Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z3c2lfx-MkoOiayK8aPUuHIDUYA.roa
File: z3c2lfx-MkoOiayK8aPUuHIDUYA.roa (raw, json)
Hash identifier: swu3x0ieak7Ep2dQv/QADM0d6l309AWjcFhPj7HHW68=
Subject key identifier: CF:77:36:95:FC:7E:32:4A:0E:89:AC:8A:F1:A3:D4:B8:72:03:51:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FF6A89CAB42D2793C52AC0F68012CC9F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z3c2lfx-MkoOiayK8aPUuHIDUYA.roa
Signing time: Wed 12 Aug 2026 15:47:52 +0000
ROA not before: Wed 12 Aug 2026 15:47:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197328
IP address blocks: 151.240.146.0/23 maxlen: 24
151.240.148.0/23 maxlen: 24
151.247.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f6:a8:9c:ab:42:d2:79:3c:52:ac:0f:68:01:2c:c9:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 12 15:47:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cf773695fc7e324a0e89ac8af1a3d4b872035180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:47:41:b7:2a:18:d6:c8:c0:4e:48:7b:00:cd:
67:6e:11:2d:59:11:34:47:7d:0b:e5:9c:b2:b3:66:
32:46:06:25:29:51:d0:70:d2:d4:25:47:2c:b4:0f:
04:19:e9:12:0b:e0:c9:3a:f6:49:16:0a:6f:f1:28:
4f:24:4f:74:5d:b9:c5:c6:d2:6f:0f:22:5a:21:7b:
d6:f7:fc:22:3c:75:33:f6:ab:4f:4e:55:52:12:bb:
c2:2b:5b:57:a6:c6:4b:f1:6d:89:1b:a1:f6:99:06:
24:6c:cd:e2:cb:0d:ac:38:10:00:d0:de:ac:19:09:
90:37:12:28:59:60:ac:28:cc:1b:e3:b4:c8:79:5a:
2e:8d:05:2c:0d:36:6f:ed:7e:15:79:2b:0a:4f:16:
9e:ac:a2:fa:20:bd:40:19:59:de:a2:10:49:b5:54:
51:aa:9d:39:ba:56:2f:04:86:83:c8:3a:5f:a5:20:
60:57:e5:c3:58:3e:78:c2:f4:e7:5f:8a:1c:90:34:
4e:e8:38:c6:48:ad:07:db:b3:6c:a6:09:54:ea:49:
05:d2:c2:ac:0b:7e:81:8e:a5:bb:37:04:c2:1d:31:
45:3b:98:7d:29:55:93:4e:cc:f1:6e:f5:dc:5b:57:
99:c9:03:0a:a0:8f:ee:e9:57:8e:bc:cc:a2:3d:d2:
5e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:77:36:95:FC:7E:32:4A:0E:89:AC:8A:F1:A3:D4:B8:72:03:51:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z3c2lfx-MkoOiayK8aPUuHIDUYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0-151.240.149.255
151.247.168.0/22
Signature Algorithm: sha256WithRSAEncryption
53:bc:99:c6:c9:14:6f:90:82:97:7a:7f:fc:ec:b8:b9:d9:20:
f0:ec:77:16:f7:16:53:5b:4d:7e:9a:b0:10:1c:f3:08:75:81:
25:39:5b:f7:a9:07:a9:55:03:0a:b8:f3:60:ae:cb:32:e5:cc:
e5:39:27:1f:57:3c:72:18:67:93:fb:9a:1e:24:bf:6c:5b:93:
5f:5e:bb:8b:25:2e:0d:c0:74:ac:b7:55:6c:87:26:39:b8:92:
27:9e:8b:53:fa:53:37:8a:78:6c:ef:ae:2e:34:ba:4c:33:4d:
b3:8b:e9:32:66:1d:6f:1e:9b:25:09:60:e8:61:3e:fd:06:16:
3f:2f:d4:fc:46:7a:10:59:9d:f4:10:ac:10:4d:5c:d6:b2:a2:
94:a6:ac:6f:05:0b:0f:70:42:69:c9:0a:a4:d4:bd:98:c1:31:
1a:28:ff:3f:96:9b:11:3f:30:c4:5d:0f:eb:71:7e:51:d0:df:
80:38:b7:f1:ed:2a:9f:56:07:d5:8f:59:47:95:b9:92:85:c4:
38:52:ed:52:7e:f7:21:98:8b:d9:f6:6c:dc:5e:e3:62:fd:14:
07:69:f0:b5:20:6b:d7:98:91:94:0c:43:37:07:78:02:f4:59:
21:74:81:ce:82:7c:52:9a:59:39:f4:17:a5:95:92:17:25:a8:
6a:c1:55:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 15 12:40:36 2026 by rpki-client