Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2P6h9z9HBTP-V1SbLQXDvTgEhY.roa
File: Z2P6h9z9HBTP-V1SbLQXDvTgEhY.roa (raw, json)
Hash identifier: XKZb8/WYNxWoiDqUudJXrZEqQFqDZ6Gu2uDZVbZeCRk=
Subject key identifier: 67:63:FA:87:DC:FD:1C:14:CF:F9:5D:52:6C:B4:17:0E:F4:E0:12:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A176A71EBAB893B63A5BBF80801F241865
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2P6h9z9HBTP-V1SbLQXDvTgEhY.roa
Signing time: Mon 26 Oct 2026 05:20:26 +0000
ROA not before: Mon 26 Oct 2026 05:20:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 27176
IP address blocks: 151.246.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:a7:1e:ba:b8:93:b6:3a:5b:bf:80:80:1f:24:18:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 26 05:20:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6763fa87dcfd1c14cff95d526cb4170ef4e01216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c4:cc:1b:27:1a:33:be:15:3d:a0:28:30:33:
e3:80:69:ad:11:03:e1:16:56:c0:ff:79:23:fd:ac:
b9:e0:eb:e3:0c:06:59:7b:88:55:8f:b3:9b:b4:a4:
92:1a:e3:4f:39:43:a8:ef:cf:43:2e:50:80:27:ea:
e8:3a:b4:f0:46:67:20:d4:50:aa:53:87:d9:04:e2:
cc:98:e5:92:e1:75:e2:16:21:bb:a8:39:0a:e1:e9:
ef:d2:6e:36:60:4b:0c:91:f7:5c:04:c0:87:17:67:
ac:57:69:e6:51:a9:ef:85:7c:af:03:a3:b1:bd:77:
47:30:4d:e9:d6:0f:d1:7c:f2:aa:ee:0d:53:7d:57:
52:d3:d4:5d:31:70:10:4a:44:68:78:fc:a5:cb:a2:
59:25:16:b7:22:07:a8:ba:97:da:03:ca:c5:f5:0d:
8a:6d:47:90:f6:5e:38:f8:b8:4a:95:df:98:e9:23:
13:82:c3:79:e1:18:f8:e4:40:4d:eb:8f:85:4d:44:
8f:71:30:bb:34:a8:37:84:1a:df:bb:50:cc:ea:78:
f3:5a:13:89:35:40:6c:ec:d8:3e:41:70:24:41:7e:
be:45:46:00:23:b0:2b:dc:d6:99:8e:bb:ad:e7:9f:
41:07:1f:d4:71:db:b6:bb:2a:23:10:43:8c:e5:f4:
a0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:63:FA:87:DC:FD:1C:14:CF:F9:5D:52:6C:B4:17:0E:F4:E0:12:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2P6h9z9HBTP-V1SbLQXDvTgEhY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.178.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:74:de:bd:51:4d:2a:b8:11:e6:49:53:d8:5b:02:4e:56:f5:
5d:e2:b4:37:40:7b:e4:81:55:52:82:f7:57:4b:7b:44:ce:a4:
28:37:71:4e:46:c2:c7:1a:97:40:f1:f5:8b:be:8e:51:cd:4b:
c8:36:01:aa:e0:95:31:6a:ab:85:9a:78:2b:51:a0:b3:29:18:
eb:97:61:0e:97:37:dd:df:a1:ec:3e:46:79:2d:76:bf:61:44:
c6:bc:16:e7:b7:3f:70:b2:38:61:b0:02:63:1c:ae:ee:b4:b6:
43:02:fa:90:83:71:d6:cc:30:3c:be:e0:da:c4:52:b8:0e:c7:
69:3f:5b:80:31:b9:75:5f:ce:44:1c:37:1e:b4:47:44:84:e3:
23:24:7f:bc:b3:ed:42:c3:aa:5e:7a:24:82:d6:5e:37:3f:a7:
95:f1:b1:87:69:8e:06:91:60:47:09:52:d1:96:a2:29:94:be:
4e:21:24:df:37:03:aa:e5:75:09:3e:67:f2:0e:fc:06:83:c3:
42:65:a4:15:f4:b5:80:eb:1a:e5:3b:77:96:40:98:dc:b8:6b:
49:24:a6:7c:fb:a8:b6:73:88:86:83:bf:08:81:99:2b:ca:b1:
4a:c2:ab:80:22:cb:94:11:4e:11:e4:49:4d:e7:a9:ff:47:b1:
d6:7b:18:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 11:13:11 2026 by rpki-client