Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DZSPro4MFIx27sx7u6M19vw2VnI.roa
File: DZSPro4MFIx27sx7u6M19vw2VnI.roa (raw, json)
Hash identifier: MEgZ3SoPmHFGpGbz41OnTDxyUSsGPAooAYw5qZzJY6w=
Subject key identifier: 0D:94:8F:AE:8E:0C:14:8C:76:EE:CC:7B:BB:A3:35:F6:FC:36:56:72
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1688C1AAA57486BD1DDFD69C86348EA8F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DZSPro4MFIx27sx7u6M19vw2VnI.roa
Signing time: Fri 23 Oct 2026 11:36:14 +0000
ROA not before: Fri 23 Oct 2026 11:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.150.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.243.167.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.66.0/24 maxlen: 24
151.244.67.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.249.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:8c:1a:aa:57:48:6b:d1:dd:fd:69:c8:63:48:ea:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 23 11:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d948fae8e0c148c76eecc7bbba335f6fc365672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4f:b6:1a:47:5b:56:ee:26:30:05:3e:5f:df:
0a:61:d1:f1:98:2c:2e:80:d3:f2:6b:3f:a2:14:15:
fa:56:4c:45:f9:ef:6c:7f:d9:d6:35:ce:3b:be:41:
ef:f4:0c:7f:2b:a5:45:02:8d:df:3f:d0:1a:51:c0:
78:e7:37:ec:4e:40:72:b5:2a:db:13:45:03:83:13:
ad:0c:2c:51:a9:fa:35:75:e6:fb:aa:a9:15:af:fe:
7f:6b:aa:51:a7:b4:ff:9a:70:37:3c:fe:95:3f:e7:
cb:be:37:77:df:82:fa:8d:d7:ef:ad:ac:9e:31:69:
2d:94:f9:23:08:09:bb:90:24:cd:9b:fb:e3:69:38:
04:d7:b7:d9:96:3d:a1:42:5a:84:2a:c6:17:76:93:
89:16:90:2e:3b:80:9e:4e:f5:0b:b4:0b:26:e2:c2:
3d:df:32:34:93:74:5e:0d:10:9e:07:17:54:53:6f:
64:0e:93:9e:ef:5d:04:f9:4a:5c:76:c4:8a:a0:d6:
d7:51:2f:29:16:d9:1f:50:1d:e3:f3:82:6e:24:04:
56:0b:a9:18:2e:b5:8c:c2:98:47:42:73:e6:60:9f:
80:4a:44:36:8d:00:b9:6b:1b:e0:75:91:d6:87:93:
fe:fb:44:83:ae:22:da:e5:77:70:ec:80:72:7e:af:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:94:8F:AE:8E:0C:14:8C:76:EE:CC:7B:BB:A3:35:F6:FC:36:56:72
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DZSPro4MFIx27sx7u6M19vw2VnI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.150.0/24
151.241.24.0/24
151.241.90.0/24
151.243.167.0/24
151.244.38.0/24
151.244.52.0/24
151.244.66.0/23
151.244.118.0/24
151.244.221.0/24
151.245.108.0/24
151.246.249.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
35:f0:60:f1:3d:e8:38:b4:0e:85:8e:15:65:91:a6:2d:d3:76:
63:ba:10:57:fe:2d:9b:02:bd:3f:d3:f6:2f:01:03:b5:42:50:
06:cb:7d:e6:51:2b:82:09:44:4d:ed:8b:b4:a0:d7:0b:38:c5:
54:b0:89:e2:5d:9a:c8:f7:7a:4f:55:54:6d:ec:b8:bb:3f:5b:
25:5f:7c:7b:f4:34:ee:45:50:45:4e:04:72:73:76:bb:00:66:
93:13:29:b9:47:f1:be:56:19:19:51:96:b2:20:4d:27:59:49:
d8:53:ec:9f:47:62:28:76:93:4a:7f:e2:61:c7:59:a0:d4:36:
e8:f2:ac:d1:63:aa:99:6c:9b:5d:69:78:4f:29:e2:78:74:ca:
7a:cf:3f:b6:f5:63:e0:04:ec:ae:de:a3:76:e1:db:9b:65:f7:
c4:39:f0:55:45:d1:66:81:cd:fb:80:08:7e:fc:e0:e9:21:6d:
69:18:4d:83:c5:8a:04:64:83:54:f6:9b:34:74:cf:fe:c1:93:
ee:45:63:32:23:cd:f6:92:c9:aa:db:9c:40:d5:de:1e:e8:4f:
2f:57:87:47:d4:86:99:93:72:d6:f9:c4:e6:7a:a6:cf:6c:85:
b4:bc:8f:34:36:28:c8:75:cc:3b:6c:80:9d:8c:92:a2:a2:19:
c6:73:3b:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:20:55 2026 by rpki-client