Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2aA3iQIPg0XImYIXuMIcw5ONGU.roa
File: Z2aA3iQIPg0XImYIXuMIcw5ONGU.roa (raw, json)
Hash identifier: gCTolb4K/R93bHtmUj9JI235yTZ0RbfwZ3Ka62Kpk2M=
Subject key identifier: 67:66:80:DE:24:08:3E:0D:17:22:66:08:5E:E3:08:73:0E:4E:34:65
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D29236BB51E5E14642915BF10A84357CC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2aA3iQIPg0XImYIXuMIcw5ONGU.roa
Signing time: Thu 26 Mar 2026 07:54:40 +0000
ROA not before: Thu 26 Mar 2026 07:54:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34989
IP address blocks: 151.243.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:23:6b:b5:1e:5e:14:64:29:15:bf:10:a8:43:57:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 26 07:54:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=676680de24083e0d172266085ee308730e4e3465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e9:81:f6:39:f0:9d:32:a8:4e:ab:94:a3:f6:
52:26:9e:d3:1f:ea:51:81:52:b4:dd:a9:69:f3:7b:
f4:fd:01:14:3c:24:54:35:8a:dc:3c:7d:98:ab:40:
f3:43:2c:e3:b7:9a:87:5f:a0:55:02:3f:8c:c5:63:
67:42:a5:02:bb:60:3c:b2:c0:91:82:10:c6:82:56:
68:c3:2f:81:c7:6f:6d:32:b6:82:74:fd:9b:74:9c:
dc:6e:4b:8d:4b:74:cc:7a:bc:80:a1:dc:d0:44:81:
b7:e2:3d:31:64:61:d6:40:6f:f9:54:d7:2b:e8:4e:
f3:8b:f8:60:69:c4:bf:8f:38:46:b0:41:25:3b:b5:
c7:be:f2:69:e8:58:6b:09:0e:1a:b6:38:39:94:6a:
f9:33:8a:1f:65:62:49:25:52:29:43:ed:f7:9f:c5:
be:4d:b6:c8:08:77:a9:62:3f:01:4c:34:fc:b8:1b:
f4:a6:40:b2:c9:e2:17:7a:64:b3:a6:5a:61:b8:17:
d2:ec:3e:ac:c0:6d:fb:33:1f:b3:8c:f4:04:01:e9:
a8:67:50:92:99:9b:0b:fe:e6:a8:09:a8:68:a2:9a:
89:18:b2:2e:b1:32:94:05:f8:8b:ed:e2:72:d1:6f:
9a:98:70:fe:a5:4e:4f:3f:bc:a2:80:0d:ec:c6:7a:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:66:80:DE:24:08:3E:0D:17:22:66:08:5E:E3:08:73:0E:4E:34:65
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2aA3iQIPg0XImYIXuMIcw5ONGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.138.0/23
Signature Algorithm: sha256WithRSAEncryption
40:34:4d:f5:a3:0d:8b:d6:69:af:88:38:22:ed:73:8c:4e:68:
f2:af:81:7d:a3:93:ae:23:8a:26:03:6b:d6:c0:80:69:7a:43:
1f:c0:39:b7:fd:7a:56:7c:b2:23:9e:76:bd:ef:5d:1e:e0:c0:
29:15:01:7a:52:76:63:86:b1:a0:6d:92:3f:17:db:9d:4d:37:
05:0b:06:32:6a:d3:0c:7a:f6:00:ce:cb:2a:89:e6:53:5e:f9:
0b:07:52:85:3f:7f:f3:17:c2:aa:ec:6b:92:90:aa:62:3b:f0:
92:46:c6:4b:ad:61:0b:2e:e1:f4:20:c3:a2:72:ac:8a:fc:5a:
b3:00:16:8c:7d:d5:78:70:df:ef:bc:44:36:46:7c:2c:f1:df:
0a:10:02:9b:24:2d:61:43:56:6d:b0:30:bf:96:6f:4d:21:2a:
e9:80:37:99:f6:73:63:3f:d4:3f:21:82:f4:59:3d:bd:23:14:
94:f1:52:05:09:7b:d0:b6:1b:c8:38:75:d9:ae:58:6f:4e:70:
0a:40:71:02:cd:82:1e:e8:bb:2d:b5:1a:c1:fb:52:42:6a:81:
ae:81:45:03:31:11:42:dd:dc:61:10:f2:7e:a4:fa:6e:1d:bd:
fb:98:8c:40:14:ba:e2:6d:01:5e:0a:b4:a1:a0:32:bb:8b:d7:
9f:2a:7b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:05:53 2026 by rpki-client