Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KZzV0ijjjYsBKveopx12zqQ9v6w.roa
File: KZzV0ijjjYsBKveopx12zqQ9v6w.roa (raw, json)
Hash identifier: kz9CQhJIiTaGySB6KrHzog5a3GoCOpvEANSrje5SqrQ=
Subject key identifier: 29:9C:D5:D2:28:E3:8D:8B:01:2A:F7:A8:A7:1D:76:CE:A4:3D:BF:AC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EC6F82A37727415791679D9518F9E19CB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KZzV0ijjjYsBKveopx12zqQ9v6w.roa
Signing time: Sun 14 Jun 2026 16:30:12 +0000
ROA not before: Sun 14 Jun 2026 16:30:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399486
IP address blocks: 151.241.154.0/24 maxlen: 24
151.242.63.0/24 maxlen: 24
151.244.30.0/24 maxlen: 24
151.244.125.0/24 maxlen: 24
151.244.234.0/24 maxlen: 24
151.245.121.0/24 maxlen: 24
151.247.22.0/24 maxlen: 24
151.247.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:f8:2a:37:72:74:15:79:16:79:d9:51:8f:9e:19:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 14 16:30:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=299cd5d228e38d8b012af7a8a71d76cea43dbfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:c1:22:02:f8:4e:24:ea:1b:ef:81:0d:d2:
40:1e:0f:50:b3:ec:f7:9e:eb:2f:c1:3a:5b:82:5d:
2f:77:d3:1d:b1:a8:41:ba:43:b0:d9:bd:d0:0a:81:
52:3c:f8:6c:0a:ad:4c:a8:90:c7:1d:9a:f0:36:a2:
d7:09:de:5e:51:e0:fc:bd:a7:9b:4a:c1:e4:f6:c7:
2a:21:5a:e4:a4:40:4d:cd:d3:07:a4:ba:4d:9a:af:
28:bb:6c:09:d9:93:2f:67:bb:8b:95:b3:08:c9:b6:
bd:57:84:d8:61:34:de:f7:28:63:8c:17:93:1d:25:
be:45:5d:10:e9:4e:d4:54:f7:6a:1a:e5:5d:40:7c:
7d:d7:8a:19:8f:ef:0a:c5:ae:28:67:da:5b:c3:dc:
a8:59:8f:97:71:20:6b:64:2b:35:cb:27:43:48:85:
33:d2:67:db:1e:98:92:55:c6:1b:b2:7b:29:26:3f:
a7:5f:25:82:1d:8c:30:87:a6:77:46:bb:42:93:fe:
f0:bb:e8:e0:27:f6:44:f0:67:a7:20:05:cb:d4:b7:
5c:60:f2:22:d2:dd:11:c0:ad:ca:6f:f5:09:64:c0:
39:d7:0c:49:32:60:59:e9:1b:ec:20:f8:70:ef:32:
78:72:e4:99:74:3c:86:d4:3b:92:76:dc:b3:e2:62:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:9C:D5:D2:28:E3:8D:8B:01:2A:F7:A8:A7:1D:76:CE:A4:3D:BF:AC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KZzV0ijjjYsBKveopx12zqQ9v6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.154.0/24
151.242.63.0/24
151.244.30.0/24
151.244.125.0/24
151.244.234.0/24
151.245.121.0/24
151.247.22.0/24
151.247.193.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:9d:24:d7:e5:f1:31:9b:a2:14:20:33:2d:4b:1d:e2:f6:85:
1f:f0:b9:6e:cd:73:3f:2f:22:bf:d5:1f:f1:e0:dd:62:0e:5e:
d7:f1:47:e7:7a:45:fc:7b:78:df:0d:fd:ff:16:cb:40:dc:4d:
0f:12:f3:39:ed:07:7d:f2:07:b2:1f:d2:ce:05:d5:d0:0b:54:
2f:b0:cf:1b:a4:2d:e1:84:28:d7:9b:dd:30:e3:28:f4:a0:e6:
64:6a:46:83:29:f3:3d:59:8f:9a:ba:30:e6:66:e3:56:ae:49:
00:d7:00:2a:07:7b:06:c5:90:82:ae:4f:37:5b:81:8b:67:77:
24:05:13:b5:cf:70:66:36:7e:a8:bd:4f:17:c7:4c:9d:46:cd:
8b:54:25:e4:33:b9:6e:07:bc:64:4e:b0:97:2f:b7:3e:fa:89:
87:2a:87:95:8d:ce:38:23:eb:a0:57:e1:a4:dd:d5:c1:d2:44:
fd:59:1a:48:18:35:24:72:f8:ea:5d:e7:6d:7b:e6:6f:33:f3:
30:ec:31:e2:2d:fd:25:c2:51:e5:9a:36:5f:88:f1:83:4f:10:
6d:cb:cc:4c:e2:40:72:dd:df:60:2a:b8:cd:5e:95:6d:16:9e:
31:0a:ab:32:d0:42:c0:48:58:bc:de:43:15:d8:e8:ff:44:3a:
1b:c5:83:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:45 2026 by rpki-client