Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zosbkmT7TwMwsllYk4xHm7mwdcE.roa
File: zosbkmT7TwMwsllYk4xHm7mwdcE.roa (raw, json)
Hash identifier: vUE7Qqdarleh8FTMU9HZeCBPIvcDCKGLcy495DbRVSY=
Subject key identifier: CE:8B:1B:92:64:FB:4F:03:30:B2:59:58:93:8C:47:9B:B9:B0:75:C1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A12ED8664964C21B29D2195A8E534C7D0D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zosbkmT7TwMwsllYk4xHm7mwdcE.roa
Signing time: Mon 12 Oct 2026 06:41:36 +0000
ROA not before: Mon 12 Oct 2026 06:41:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219206
IP address blocks: 151.243.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 11:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2e:d8:66:49:64:c2:1b:29:d2:19:5a:8e:53:4c:7d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 06:41:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce8b1b9264fb4f0330b25958938c479bb9b075c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:55:2d:4a:40:d0:d7:69:f2:a7:8f:04:62:7f:
3b:de:4a:3b:56:97:e1:e6:87:fc:40:93:42:72:7b:
5e:4f:73:8a:84:a4:d3:b6:b9:79:32:2d:09:8d:fc:
63:89:df:c2:55:ed:9b:45:52:70:c9:08:86:be:47:
a2:19:9c:bf:0c:95:55:26:18:56:77:95:3a:24:6a:
1c:f5:19:38:c6:42:44:87:2d:5c:de:79:8e:97:b7:
70:fc:98:39:75:30:dd:01:15:b0:65:26:24:55:ee:
df:f1:9a:67:2f:4b:7c:c0:55:e6:f6:e5:03:00:fb:
5f:d5:8f:9c:34:42:0a:f5:d4:24:cc:c3:10:7c:aa:
38:13:b9:1e:f1:7a:48:3f:ab:fb:44:51:c7:5d:18:
d6:98:87:52:07:d3:59:69:fb:71:a3:7a:8e:f3:f3:
7a:ee:c1:a8:7f:28:f3:de:f0:60:c1:f1:81:b4:e7:
fb:66:80:99:ec:74:3b:cd:73:50:c8:13:b3:a4:68:
71:86:d9:26:aa:29:a7:07:5a:5d:f7:a8:98:89:ff:
d9:68:87:d8:0b:43:31:b5:48:9f:88:ce:18:eb:de:
e7:d0:4b:c7:92:3a:09:70:a2:44:59:eb:30:0b:04:
b3:0a:ab:e9:07:dd:84:08:b4:b8:09:12:8f:71:00:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8B:1B:92:64:FB:4F:03:30:B2:59:58:93:8C:47:9B:B9:B0:75:C1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zosbkmT7TwMwsllYk4xHm7mwdcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.253.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a1:90:c9:0b:d3:ed:63:05:c8:05:e0:be:18:57:ff:75:a0:
62:2a:9e:09:18:66:bd:ef:aa:ce:c5:b7:8b:df:d3:aa:7d:4b:
3e:df:f0:70:e4:1a:e7:00:a3:57:83:34:b3:21:b0:01:8c:fd:
b4:fb:11:50:74:fa:fd:16:3b:4f:b6:86:c7:55:63:08:21:4d:
ef:68:dd:a6:93:35:92:8b:89:1e:c7:65:38:e8:53:eb:0c:b1:
b2:20:63:7f:b0:6c:d1:d3:9b:b8:ed:24:32:e2:22:77:02:b5:
01:a4:29:4e:ff:8d:f4:8f:0b:29:40:fd:51:2a:61:52:ad:a7:
cf:09:c9:1d:cf:0c:a9:78:fa:0f:b9:40:25:3f:07:5f:6d:4a:
57:ef:be:c8:c4:eb:e7:12:1a:0b:a4:62:a5:af:3d:0f:0c:e2:
4a:2a:78:47:65:89:f8:a0:e3:b7:e7:60:84:cd:5e:da:52:19:
fd:c4:ca:61:2e:b7:ff:3f:32:6e:55:56:dc:4c:63:2a:96:12:
15:d1:1f:d6:c9:08:39:9c:e9:94:7b:b5:b5:12:d0:11:53:08:
17:e6:cc:04:83:eb:b2:67:08:db:f2:21:70:1d:ad:e8:26:50:
4e:c5:a3:ea:86:d8:08:71:b6:1b:f8:4e:58:96:b1:45:c7:5e:
7d:2b:3a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:40:04 2026 by rpki-client