Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZOwCxtxtFDt0hu4KBqkgvDr2Tq8.roa
File: ZOwCxtxtFDt0hu4KBqkgvDr2Tq8.roa (raw, json)
Hash identifier: wJ7uZ12PVERUcv0OMySDvLd6k86Kd7ataehCsjS4uBA=
Subject key identifier: 64:EC:02:C6:DC:6D:14:3B:74:86:EE:0A:06:A9:20:BC:3A:F6:4E:AF
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 01A08F83040887890327D7BA0897FC27E55C
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZOwCxtxtFDt0hu4KBqkgvDr2Tq8.roa
Signing time: Fri 11 Sep 2026 08:08:43 +0000
ROA not before: Fri 11 Sep 2026 08:08:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207184
IP address blocks: 46.151.182.0/24 maxlen: 24
185.242.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:83:04:08:87:89:03:27:d7:ba:08:97:fc:27:e5:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Sep 11 08:08:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=64ec02c6dc6d143b7486ee0a06a920bc3af64eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:68:88:5b:48:20:8e:a0:b7:2a:33:5d:ed:
e8:c1:98:d3:95:3c:97:98:e3:1c:19:6d:a8:7b:5e:
62:a0:bd:d0:b1:59:a8:9f:59:9e:92:49:75:45:6d:
6b:21:96:2c:a3:22:df:62:65:a0:37:05:79:e5:fe:
b8:90:ce:d1:b1:4b:a3:1e:e2:8b:7f:a8:93:2c:e8:
b0:db:88:92:36:37:a9:65:15:35:d8:78:df:31:30:
4a:3e:27:57:5b:cf:e5:6c:a6:c0:94:17:a2:5e:bc:
8c:d7:f8:35:84:c0:73:b4:62:ba:6a:a6:94:52:81:
d5:bd:85:50:7b:d9:f3:27:42:6f:8e:a2:86:0e:cf:
1c:37:53:30:3f:d0:dc:4b:74:a5:c9:31:ab:a1:72:
53:e8:c3:30:67:93:20:8e:c1:6f:60:12:59:29:05:
c1:4f:50:b9:d5:a2:e5:2f:94:c1:ae:de:a3:dd:9b:
1c:dc:2a:41:08:2d:c2:ec:da:b5:07:36:4a:a8:35:
61:84:8e:fe:e6:3a:73:06:80:fa:8a:ea:dd:92:32:
8c:b2:ca:e9:94:76:dc:76:c0:ab:d4:98:a3:50:99:
60:ba:7d:7c:a3:97:d6:e2:97:b4:0e:d1:64:9f:24:
f9:83:d7:7c:8c:7b:b7:cf:8c:68:d5:d7:8a:10:0c:
eb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:EC:02:C6:DC:6D:14:3B:74:86:EE:0A:06:A9:20:BC:3A:F6:4E:AF
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/ZOwCxtxtFDt0hu4KBqkgvDr2Tq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.151.182.0/24
185.242.3.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:df:1d:36:a5:de:7a:e4:db:f2:0e:43:8e:56:27:aa:1f:5b:
4a:a0:9a:dc:1d:a5:bc:4e:bd:20:ad:3d:c2:7e:48:8d:51:5d:
65:be:a5:1d:8d:30:36:04:77:24:13:8e:16:0b:ab:db:79:08:
e1:51:80:f4:81:17:62:81:bb:6f:e6:b1:c6:3e:38:26:ff:bc:
18:d0:58:dc:5d:9f:9d:b1:6f:18:28:24:d5:a0:b1:a0:97:4a:
be:2f:95:fb:ab:63:fe:e8:0b:84:1d:29:28:93:b9:33:05:97:
c3:89:c3:51:97:f9:f6:37:e0:ab:e7:15:e9:01:9a:e9:b5:fe:
4a:ce:38:c0:93:a7:e5:d2:95:f2:9f:a1:50:fd:b6:6d:42:ae:
68:23:08:90:0a:80:73:56:e4:e9:93:26:3f:3a:a8:b0:48:79:
0a:ff:d9:45:87:b0:ad:bf:5e:60:88:f9:40:4f:77:f9:b8:f5:
bb:7b:be:ee:4b:44:7c:91:0d:1c:00:8d:bc:a6:d0:93:2f:c5:
e4:bd:f8:6c:02:bf:8f:7d:a3:20:b5:4d:38:d6:5e:a7:05:09:
06:96:b1:d0:02:f4:d2:fd:92:b4:e2:09:92:1a:e0:23:21:13:
03:63:84:cf:7c:bf:2c:41:fa:ca:29:99:98:8c:aa:e7:99:a4:
26:09:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 13:45:32 2026 by rpki-client