Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zkdSazC-R1_pdyL8S1y9AeWeP4M.roa
File: zkdSazC-R1_pdyL8S1y9AeWeP4M.roa (raw, json)
Hash identifier: UHZlmJi4eY42Fe4n1WDb5N7uW7HH1tgsGBfh7s5r6vo=
Subject key identifier: CE:47:52:6B:30:BE:47:5F:E9:77:22:FC:4B:5C:BD:01:E5:9E:3F:83
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E89278532B70ED436554903FE175ECA0F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zkdSazC-R1_pdyL8S1y9AeWeP4M.roa
Signing time: Tue 02 Jun 2026 16:25:29 +0000
ROA not before: Tue 02 Jun 2026 16:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30456
IP address blocks: 151.243.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:27:85:32:b7:0e:d4:36:55:49:03:fe:17:5e:ca:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 2 16:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce47526b30be475fe97722fc4b5cbd01e59e3f83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c6:01:8e:fc:ec:fe:68:79:21:81:da:ea:17:
79:8a:72:ff:20:44:6c:0a:f9:c3:27:4e:ab:fd:41:
b4:f8:4d:27:60:2a:c3:b5:b8:e2:26:27:93:c2:8b:
d6:c8:af:fd:f3:b1:50:e4:3a:0a:a3:9a:31:78:b0:
ec:78:c7:a8:d1:47:ef:cd:0a:b8:a5:bc:b4:cc:7c:
6b:b7:31:7e:ef:a9:28:bc:1a:43:f1:d7:9d:a7:79:
dc:9d:76:a6:69:bc:51:8a:9e:8c:ee:de:7e:6c:13:
c9:ed:1e:97:7f:1a:9f:58:da:3c:e8:31:ef:8f:8c:
83:de:25:1b:27:0e:e7:08:8d:a3:09:a5:69:0c:98:
62:f5:59:47:10:6d:7d:3d:0f:c8:b9:38:b3:72:c4:
a8:00:6e:df:58:ac:83:7d:84:15:f5:17:3c:46:54:
02:f5:0a:c5:3d:43:89:42:20:92:35:59:b8:09:8f:
e5:83:f1:6b:5c:08:cf:59:c9:b9:39:61:d2:b6:96:
fc:d6:eb:6c:6f:6f:60:6d:54:75:d9:04:c4:90:28:
bf:60:8a:2c:10:92:32:01:3a:85:2e:76:0f:40:fc:
a1:d4:c8:b8:b5:e5:61:85:df:83:5e:eb:4e:69:36:
c5:f1:54:a2:36:89:56:1d:53:b7:c5:87:d3:f2:c8:
34:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:47:52:6B:30:BE:47:5F:E9:77:22:FC:4B:5C:BD:01:E5:9E:3F:83
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zkdSazC-R1_pdyL8S1y9AeWeP4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.113.0/24
Signature Algorithm: sha256WithRSAEncryption
47:48:2c:7f:fb:d9:72:92:96:82:8a:c8:9e:fb:b9:ff:c0:50:
c8:19:47:cd:08:82:68:31:8f:6b:d8:ab:13:f3:07:95:47:4f:
44:93:31:3e:87:1e:f9:c2:df:21:2e:50:f3:1c:7c:21:62:2e:
f4:8c:91:80:1e:9e:a8:df:bb:85:d7:53:29:7f:27:9b:8d:60:
12:56:9f:80:1f:a5:15:eb:e2:7f:49:e0:dd:3a:bf:32:f6:01:
76:b1:68:ba:e9:af:60:5f:20:05:56:59:16:8a:db:4c:7c:36:
2f:54:ef:b0:ab:aa:3e:92:71:e1:e2:83:69:fb:7d:08:93:72:
75:21:cf:e4:53:60:e2:ad:9a:9d:87:54:e6:0e:a8:39:19:43:
95:e6:86:f1:45:6f:ee:fc:9e:98:c5:39:c6:01:d0:d3:47:6c:
49:84:85:24:d8:c3:e9:23:2f:a3:e5:26:9f:ab:a0:e4:0d:78:
5b:d8:7c:8e:e4:a0:d0:fb:fc:62:f8:34:f0:f7:4e:7f:6a:6c:
e4:68:6f:65:40:71:3a:09:ba:e7:91:84:df:97:31:30:a0:35:
12:5a:70:18:89:35:75:bd:43:20:f1:4e:7b:65:cf:68:a7:9d:
61:e6:7e:91:db:34:38:10:80:67:e4:4c:d8:ee:d3:16:f6:ee:
70:7b:6e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:03:43 2026 by rpki-client