Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZB0-Fa1J5qT9Y4IWr7ksoJG0kxk.roa
File: ZB0-Fa1J5qT9Y4IWr7ksoJG0kxk.roa (raw, json)
Hash identifier: v6qAzTI/lQ7GvF7ioUKato+mdE/6JxIWWtpuYlpz9Ug=
Subject key identifier: 64:1D:3E:15:AD:49:E6:A4:FD:63:82:16:AF:B9:2C:A0:91:B4:93:19
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AFE495FAD6123CC48B0222A799656FE2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZB0-Fa1J5qT9Y4IWr7ksoJG0kxk.roa
Signing time: Thu 17 Sep 2026 15:03:08 +0000
ROA not before: Thu 17 Sep 2026 15:03:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212335
IP address blocks: 151.240.83.0/24 maxlen: 24
151.246.0.0/24 maxlen: 24
151.246.2.0/24 maxlen: 24
151.246.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:e4:95:fa:d6:12:3c:c4:8b:02:22:a7:99:65:6f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 15:03:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=641d3e15ad49e6a4fd638216afb92ca091b49319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:0b:52:fa:98:df:22:de:12:9e:7f:fe:4e:
e7:f7:5f:e8:89:c9:a3:39:13:c3:f9:60:98:cd:0f:
5c:43:d4:d6:20:4c:7b:ed:7d:6e:7e:b1:3d:b8:45:
f4:2b:32:69:6c:8a:dc:07:9b:4d:39:3c:5f:ec:51:
91:46:f7:0c:20:9c:d6:e9:3a:9a:35:58:40:a9:4c:
7a:44:03:b4:9d:c1:be:42:bb:44:26:79:99:4a:40:
4d:a2:53:e4:de:5f:82:fa:05:cf:78:ba:58:1e:ec:
21:8e:d7:94:7e:0c:ae:b8:55:2d:32:3d:e4:59:20:
f6:10:a3:8e:c4:a8:31:25:39:d5:83:6d:21:95:69:
b0:65:cf:a3:ef:1e:d7:4d:c8:4d:ec:89:73:47:68:
ba:9c:ab:89:ec:79:a3:36:02:ba:a7:82:71:e9:4a:
cf:69:2a:e0:55:74:7e:f1:b3:39:fd:f9:97:49:68:
8c:44:37:2d:2e:fa:0e:09:3d:c9:0e:73:d8:f5:b0:
48:d3:05:ef:23:15:d7:40:c3:f0:7e:fb:87:9d:60:
e0:0a:ca:bd:13:b8:9a:4b:48:33:f6:c9:b3:b3:a4:
ed:42:e9:ef:54:fe:fd:39:1b:ff:de:d6:5e:c5:8a:
a7:bc:12:7b:b4:1c:38:c1:b5:f0:18:61:47:85:a1:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:1D:3E:15:AD:49:E6:A4:FD:63:82:16:AF:B9:2C:A0:91:B4:93:19
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/ZB0-Fa1J5qT9Y4IWr7ksoJG0kxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.83.0/24
151.246.0.0/24
151.246.2.0/23
Signature Algorithm: sha256WithRSAEncryption
60:3d:01:60:59:31:83:cd:c3:e4:1f:13:10:38:8b:55:21:12:
ec:fb:d5:eb:15:e8:ea:8e:19:cc:fb:03:30:3f:d9:73:70:c6:
a7:cf:6e:2b:ed:8c:76:ec:b3:e9:db:7e:1a:19:31:04:0f:82:
a6:b0:9c:ee:1f:30:ff:e5:a0:1f:38:54:9d:b4:ed:aa:3d:31:
bc:45:34:77:8b:f2:f4:76:e9:6c:12:74:8c:e5:d7:c1:32:84:
80:0b:01:b9:c9:e3:3e:27:8d:32:5a:dd:a0:2d:e0:1a:3a:de:
7d:f5:36:d3:0d:8d:29:9c:23:d8:f7:6d:6a:a3:86:a3:3e:43:
42:ff:6d:aa:8d:0a:51:2b:20:07:7f:3e:45:a5:f7:14:ba:d0:
1c:ee:b3:03:a5:df:34:f4:db:ed:43:c0:ef:c2:1e:6f:f1:f0:
95:b9:18:52:fc:c8:bc:26:de:09:93:bc:2d:c7:2d:02:64:d4:
fd:63:dc:a7:c4:8a:df:f3:2a:8b:f2:c1:fc:70:de:75:7b:15:
5c:92:dd:ee:c0:b2:cc:6f:ac:8a:1f:94:1a:8c:52:fd:20:ba:
4e:6d:4d:77:65:e6:2c:af:0c:6b:5b:16:94:87:fe:ee:4c:ca:
69:90:36:62:1a:02:01:80:b3:ed:38:60:c2:b2:8c:42:5b:d6:
85:08:c5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:06:59 2026 by rpki-client