Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZbpSADyuTbMzx6sYSoYGHq8-elo.roa
File: ZbpSADyuTbMzx6sYSoYGHq8-elo.roa (raw, json)
Hash identifier: 5kKdxP5n5oFHIW5UBsUdMYYtlb4KH7Q/F3HlwEfdoWE=
Subject key identifier: 65:BA:52:00:3C:AE:4D:B3:33:C7:AB:18:4A:86:06:1E:AF:3E:7A:5A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A115441A5CB68006A79696E64D1F52B05E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZbpSADyuTbMzx6sYSoYGHq8-elo.roa
Signing time: Wed 07 Oct 2026 07:29:07 +0000
ROA not before: Wed 07 Oct 2026 07:29:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215304
IP address blocks: 151.241.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:44:1a:5c:b6:80:06:a7:96:96:e6:4d:1f:52:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 07:29:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65ba52003cae4db333c7ab184a86061eaf3e7a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5f:0b:49:5f:1e:6c:39:b9:ff:64:87:d3:fa:
fd:93:e8:ba:64:00:87:c9:5f:f0:56:e4:8f:11:94:
67:b0:ff:87:c0:56:fb:a0:86:99:e7:4f:97:1e:28:
25:85:c9:59:53:e6:bf:79:13:22:8b:7f:c8:4f:e9:
2e:61:2c:1f:69:9b:3e:dc:e2:9b:b0:92:30:6f:2a:
8b:e3:df:79:9b:45:c2:3f:50:62:44:16:63:c7:7e:
c2:b3:01:2f:7b:b6:0e:7d:2a:08:00:67:6f:53:4b:
23:d8:db:6c:33:18:f1:c9:3a:4e:5c:0f:61:61:01:
d8:01:bc:b5:fe:37:58:ec:f3:e9:3f:36:7b:ad:82:
3f:69:23:fb:ca:1d:0c:61:05:be:49:f0:9a:8a:2e:
1a:ee:57:1a:dc:b8:20:2d:40:7e:19:fd:ee:16:1c:
11:37:ad:d7:a7:7a:ff:33:76:84:e5:d8:83:da:98:
f5:83:7f:ff:9f:71:6d:7a:4f:87:fa:2c:fc:cc:ef:
57:47:27:6b:74:bd:d4:b0:7c:6a:2d:d3:74:b9:14:
97:11:28:38:14:92:5c:4a:c6:f8:37:9f:e7:f7:de:
83:b2:c0:96:ee:2d:20:8a:66:a6:4f:77:30:8c:ca:
43:8f:d5:e6:c6:6a:03:b0:c4:b7:9a:71:9e:b5:b1:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:BA:52:00:3C:AE:4D:B3:33:C7:AB:18:4A:86:06:1E:AF:3E:7A:5A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZbpSADyuTbMzx6sYSoYGHq8-elo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.128.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:4e:39:56:0c:51:3b:de:39:4c:95:50:dc:58:53:a0:38:44:
1f:33:ab:f9:b6:1b:e1:28:55:f6:09:7b:93:39:41:2f:4d:92:
23:67:6c:e3:4c:c1:98:05:c6:98:fe:89:81:73:99:1e:87:7e:
a4:f2:37:75:e3:ee:c7:b8:b7:8b:32:a0:b8:a0:5e:23:be:24:
0b:22:0a:6b:c0:2c:05:c2:02:b3:8e:45:19:3f:02:56:03:d6:
63:25:a4:f5:f6:f6:10:83:6b:af:f6:86:fd:50:1e:30:13:8e:
d0:af:f8:4a:60:18:3c:80:48:6e:99:10:e1:7a:8b:fa:5b:8e:
70:78:6c:8c:e9:d2:04:95:76:c7:4f:03:8f:d1:c2:67:4f:d6:
31:97:eb:83:d8:a1:30:bc:e1:f4:a9:dd:fe:de:69:ec:08:a9:
3b:6d:62:34:51:3b:81:74:d9:20:e7:39:6e:f3:c1:53:c0:8a:
52:3d:00:5c:7c:8c:7f:1c:95:74:ae:94:67:b5:cf:40:10:8e:
89:2d:9b:1c:05:91:a9:76:8f:c5:af:a0:5b:9f:64:2f:3a:58:
a7:e1:84:e4:23:3d:32:f4:dd:bf:e4:20:c9:4a:16:f5:2e:ee:
ff:88:74:dd:e1:d1:02:02:0f:3d:49:f6:5c:e0:71:42:10:55:
be:8c:0f:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEVRBpctoAGp5aW5k0fUrBeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDA3MDcyOTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NWJhNTIwMDNjYWU0ZGIzMzNjN2FiMTg0YTg2MDYxZWFmM2U3YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv18LSV8ebDm5/2SH0/r9k+i6ZACH
yV/wVuSPEZRnsP+HwFb7oIaZ50+XHiglhclZU+a/eRMii3/IT+kuYSwfaZs+3OKb
sJIwbyqL4995m0XCP1BiRBZjx37CswEve7YOfSoIAGdvU0sj2NtsMxjxyTpOXA9h
YQHYAby1/jdY7PPpPzZ7rYI/aSP7yh0MYQW+SfCaii4a7lca3LggLUB+Gf3uFhwR
N63Xp3r/M3aE5diD2pj1g3//n3Ftek+H+iz8zO9XRydrdL3UsHxqLdN0uRSXESg4
FJJcSsb4N5/n996DssCW7i0gimamT3cwjMpDj9XmxmoDsMS3mnGetbFxNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGW6UgA8rk2zM8erGEqGBh6vPnpaMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWmJwU0FEeXVUYk16eDZzWVNvWUdIcTgtZWxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl/GAMA0G
CSqGSIb3DQEBCwUAA4IBAQAOTjlWDFE73jlMlVDcWFOgOEQfM6v5thvhKFX2CXuT
OUEvTZIjZ2zjTMGYBcaY/omBc5keh36k8jd14+7HuLeLMqC4oF4jviQLIgprwCwF
wgKzjkUZPwJWA9ZjJaT19vYQg2uv9ob9UB4wE47Qr/hKYBg8gEhumRDheov6W45w
eGyM6dIElXbHTwOP0cJnT9Yxl+uD2KEwvOH0qd3+3mnsCKk7bWI0UTuBdNkg5zlu
88FTwIpSPQBcfIx/HJV0rpRntc9AEI6JLZscBZGpdo/Fr6Bbn2QvOlin4YTkIz0y
9N2/5CDJShb1Lu7/iHTd4dECAg89SfZc4HFCEFW+jA8n
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:07 2026 by rpki-client