Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CHZXYKbQGtLXQae6w6ztQkkeOc8.roa
File: CHZXYKbQGtLXQae6w6ztQkkeOc8.roa (raw, json)
Hash identifier: 6avWUlD3RCA8tfCyW/+lXDndehUPMgGsIGyggfHfDHc=
Subject key identifier: 08:76:57:60:A6:D0:1A:D2:D7:41:A7:BA:C3:AC:ED:42:49:1E:39:CF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D42F6204170CC810A8078FC94CFAB5018
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CHZXYKbQGtLXQae6w6ztQkkeOc8.roa
Signing time: Tue 31 Mar 2026 08:15:19 +0000
ROA not before: Tue 31 Mar 2026 08:15:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 270439
IP address blocks: 151.247.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 10:55:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:42:f6:20:41:70:cc:81:0a:80:78:fc:94:cf:ab:50:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 31 08:15:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08765760a6d01ad2d741a7bac3aced42491e39cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:0e:0c:df:02:af:2f:c4:03:5c:13:bf:97:
4b:27:a7:9e:b0:71:7f:86:ee:41:54:c4:ce:cc:6e:
ec:4e:ec:3a:76:8d:b9:23:10:66:38:15:ba:c8:cf:
a0:15:5c:29:22:06:af:39:e9:49:6c:e5:3c:92:5c:
c8:8d:56:9e:9e:d3:ec:69:d1:65:53:07:45:d1:43:
6e:d7:7c:4d:6f:aa:42:6a:8a:21:92:d2:4b:1e:09:
db:bc:86:55:0f:02:a2:46:7f:e2:59:16:ae:a9:4c:
36:d9:6f:c8:6a:64:42:83:d8:a1:0c:e8:cb:d5:02:
52:b3:ec:1c:46:c7:15:5d:f1:e8:06:b0:53:97:b2:
92:59:4b:52:ec:ec:09:ff:c8:ec:87:4d:80:19:3a:
5d:62:3b:50:86:c6:9c:6d:a2:32:58:8e:cc:17:cc:
b5:68:be:bc:37:1c:08:12:94:5d:38:c7:6d:7a:fb:
39:a4:e6:b0:9e:e2:86:be:d5:cc:14:a2:20:66:fb:
5f:af:10:52:2a:94:1d:2f:bb:ca:61:6d:49:1e:a7:
44:18:5e:16:5e:aa:65:47:54:2a:27:d1:cb:48:11:
24:3c:07:c6:9f:da:a5:1f:84:da:42:a0:84:31:ce:
70:b2:04:4b:0f:3f:17:19:3b:25:a4:18:86:8d:f7:
56:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:76:57:60:A6:D0:1A:D2:D7:41:A7:BA:C3:AC:ED:42:49:1E:39:CF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CHZXYKbQGtLXQae6w6ztQkkeOc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.247.175.0/24
Signature Algorithm: sha256WithRSAEncryption
af:bc:fb:35:6b:22:21:0f:51:13:16:d6:fb:50:d7:28:46:a0:
09:9e:c7:c3:ae:94:48:72:0b:dc:c9:be:dd:66:fb:e3:2c:6f:
e5:6d:57:66:b9:b0:be:4a:0a:c9:b7:c9:4e:34:ad:89:c5:09:
41:77:1e:1a:12:34:d8:5e:68:99:f9:f1:fe:4e:47:bc:95:96:
76:dc:0e:eb:fd:d9:76:a4:d3:2f:76:9a:29:df:f7:20:f4:c2:
c9:de:e6:29:f2:c0:40:84:75:0e:d5:57:1c:eb:70:07:d4:26:
77:07:79:49:4b:bb:ba:b5:b5:17:23:4b:79:03:83:e4:1a:fe:
43:e9:17:25:29:88:99:4c:81:bf:57:8a:63:ef:55:d7:7a:c1:
c7:82:f1:0d:e2:48:e9:ea:c1:66:3e:ed:06:b0:0e:39:2f:3e:
a4:2f:3f:b3:3a:77:bb:8b:40:a2:e5:ed:23:10:16:8b:41:67:
ce:20:fa:a4:74:18:2f:48:12:78:80:87:b2:ef:e3:87:fc:7a:
48:bc:6d:51:bb:13:b1:b2:92:68:d5:43:65:11:1d:0e:56:61:
8a:fb:24:a3:bd:02:ff:d2:ae:89:a8:bb:0f:cf:58:3c:01:87:
73:6f:c2:ae:5d:a5:a7:25:de:95:9f:df:7f:58:cd:4d:4e:8b:
d3:d2:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 17:00:46 2026 by rpki-client