Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7KfWzOdHeHgQibV9xqJlmMEaXQ.roa
File: Z7KfWzOdHeHgQibV9xqJlmMEaXQ.roa (raw, json)
Hash identifier: BnqNZcpAEKiVXj5pQ0bSH81TohxE5J2RVp8GDoAQoS8=
Subject key identifier: 67:B2:9F:5B:33:9D:1D:E1:E0:42:26:D5:F7:1A:89:96:63:04:69:74
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019ECF6BE474212F33E7BCA5D428A64D189E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7KfWzOdHeHgQibV9xqJlmMEaXQ.roa
Signing time: Tue 16 Jun 2026 07:53:35 +0000
ROA not before: Tue 16 Jun 2026 07:53:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203048
IP address blocks: 151.244.174.0/24 maxlen: 24
151.246.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 15:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:6b:e4:74:21:2f:33:e7:bc:a5:d4:28:a6:4d:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 16 07:53:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67b29f5b339d1de1e04226d5f71a899663046974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ec:e6:fd:1a:73:b2:5f:90:f4:45:31:ea:2e:
d2:46:d3:be:4f:32:5e:3d:2c:7f:37:ec:ce:4a:e5:
8a:7b:77:f2:2e:83:16:2f:7e:35:a8:e8:85:30:5f:
e1:51:62:10:0d:2f:9e:72:0d:6b:13:d0:65:cb:83:
a6:a9:0a:e3:2e:43:a0:c6:ff:60:49:32:21:8f:f3:
2e:5b:df:0a:3c:44:99:17:c0:4a:09:8a:5e:1b:b3:
ce:6c:3a:ac:31:3f:1c:16:6a:16:fc:21:40:71:a3:
1e:9d:ad:1f:70:ff:6b:4a:5d:a1:34:98:1e:23:a3:
f3:45:b7:58:ff:38:85:d3:66:20:ef:48:8d:c0:9c:
63:7b:36:bf:f5:42:a5:4d:04:30:14:ce:b1:4c:fa:
f0:7a:90:fe:34:65:39:0f:ed:d5:b3:5d:49:14:ed:
2c:3d:5b:bc:c1:9c:eb:4f:81:c7:3e:dc:b0:ca:61:
7f:45:98:09:ce:c6:9c:fb:c0:5c:42:5c:e0:4f:13:
87:f7:1c:01:6a:aa:ac:54:07:b2:bc:44:f1:76:98:
6d:33:ef:da:fa:1a:9a:cb:e7:18:13:21:5b:ea:62:
97:04:da:6f:cc:6a:c7:37:64:26:48:b2:af:49:7b:
ef:71:6e:6a:f0:e0:c4:82:28:e8:eb:8e:b5:ef:e9:
42:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B2:9F:5B:33:9D:1D:E1:E0:42:26:D5:F7:1A:89:96:63:04:69:74
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z7KfWzOdHeHgQibV9xqJlmMEaXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.174.0/24
151.246.183.0/24
Signature Algorithm: sha256WithRSAEncryption
61:c9:97:79:2f:41:9c:be:57:c1:37:a7:28:e4:60:ea:e4:f2:
60:1e:3a:51:cf:e9:80:78:0a:40:a7:b8:0f:9f:19:8c:58:d0:
19:78:89:84:f2:d9:95:20:0f:8f:ab:b2:d3:e5:49:8d:26:72:
c6:d4:09:e6:2e:8f:2a:3f:9c:2f:d5:6a:d5:4c:1c:ef:9c:9a:
64:20:dd:2a:af:af:80:c5:96:c7:30:04:af:64:07:ff:8a:93:
43:8b:55:6e:02:cb:d5:66:fb:e9:20:f0:4d:1d:df:4c:53:24:
80:63:a0:05:b0:29:25:af:88:1b:3a:aa:2e:8a:3f:57:55:77:
58:92:06:fc:4e:fd:38:5e:61:58:cd:3a:17:79:44:15:e2:63:
1b:0c:a9:7b:53:d1:69:74:ec:e9:b2:c9:42:e1:6b:13:fc:e7:
7b:86:d4:ed:45:70:09:f7:72:b2:fd:02:d4:40:ea:0c:4f:1d:
58:ed:d6:e7:5c:6d:54:6b:b6:46:e1:38:d8:3c:41:26:84:c6:
07:fa:58:5b:81:53:40:ad:b7:55:e1:39:48:2f:c8:97:ec:b1:
dd:bd:43:84:ae:9e:cd:7a:3d:81:42:0d:fe:54:be:89:ed:18:
f4:9a:db:fe:64:7c:09:17:7a:7c:da:a4:fd:b6:98:17:c4:2b:
16:d0:82:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ7Pa+R0IS8z57yl1CimTRieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjE2MDc1MzM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2IyOWY1YjMzOWQxZGUxZTA0MjI2ZDVmNzFhODk5NjYzMDQ2OTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+zm/Rpzsl+Q9EUx6i7SRtO+TzJe
PSx/N+zOSuWKe3fyLoMWL341qOiFMF/hUWIQDS+ecg1rE9Bly4OmqQrjLkOgxv9g
STIhj/MuW98KPESZF8BKCYpeG7PObDqsMT8cFmoW/CFAcaMena0fcP9rSl2hNJge
I6PzRbdY/ziF02Yg70iNwJxjeza/9UKlTQQwFM6xTPrwepD+NGU5D+3Vs11JFO0s
PVu8wZzrT4HHPtywymF/RZgJzsac+8BcQlzgTxOH9xwBaqqsVAeyvETxdphtM+/a
+hqay+cYEyFb6mKXBNpvzGrHN2QmSLKvSXvvcW5q8ODEgijo64617+lChwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGeyn1sznR3h4EIm1fcaiZZjBGl0MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWjdLZld6T2RIZUhnUWliVjl4cUpsbU1FYVhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/SuAwQA
l/a3MA0GCSqGSIb3DQEBCwUAA4IBAQBhyZd5L0GcvlfBN6co5GDq5PJgHjpRz+mA
eApAp7gPnxmMWNAZeImE8tmVIA+Pq7LT5UmNJnLG1AnmLo8qP5wv1WrVTBzvnJpk
IN0qr6+AxZbHMASvZAf/ipNDi1VuAsvVZvvpIPBNHd9MUySAY6AFsCklr4gbOqou
ij9XVXdYkgb8Tv04XmFYzToXeUQV4mMbDKl7U9FpdOzpsslC4WsT/Od7htTtRXAJ
93Ky/QLUQOoMTx1Y7dbnXG1Ua7ZG4TjYPEEmhMYH+lhbgVNArbdV4TlIL8iX7LHd
vUOErp7Nej2BQg3+VL6J7Rj0mtv+ZHwJF3p82qT9tpgXxCsW0IJ/
-----END CERTIFICATE-----
Generated at Sun Jul 12 01:11:12 2026 by rpki-client