Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mZADor6lmC-CAfeJ2xUSjy8Q4TA.roa
File: mZADor6lmC-CAfeJ2xUSjy8Q4TA.roa (raw, json)
Hash identifier: Ebgn3KvnuaPCxRyaCDTcNJLgnsOC/GmHENW2h9cUZGA=
Subject key identifier: 99:90:03:A2:BE:A5:98:2F:82:01:F7:89:DB:15:12:8F:2F:10:E1:30
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0F77ED647A2BCF7CA096DC7732E4449C2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mZADor6lmC-CAfeJ2xUSjy8Q4TA.roa
Signing time: Thu 01 Oct 2026 12:44:39 +0000
ROA not before: Thu 01 Oct 2026 12:44:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40676
IP address blocks: 151.240.169.0/24 maxlen: 24
151.242.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:7e:d6:47:a2:bc:f7:ca:09:6d:c7:73:2e:44:49:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 1 12:44:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=999003a2bea5982f8201f789db15128f2f10e130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:16:f0:42:9b:9f:85:a1:15:3e:21:00:ce:16:
a0:73:e2:53:1b:d8:44:cf:12:78:4f:71:a6:6a:bd:
26:4d:4c:7f:df:d5:2d:e6:26:90:44:f5:39:b7:f0:
bc:26:e9:c3:84:26:a2:f1:d3:e8:e8:3e:a4:a6:a7:
36:c1:81:50:a0:a2:5c:11:85:e7:61:25:36:3c:8e:
3d:2a:b5:6b:87:25:0b:e7:50:b1:6d:82:c6:14:a2:
f4:4f:c5:24:04:58:e3:d9:53:5e:91:96:15:99:7e:
7e:ef:ca:e6:38:f4:18:69:67:49:94:27:a3:ec:1d:
4e:05:0c:d3:51:99:9a:cc:ff:9a:b4:65:83:d2:5a:
d9:25:67:cd:d6:c7:25:a3:20:10:93:3e:3c:dd:db:
6b:af:7d:bb:a2:e1:ee:ad:63:a7:3d:c8:61:50:a1:
85:b0:22:d3:6b:c2:18:e5:b9:3e:cf:13:24:24:58:
5b:d0:a2:9a:ac:85:a3:34:5b:e8:a0:a3:75:1d:de:
62:13:1c:77:ab:b7:4b:b3:22:de:d6:25:4e:63:12:
0e:d6:5b:07:2d:35:06:d7:21:dd:8d:ee:85:8a:a0:
1c:62:78:67:d7:b7:6f:99:48:e5:2f:96:4c:d7:ee:
df:69:6d:54:5a:57:db:be:30:f8:cb:88:eb:b7:2e:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:90:03:A2:BE:A5:98:2F:82:01:F7:89:DB:15:12:8F:2F:10:E1:30
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/mZADor6lmC-CAfeJ2xUSjy8Q4TA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.169.0/24
151.242.61.0/24
Signature Algorithm: sha256WithRSAEncryption
96:9b:9c:f2:06:f9:80:9d:b3:cd:f5:99:0c:35:e5:99:16:4b:
7f:33:de:fe:88:05:ef:a9:50:b7:04:10:02:7a:eb:18:78:b3:
6e:13:ab:a1:f5:bb:85:50:36:5d:31:3e:bc:78:5e:bc:6e:27:
dc:00:87:bb:77:ff:ad:5a:db:72:40:a3:2b:45:10:78:19:a5:
dd:02:56:b5:ad:26:59:f6:b6:97:7e:54:86:8f:29:1f:77:ed:
06:e9:a0:7f:c3:5f:c2:71:33:09:29:ab:42:d9:e2:f5:b7:92:
2f:70:4f:b4:eb:2d:81:7f:a6:c5:e6:3f:c2:db:46:77:ec:51:
88:b9:c3:cd:95:e7:d7:5b:d0:ee:2c:1d:95:b8:ee:1b:8e:eb:
c1:9b:9d:4c:e0:fc:dc:bc:b5:e3:a6:2a:8c:9a:7d:ec:ba:70:
06:78:e2:ca:9e:71:1b:04:0e:2b:fb:f9:ec:b7:2e:0c:03:db:
1f:a8:dc:c2:d1:7a:53:04:75:63:d6:a4:05:93:ed:8a:8e:55:
71:94:9b:05:40:9f:1d:3c:d3:0b:a5:5c:0b:9f:3a:d1:42:66:
6b:77:34:98:4f:f4:a7:7e:30:c8:4d:35:85:c5:d5:f4:b5:2e:
a6:54:88:6d:a0:65:4f:d2:a8:08:8d:bb:eb:5d:3b:a3:b4:75:
54:0f:b7:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:24:58 2026 by rpki-client