:a7:e6:d1:b7:c3:10:7d:72:3e:5b:a0:11:6b:
fc:0b:02:1a:d6:d7:f0:a1:cd:64:77:b6:53:57:2c:7e:11:5c:
6a:18:1f:76:0d:f4:d7:e1:e4:c1:71:a4:5c:24:cd:a8:cc:9c:
36:b4:87:64:84:70:ea:06:f9:eb:42:9e:04:ef:bb:c7:00:7b:
b6:f7:5d:3c:de:35:5c:5d:8c:fe:96:20:14:f2:6c:17:60:69:
db:b9:52:bb:63:ba:c2:9c:0a:21:4d:d6:53:33:14:e6:d6:ed:
a0:9e:91:2f:ac:e5:2a:0a:d0:29:42:b5:96:79:d5:c7:d5:07:
9b:67:b3:f6:5a:9b:c9:cd:88:4c:5a:ff:8e:b6:a8:f3:e4:02:
5d:c2:1a:85:a5:4f:75:1a:3d:e9:76:49:f8:f0:12:da:4e:aa:
ab:ec:29:59:69:6c:40:b7:14:dc:f8:22:32:fb:d9:6a:03:51:
fb:bd:07:3c:3c:66:1b:bf:2b:ce:45:dd:05:a9:59:9f:f2:76:
90:2a:16:83:4d:0b:0a:34:d2:a0:65:7c:60:4b:a6:de:5c:94:
84:13:30:11:43:47:dd:74:d4:0f:d2:0a:f8:f8:31:86:94:cd:
89:30:81:d6:2a:49:57:76:cc:60:a1:0f:5a:98:ff:31:1a:f9:
00:a6:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:59 2026 by rpki-client