Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nz3JEh21oop0G19mRbI0cAwXC7o.roa
File: nz3JEh21oop0G19mRbI0cAwXC7o.roa (raw, json)
Hash identifier: T8J1Zp27Upd8LefXjFd0ZyV1a6bL/5tbSaV1rPVFjXc=
Subject key identifier: 9F:3D:C9:12:1D:B5:A2:8A:74:1B:5F:66:45:B2:34:70:0C:17:0B:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0200D7AF4FD835712E3BD3A9A1C099ACA
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nz3JEh21oop0G19mRbI0cAwXC7o.roa
Signing time: Thu 20 Aug 2026 16:42:29 +0000
ROA not before: Thu 20 Aug 2026 16:42:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152460
IP address blocks: 151.242.145.0/24 maxlen: 24
151.247.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:0d:7a:f4:fd:83:57:12:e3:bd:3a:9a:1c:09:9a:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 16:42:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9f3dc9121db5a28a741b5f6645b234700c170bba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:fb:c9:e3:ec:0d:76:8f:93:f5:e2:99:28:0a:
dc:e4:ee:8d:eb:fd:29:a7:18:34:09:1d:85:3b:74:
ed:b3:7a:fe:bc:24:99:05:11:1d:53:30:3d:a0:1d:
a8:30:9d:92:0f:e4:cc:cf:3f:22:2c:d6:ae:bd:03:
19:ad:81:48:2e:34:9f:9b:0a:3f:55:9e:77:8e:64:
83:f0:5c:25:cd:53:a7:10:ca:2e:4c:24:2d:21:d5:
00:20:38:b8:7f:a2:c7:15:ea:97:1a:a8:e9:6e:f8:
c0:4a:01:50:cf:ac:1b:35:fb:4f:aa:f1:08:95:c4:
81:3e:2e:2b:a8:9c:e5:89:30:a0:00:fe:0d:b2:94:
21:ef:ad:8a:18:cc:df:3e:20:36:dc:30:d9:63:90:
5c:4b:09:7b:c3:cb:93:3b:a3:48:36:e8:c8:e0:72:
d0:da:37:b7:6f:5f:23:a4:99:fd:ea:73:4c:ef:2a:
c7:38:6b:e5:c7:d2:3d:48:5d:3d:92:9f:19:70:38:
f2:5a:70:78:59:f2:32:d5:49:93:b6:a3:fd:19:6d:
21:58:04:8f:93:81:7c:5d:08:b6:90:19:f1:f3:39:
95:70:05:53:96:92:92:49:bf:5b:4b:76:41:e7:4a:
a7:5a:3b:ae:e5:53:f5:63:0b:2a:74:4e:64:90:16:
d8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3D:C9:12:1D:B5:A2:8A:74:1B:5F:66:45:B2:34:70:0C:17:0B:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/nz3JEh21oop0G19mRbI0cAwXC7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.145.0/24
151.247.234.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0f:57:a9:75:5b:8f:ce:c1:24:72:1f:ce:9a:30:a7:c6:03:
ca:92:dc:1e:71:49:e8:cc:45:bb:04:5b:6d:17:92:94:0c:94:
a0:8f:9e:ae:a1:00:59:31:83:af:2e:71:56:a7:e2:c6:9c:e3:
0d:c5:fb:5f:93:72:51:e5:aa:51:d3:b2:9c:72:55:18:10:b7:
61:7e:20:2c:94:4d:58:ba:d2:db:c3:55:af:cf:64:8e:cb:ba:
9d:c4:2e:36:b1:c5:5d:28:8e:dc:60:5c:e9:08:26:b0:f0:7e:
aa:1e:42:a6:6d:f7:6c:72:36:01:99:dc:b3:c9:10:a9:f6:cc:
f5:05:b0:65:c0:fd:22:f6:f3:7c:13:32:d7:6c:44:9b:9b:32:
11:1d:64:77:41:48:96:49:6a:44:22:10:38:e7:9e:c0:e4:0f:
95:11:ff:be:67:d7:d9:7c:18:04:42:d7:a7:7f:bf:2b:9f:b0:
85:7d:3a:4b:62:ee:d9:98:39:75:db:1d:7f:36:fd:fa:07:65:
5f:bb:df:44:b4:a5:79:62:73:33:b3:27:13:d7:9b:9e:f5:3a:
9f:ea:33:6e:7e:15:23:45:df:7e:28:6e:2c:77:4f:de:17:58:
c0:03:f1:7b:81:c3:10:0e:cb:72:77:70:37:c0:75:de:ca:b0:
2b:fc:bf:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 17:57:25 2026 by rpki-client