Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZFDjOEVaxpkCJGXWqW_eH8zfu60.roa
File: ZFDjOEVaxpkCJGXWqW_eH8zfu60.roa (raw, json)
Hash identifier: /rBCq67niPVRG1X0p+ciPipr5UKsWhx5rgpizUlf0X4=
Subject key identifier: 64:50:E3:38:45:5A:C6:99:02:24:65:D6:A9:6F:DE:1F:CC:DF:BB:AD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F47FB65473C0C02B68B2C2C8218F4C289
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZFDjOEVaxpkCJGXWqW_eH8zfu60.roa
Signing time: Thu 09 Jul 2026 17:44:45 +0000
ROA not before: Thu 09 Jul 2026 17:44:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 36530
IP address blocks: 151.241.128.0/22 maxlen: 24
151.243.179.0/24 maxlen: 24
151.245.90.0/24 maxlen: 24
151.246.185.0/24 maxlen: 24
151.247.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:53:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:47:fb:65:47:3c:0c:02:b6:8b:2c:2c:82:18:f4:c2:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 9 17:44:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6450e338455ac699022465d6a96fde1fccdfbbad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d0:7d:ca:2b:67:dd:08:93:f0:73:77:ac:45:
98:c9:4f:bb:a4:dc:51:a7:54:89:2d:fd:ad:b7:ad:
47:d9:55:8e:24:77:0d:59:fa:2a:ef:95:f9:0d:85:
05:67:53:ac:fc:2d:5a:f9:6f:46:ff:a3:60:d3:b0:
1a:ef:bb:1d:3c:25:14:ef:f7:f4:b8:07:01:c7:56:
f2:0a:8d:d3:21:3b:95:c1:11:3a:4b:ea:29:0f:a5:
16:8d:aa:55:35:ab:54:dc:71:e0:3e:21:0e:ec:96:
cf:8b:ed:20:21:46:00:73:bd:47:e9:f7:c0:83:42:
9f:55:91:5c:db:50:fb:06:de:07:80:a7:17:5d:96:
69:e5:7f:59:71:82:9c:f0:2c:49:12:35:73:42:c7:
e0:38:ca:b0:ed:31:3d:aa:8d:06:02:09:b9:a6:45:
f6:d4:54:09:d7:ef:8f:fe:d3:20:a2:d7:04:db:f0:
71:d7:e8:26:ba:be:49:61:d4:08:ed:39:52:a3:47:
6c:f9:c8:0a:40:8e:d4:27:1f:19:72:81:56:ce:de:
55:66:22:c5:78:60:c8:a6:98:3d:87:13:4a:43:41:
3f:2f:3d:e6:dd:bb:75:09:d9:9e:7b:49:d2:e3:da:
a8:dc:af:56:55:f6:c0:12:cc:86:3e:66:18:e7:91:
f6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:50:E3:38:45:5A:C6:99:02:24:65:D6:A9:6F:DE:1F:CC:DF:BB:AD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZFDjOEVaxpkCJGXWqW_eH8zfu60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
151.243.179.0/24
151.245.90.0/24
151.246.185.0/24
151.247.244.0/24
Signature Algorithm: sha256WithRSAEncryption
15:41:da:56:10:75:8c:7c:1a:a6:e8:64:fd:26:d1:81:3e:71:
9c:ed:0b:33:64:84:34:78:db:70:9a:72:01:d1:3b:90:50:e3:
97:2f:17:09:2a:3b:7d:15:18:16:f9:35:6e:10:49:23:57:ee:
68:eb:b6:52:a9:6c:d2:60:16:6c:3e:10:88:f8:e4:40:62:3b:
82:01:6b:43:1d:ad:36:23:01:f7:ae:7c:dc:9b:c4:3b:5f:55:
d6:fa:71:32:7c:91:b6:09:1d:7e:0a:28:5c:1a:94:4f:84:e8:
65:74:bc:2f:70:af:9e:d3:35:2a:fd:a7:a2:5d:6f:df:1b:6c:
b0:a4:40:48:a7:70:b2:9a:59:5e:e9:e8:c6:c1:b7:3a:e6:91:
2e:63:88:55:f0:89:ec:c1:bb:47:b8:7a:be:6a:6b:4e:0d:62:
13:bc:a7:52:fe:08:87:c2:96:8f:a2:d2:ef:9a:bb:b7:ad:fb:
3e:f3:47:a8:e4:3d:cb:a8:93:3a:6c:b7:59:43:f9:fc:13:4a:
f9:fb:3a:8c:f8:89:5d:ee:05:b9:14:b4:53:51:82:48:af:b2:
ab:fd:c2:9b:8e:2f:0e:72:b2:61:13:a8:00:5a:96:e6:ad:22:
be:0c:3a:f9:59:9d:e5:47:d0:31:3f:3a:71:27:c8:da:ae:d5:
b8:e8:52:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:42 2026 by rpki-client