Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zi4amFX3hs0s74RxvYzieL0DuKI.roa
File: Zi4amFX3hs0s74RxvYzieL0DuKI.roa (raw, json)
Hash identifier: RkXTcdOc5iacsMnzsIXa/mnJ9y61IVKhkgSbd27VyQs=
Subject key identifier: 66:2E:1A:98:55:F7:86:CD:2C:EF:84:71:BD:8C:E2:78:BD:03:B8:A2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D0070DB04823B863DA49DEA368EAFA28F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zi4amFX3hs0s74RxvYzieL0DuKI.roa
Signing time: Wed 18 Mar 2026 10:14:49 +0000
ROA not before: Wed 18 Mar 2026 10:14:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402186
IP address blocks: 151.243.189.0/24 maxlen: 24
151.247.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:70:db:04:82:3b:86:3d:a4:9d:ea:36:8e:af:a2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 18 10:14:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=662e1a9855f786cd2cef8471bd8ce278bd03b8a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:43:2a:80:47:dd:23:09:bc:64:6f:e8:14:4b:
b7:31:f8:ec:10:a6:2d:16:5e:06:06:ca:a4:ca:2a:
dd:fd:80:79:00:b4:93:4c:cd:b5:27:42:63:50:6b:
84:ca:03:b1:7d:c3:08:4e:fb:77:08:3b:b2:8a:7d:
5a:5c:1e:bf:fd:88:5a:5e:34:c1:3c:13:07:77:0d:
56:9e:03:7b:ce:af:03:35:c6:aa:75:aa:09:4a:ab:
11:bb:e7:f5:1f:78:96:97:3a:7d:21:1d:e3:35:c3:
25:9a:98:f5:7f:7a:d0:7d:13:77:49:8b:7b:30:43:
1b:46:36:3c:c1:b1:37:85:44:0f:6c:8a:f3:d3:4c:
9d:68:ab:33:44:7c:a7:4b:1d:fd:b7:96:d4:df:80:
a5:fb:dc:99:5b:da:fa:c0:40:71:c7:f6:7e:82:6d:
2d:30:b2:d2:df:d4:af:a0:5a:79:5e:77:2a:02:23:
34:d1:80:bd:cf:24:e2:04:94:0f:10:22:89:19:7e:
75:db:2f:61:91:a5:90:b0:1a:cd:2c:d7:c6:c0:19:
14:a6:be:1f:f6:8a:08:ed:fd:86:d6:26:f9:d3:51:
cc:f7:6a:24:4c:db:8f:5e:d3:31:88:e5:52:5f:92:
7d:80:26:45:f8:70:75:3c:fd:f3:60:6f:93:63:80:
e4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2E:1A:98:55:F7:86:CD:2C:EF:84:71:BD:8C:E2:78:BD:03:B8:A2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Zi4amFX3hs0s74RxvYzieL0DuKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.189.0/24
151.247.181.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:03:a7:ab:6e:c9:e6:24:5e:61:7c:2d:d3:ca:0d:91:e2:6a:
a0:3d:98:26:04:3f:94:7d:66:62:60:7b:b4:c7:e3:da:3b:a2:
cc:a5:24:e8:d8:54:70:7e:27:6d:a5:01:19:dd:9e:7d:6c:e6:
76:c3:48:f1:99:b3:48:21:e8:41:65:c8:10:3f:21:14:a8:ac:
e7:a5:a7:94:d8:51:97:b5:f7:8a:2f:24:b4:72:b8:7d:48:ab:
7e:7f:fb:e7:07:56:34:02:a2:20:30:94:42:da:20:9a:3e:f9:
e9:6a:f2:26:76:92:78:e1:45:5c:96:db:8e:bb:c0:38:79:17:
54:96:7a:61:40:2c:57:c1:36:9c:1d:ac:60:23:04:3d:a2:73:
8f:4c:0f:0a:84:d2:b1:a6:47:44:c8:10:83:bb:a9:fb:73:fd:
2e:b7:a7:a1:e8:95:d9:80:e0:37:b7:2c:b1:e1:0a:83:58:5b:
26:f4:d7:7a:cc:f4:df:79:d9:d4:fc:d6:a1:16:91:b5:41:d2:
a8:93:d0:e5:17:01:08:14:9a:ad:63:1d:17:11:24:d4:1f:5a:
36:e1:67:d9:92:66:52:40:5e:f2:1c:9a:e2:bf:65:ac:54:28:
50:21:e1:92:4f:02:48:b9:94:53:03:bb:e2:13:48:64:16:e1:
14:e1:f6:cd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ0AcNsEgjuGPaSd6jaOr6KPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzE4MTAxNDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NjJlMWE5ODU1Zjc4NmNkMmNlZjg0NzFiZDhjZTI3OGJkMDNiOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0MqgEfdIwm8ZG/oFEu3MfjsEKYt
Fl4GBsqkyird/YB5ALSTTM21J0JjUGuEygOxfcMITvt3CDuyin1aXB6//YhaXjTB
PBMHdw1WngN7zq8DNcaqdaoJSqsRu+f1H3iWlzp9IR3jNcMlmpj1f3rQfRN3SYt7
MEMbRjY8wbE3hUQPbIrz00ydaKszRHynSx39t5bU34Cl+9yZW9r6wEBxx/Z+gm0t
MLLS39SvoFp5XncqAiM00YC9zyTiBJQPECKJGX512y9hkaWQsBrNLNfGwBkUpr4f
9ooI7f2G1ib501HM92okTNuPXtMxiOVSX5J9gCZF+HB1PP3zYG+TY4DkaQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGYuGphV94bNLO+Ecb2M4ni9A7iiMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWmk0YW1GWDNoczBzNzRSeHZZemllTDBEdUtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/O9AwQA
l/e1MA0GCSqGSIb3DQEBCwUAA4IBAQC4A6erbsnmJF5hfC3Tyg2R4mqgPZgmBD+U
fWZiYHu0x+PaO6LMpSTo2FRwfidtpQEZ3Z59bOZ2w0jxmbNIIehBZcgQPyEUqKzn
paeU2FGXtfeKLyS0crh9SKt+f/vnB1Y0AqIgMJRC2iCaPvnpavImdpJ44UVcltuO
u8A4eRdUlnphQCxXwTacHaxgIwQ9onOPTA8KhNKxpkdEyBCDu6n7c/0ut6eh6JXZ
gOA3tyyx4QqDWFsm9Nd6zPTfednU/NahFpG1QdKok9DlFwEIFJqtYx0XESTUH1o2
4WfZkmZSQF7yHJriv2WsVChQIeGSTwJIuZRTA7viE0hkFuEU4fbN
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:34:19 2026 by rpki-client