Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZccDntDzASp9U5Sh8AbU1La7q5Y.roa
File: ZccDntDzASp9U5Sh8AbU1La7q5Y.roa (raw, json)
Hash identifier: F1XkB25is7x/8MCG8ulAinwt7NWNsCMG5913BHEL8Zo=
Subject key identifier: 65:C7:03:9E:D0:F3:01:2A:7D:53:94:A1:F0:06:D4:D4:B6:BB:AB:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FF9A9A90782E2FE08409A37D11BE10B64
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZccDntDzASp9U5Sh8AbU1La7q5Y.roa
Signing time: Thu 13 Aug 2026 05:47:53 +0000
ROA not before: Thu 13 Aug 2026 05:47:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21840
IP address blocks: 151.243.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:a9:a9:07:82:e2:fe:08:40:9a:37:d1:1b:e1:0b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 13 05:47:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=65c7039ed0f3012a7d5394a1f006d4d4b6bbab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5a:e4:37:68:2a:08:02:eb:d9:c6:32:89:c8:
eb:24:92:3f:c6:34:ba:56:71:41:95:6f:b7:1b:a4:
7f:37:55:7f:5d:ca:ae:d0:c9:37:8f:54:a1:27:03:
8e:4c:b3:13:77:95:a2:2b:29:e8:6c:5c:39:d4:3c:
e2:86:31:6c:e4:9f:9a:23:d6:5e:02:fa:91:f6:49:
6e:78:56:af:90:64:bd:62:95:48:cd:8c:c8:c0:dc:
76:1f:db:9a:4b:98:e9:0b:20:5b:91:b9:ea:51:47:
b0:dd:1e:8f:18:78:3d:fc:c3:86:b5:a5:7d:54:f5:
ff:40:b4:64:ca:35:c6:2e:ef:60:63:38:1f:1d:e6:
2b:f1:5c:c6:93:54:88:4d:8c:fd:33:36:08:38:8d:
bb:cf:b8:03:38:c0:61:cc:4b:9f:84:b5:9e:fd:3f:
3b:96:9f:70:2d:92:4d:c5:5b:3e:ab:f1:84:b4:ca:
81:f9:31:77:3b:63:3b:97:98:bc:72:a4:a8:d5:02:
ce:97:cb:40:a6:9f:02:c1:3a:06:fa:5e:98:0a:e9:
5a:e3:81:80:90:a9:f4:98:93:5a:fd:47:5e:98:89:
63:36:be:40:13:32:6a:6c:41:16:b1:ff:00:d9:ee:
f2:00:b4:6e:83:53:04:0d:fd:d4:d0:e8:2c:56:4d:
1b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:03:9E:D0:F3:01:2A:7D:53:94:A1:F0:06:D4:D4:B6:BB:AB:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZccDntDzASp9U5Sh8AbU1La7q5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.31.0/24
Signature Algorithm: sha256WithRSAEncryption
50:c7:ae:69:51:47:f9:a7:c7:ec:f9:ec:e3:64:8b:85:88:04:
d6:60:dc:b4:62:ce:16:a8:31:23:6e:2f:9e:72:17:af:cc:b4:
de:07:62:58:75:c3:7d:83:71:91:55:da:b0:e2:f2:6c:cd:3b:
62:31:47:ec:bd:c6:50:4d:9e:6c:ca:89:98:6c:76:dd:0d:62:
4c:06:67:82:86:7d:10:fb:54:42:b9:9c:2a:2a:29:9c:08:e5:
e0:2c:12:5f:be:b8:21:0a:d1:43:14:0f:45:19:24:8e:39:b4:
c2:19:2f:e0:e2:84:a1:89:a1:60:37:14:46:f0:4f:c9:a5:aa:
f0:f5:9c:38:cc:e1:80:97:ed:53:18:30:00:ae:5c:a0:ca:58:
7b:b2:96:3d:ca:10:83:b0:b3:20:07:c8:63:3b:26:85:14:51:
8f:1b:6c:a8:10:b5:f8:32:cb:cf:b1:e3:2b:02:07:89:b6:1a:
07:04:73:51:0f:73:38:c6:e0:9d:a1:7e:02:d0:e0:9c:8f:0f:
10:26:a4:d1:bb:ad:24:7a:4d:d8:36:16:8b:98:10:18:04:d3:
28:36:63:3e:73:1d:51:59:b9:52:aa:22:4b:ad:0c:56:81:a6:
f6:58:fd:da:c3:6f:23:43:fb:e5:26:ea:c9:3a:a8:f9:37:bd:
ec:eb:fa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:31 2026 by rpki-client