Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYrzTLKaMjcMD4rNj2LZGmvXjko.roa
File: zYrzTLKaMjcMD4rNj2LZGmvXjko.roa (raw, json)
Hash identifier: yexb1JrCW31UWuXvB4mRcyu1jw7QrgUGr+h+MtN+E54=
Subject key identifier: CD:8A:F3:4C:B2:9A:32:37:0C:0F:8A:CD:8F:62:D9:1A:6B:D7:8E:4A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A92BB50BF305FC3488F299D0819EEA0B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYrzTLKaMjcMD4rNj2LZGmvXjko.roa
Signing time: Wed 16 Sep 2026 07:43:28 +0000
ROA not before: Wed 16 Sep 2026 07:43:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40244
IP address blocks: 151.245.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 17:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:2b:b5:0b:f3:05:fc:34:88:f2:99:d0:81:9e:ea:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 07:43:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cd8af34cb29a32370c0f8acd8f62d91a6bd78e4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2a:23:09:d9:b7:f6:d9:9e:9f:24:33:a8:b1:
57:4a:51:92:5e:ff:04:31:51:07:11:8c:1a:f2:ea:
c7:f3:52:9b:5e:a0:20:73:5c:76:50:47:51:a0:64:
de:48:06:e7:30:7a:b0:60:94:aa:e8:b3:83:5e:b1:
4c:6d:9e:40:29:32:7a:48:8e:03:6a:bc:fc:db:01:
91:b6:fd:92:bf:d1:a7:47:f8:18:05:b7:f0:23:5d:
72:d2:7c:ea:69:a0:34:a2:8e:1d:20:43:dd:77:e2:
79:3a:9f:df:0d:83:6f:b1:72:69:fe:a5:40:68:69:
ed:36:48:cd:cb:ef:d4:ba:5f:7f:e5:29:03:b7:24:
10:e9:08:4f:0e:f8:b6:6a:5d:21:0f:93:ed:70:92:
f2:0b:13:72:76:49:c0:79:d2:1d:89:49:fb:fd:3b:
88:ec:d6:01:3e:71:c0:5e:e5:c6:64:bd:3e:1f:e7:
7f:9a:d1:ca:1b:42:0e:15:4f:e2:c5:93:cd:74:85:
8d:e2:9d:2f:d8:f3:fc:df:2c:2b:a2:c2:14:4e:51:
39:b5:3b:5b:8f:d9:5c:8a:19:3c:3f:78:86:7e:2b:
d4:5e:19:d3:cf:c9:6b:88:a1:c9:ca:c2:79:dc:7d:
6b:20:0f:46:a1:6c:04:e1:69:4d:fe:fe:69:0b:66:
50:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:8A:F3:4C:B2:9A:32:37:0C:0F:8A:CD:8F:62:D9:1A:6B:D7:8E:4A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zYrzTLKaMjcMD4rNj2LZGmvXjko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.245.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:7c:da:70:07:37:f5:14:a0:cc:7d:6b:4d:f8:f5:95:12:73:
9e:81:2b:bb:eb:bc:29:4f:0e:f0:94:21:ff:21:a1:c4:7a:6c:
54:88:c5:02:9f:ce:81:5b:9b:69:46:2c:6b:55:87:b5:df:a0:
37:7f:7b:40:f8:4f:ca:4c:33:1f:8d:b5:88:ba:21:53:e9:32:
86:55:01:da:8f:78:ee:5c:94:dc:8f:5b:d6:77:4b:28:89:c2:
54:49:76:bb:16:30:3c:eb:4d:e8:6d:8d:da:d7:9a:1b:a5:f2:
c5:21:a0:0f:9b:7e:70:2c:a9:05:9b:97:60:98:20:d6:4b:f8:
ff:19:a2:43:63:d8:a3:44:92:da:3d:ef:ad:83:c1:58:25:e6:
ae:9c:27:8d:1b:7a:fa:80:5b:df:55:a6:c3:73:8e:75:e6:a7:
88:6c:39:bc:65:1c:90:43:a1:0d:c6:27:14:df:f3:5f:df:e8:
c9:6a:24:10:fb:bd:3d:68:27:1c:ca:19:ef:28:3a:24:be:91:
33:81:db:f8:8f:73:7e:75:be:1f:9b:c9:de:21:14:75:fa:8e:
9f:28:e9:1e:80:97:45:69:9c:04:a7:59:91:46:7f:05:ff:19:
cd:ce:b4:26:d4:1b:0a:af:3a:1c:7f:f5:2f:c4:43:82:f9:d1:
f9:1f:e6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:28:33 2026 by rpki-client