Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZOFoyVSnEnMFA6ovXjzCUTFCp4c.roa
File: ZOFoyVSnEnMFA6ovXjzCUTFCp4c.roa (raw, json)
Hash identifier: /CcI4xUCVhcrRRs/PF11Ep1y8dJAs1UNLR7yTXen3BE=
Subject key identifier: 64:E1:68:C9:54:A7:12:73:05:03:AA:2F:5E:3C:C2:51:31:42:A7:87
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F23A8601A9EFFB759E3A91315FEF65759
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZOFoyVSnEnMFA6ovXjzCUTFCp4c.roa
Signing time: Thu 02 Jul 2026 16:27:44 +0000
ROA not before: Thu 02 Jul 2026 16:27:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402493
IP address blocks: 151.246.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:a8:60:1a:9e:ff:b7:59:e3:a9:13:15:fe:f6:57:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 2 16:27:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64e168c954a712730503aa2f5e3cc2513142a787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:de:c2:a5:a3:25:66:62:ef:97:96:58:07:93:
7e:7e:00:c9:01:91:fd:26:4d:3f:a5:d3:5a:46:8f:
49:df:67:3a:0e:e4:37:e4:7f:83:1a:2b:c2:df:1e:
ab:ca:e8:4e:6d:78:ae:28:79:79:cd:ca:35:4a:64:
ae:74:22:38:41:28:b9:b7:a8:55:1c:4a:b5:bd:e5:
d3:3f:a5:7e:f9:3b:0b:29:61:b3:56:7b:6f:eb:91:
15:a7:46:9c:0d:8f:0e:f0:74:84:5a:8f:d7:62:f5:
8c:02:85:88:27:91:7f:15:7d:6c:6e:6a:8e:da:d6:
86:96:71:a2:71:80:76:88:f5:a3:2d:dd:80:ce:b3:
52:29:2c:90:bd:3d:be:3a:29:c7:b9:cf:3d:0d:04:
95:69:92:23:35:05:49:1a:f9:62:8d:2a:56:ab:7a:
f1:17:c5:68:18:88:ff:5e:a6:34:4c:43:a9:5a:d7:
68:5e:53:79:74:67:c5:2a:76:f1:8c:0d:ac:09:db:
29:25:cc:9e:fb:a8:e1:13:fe:34:b4:ba:7b:f4:36:
83:86:30:37:88:c5:41:b4:0a:b7:a0:5a:8c:07:ed:
7b:59:e6:3e:ca:43:4e:ba:1b:cf:30:a6:78:eb:22:
0f:44:0d:a9:99:59:5a:d6:93:70:e1:50:5b:77:8b:
dc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:E1:68:C9:54:A7:12:73:05:03:AA:2F:5E:3C:C2:51:31:42:A7:87
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZOFoyVSnEnMFA6ovXjzCUTFCp4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.156.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:8c:6a:15:0c:08:c7:18:1e:b6:a4:23:9e:f0:8f:77:dc:94:
be:cb:1e:33:dc:c8:6e:23:61:3d:5c:9b:26:34:f7:7a:26:bf:
cc:59:36:b1:31:dd:12:3b:9e:02:40:15:b8:f9:f4:36:f3:90:
3b:59:08:18:5d:0c:19:e5:e9:42:6f:17:04:8d:cd:91:cf:e4:
30:9b:92:b3:5c:9a:f0:96:a0:b5:50:bd:08:b2:60:6e:b4:a8:
73:f9:05:89:2c:af:bf:4c:8c:cc:29:8a:17:1b:48:09:02:92:
d6:32:70:a8:74:d1:7d:e8:71:92:9f:e4:7d:86:04:ed:b4:61:
4d:d8:f4:8e:12:d0:17:8c:be:bb:d4:de:27:93:e1:56:b7:cc:
31:3d:0c:a9:82:9b:44:f8:82:62:07:cd:b9:72:8d:44:09:82:
85:5b:08:af:f9:f0:21:cf:c6:84:ea:a0:b7:1c:f3:40:cd:ad:
ff:a4:d2:08:cb:b9:ae:13:b3:85:6c:5a:81:49:6d:98:e9:df:
12:55:80:58:eb:4d:59:de:28:e7:45:10:32:ec:01:ea:cf:ab:
a6:4e:3b:36:2a:37:1d:38:6f:17:f3:33:41:70:8d:6b:fb:8d:
25:af:aa:4c:42:27:78:da:0a:f3:35:90:5e:38:5a:50:01:e7:
fd:09:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:19:06 2026 by rpki-client