Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CD-Inzi-DWwdteZsa8jGDzRZrok.roa
File: CD-Inzi-DWwdteZsa8jGDzRZrok.roa (raw, json)
Hash identifier: SdtFUbhTUT9oorlLRUpcqIaA2YupF4earB090r2uLz0=
Subject key identifier: 08:3F:88:9F:38:BE:0D:6C:1D:B5:E6:6C:6B:C8:C6:0F:34:59:AE:89
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1688785B3B10BB5F5B311D18548479CA5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CD-Inzi-DWwdteZsa8jGDzRZrok.roa
Signing time: Fri 23 Oct 2026 11:31:14 +0000
ROA not before: Fri 23 Oct 2026 11:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31898
IP address blocks: 151.241.17.0/24 maxlen: 24
151.244.101.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
151.247.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:87:85:b3:b1:0b:b5:f5:b3:11:d1:85:48:47:9c:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 23 11:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=083f889f38be0d6c1db5e66c6bc8c60f3459ae89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:62:f7:04:35:b7:c6:c0:8d:17:c7:42:82:29:
40:92:77:cb:e9:24:7c:39:44:ab:53:69:2d:4a:f9:
8b:79:5d:e2:1e:71:99:9e:3e:a9:5e:0e:0e:85:6e:
f2:21:12:09:ed:1a:4f:b8:07:98:d2:c9:34:70:ab:
0a:15:80:66:b8:0f:1d:45:98:2d:6a:7f:27:6a:59:
91:72:69:ae:b6:17:8f:44:91:21:65:53:4f:0b:57:
a8:24:dc:06:91:7a:a5:8e:69:0f:4f:77:6e:b1:7d:
05:fd:f2:b6:f8:df:ba:66:87:dc:2a:c5:92:b2:e3:
bb:94:ed:e2:c9:01:26:3f:26:a4:91:90:21:eb:0c:
53:4d:3b:2d:7e:0e:90:89:04:46:64:c6:af:f4:6b:
90:16:a9:07:20:ea:ab:1f:65:90:58:60:1e:c4:27:
9b:11:84:eb:a0:4a:62:77:0d:dd:59:70:06:5c:d8:
f6:d7:72:19:15:6b:6a:31:21:84:6c:54:b7:4e:1b:
34:38:e4:bb:f2:20:3a:17:f1:59:a6:9e:7e:94:ef:
80:12:fe:87:0a:c8:39:a1:f8:db:ce:a5:a2:a3:ca:
ce:cc:0d:99:cb:9e:2f:c3:ba:6f:5c:e4:d6:d0:a9:
11:9e:4b:48:c1:df:36:00:42:37:d0:5a:9f:aa:9d:
08:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:88:9F:38:BE:0D:6C:1D:B5:E6:6C:6B:C8:C6:0F:34:59:AE:89
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/CD-Inzi-DWwdteZsa8jGDzRZrok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.17.0/24
151.244.101.0/24
151.246.180.0/24
151.247.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:7c:ec:d3:da:ec:30:c9:3c:c2:0c:36:56:66:56:24:b6:a5:
07:47:92:08:79:f8:ef:f3:a4:24:a6:b5:26:c2:9a:da:3a:6f:
82:12:5f:e7:64:2e:62:f9:dc:05:b1:3a:b0:6d:b3:85:84:f0:
db:e1:80:3c:5b:9b:1f:80:0e:d6:bf:56:1a:16:11:f5:9d:d8:
84:54:5f:7a:74:ae:c3:7c:8c:b2:93:af:c6:e9:6b:25:0b:51:
52:a9:d0:2c:5d:18:e4:7a:70:3e:66:84:11:df:24:b5:a2:41:
45:f5:31:4f:25:dc:7c:ce:20:ad:36:43:13:86:5b:0e:2a:e6:
4b:88:6a:b3:14:ab:2c:85:73:79:68:2f:66:85:ee:4a:e1:75:
1d:49:5a:69:35:b6:99:78:d0:03:c3:1d:ba:c9:c5:96:0e:34:
c6:d0:8e:97:39:e2:a7:c1:50:26:78:9c:0a:65:ff:41:f8:6a:
7d:a0:cc:f8:11:44:48:7f:bc:ce:18:53:92:45:1b:56:b0:4d:
98:f2:09:6f:0e:79:13:d5:ff:cb:22:60:e0:4d:29:73:9a:ee:
e2:c8:c3:8f:76:49:7d:7b:fe:42:24:d6:97:bd:c9:71:39:41:
82:10:bb:0d:8e:20:83:f4:13:c9:f1:0a:57:91:0a:29:cd:5a:
87:63:2e:ff
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFoh4WzsQu19bMR0YVIR5ylMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDIzMTEzMTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODNmODg5ZjM4YmUwZDZjMWRiNWU2NmM2YmM4YzYwZjM0NTlhZTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGL3BDW3xsCNF8dCgilAknfL6SR8
OUSrU2ktSvmLeV3iHnGZnj6pXg4OhW7yIRIJ7RpPuAeY0sk0cKsKFYBmuA8dRZgt
an8nalmRcmmuthePRJEhZVNPC1eoJNwGkXqljmkPT3dusX0F/fK2+N+6ZofcKsWS
suO7lO3iyQEmPyakkZAh6wxTTTstfg6QiQRGZMav9GuQFqkHIOqrH2WQWGAexCeb
EYTroEpidw3dWXAGXNj213IZFWtqMSGEbFS3Ths0OOS78iA6F/FZpp5+lO+AEv6H
Csg5ofjbzqWio8rOzA2Zy54vw7pvXOTW0KkRnktIwd82AEI30Fqfqp0I7QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFAg/iJ84vg1sHbXmbGvIxg80Wa6JMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvQ0QtSW56aS1EV3dkdGVac2E4akdEelJacm9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAl/ERAwQA
l/RlAwQAl/a0AwQAl/eCMA0GCSqGSIb3DQEBCwUAA4IBAQAgfOzT2uwwyTzCDDZW
ZlYktqUHR5IIefjv86QkprUmwpraOm+CEl/nZC5i+dwFsTqwbbOFhPDb4YA8W5sf
gA7Wv1YaFhH1ndiEVF96dK7DfIyyk6/G6WslC1FSqdAsXRjkenA+ZoQR3yS1okFF
9TFPJdx8ziCtNkMThlsOKuZLiGqzFKsshXN5aC9mhe5K4XUdSVppNbaZeNADwx26
ycWWDjTG0I6XOeKnwVAmeJwKZf9B+Gp9oMz4EURIf7zOGFOSRRtWsE2Y8glvDnkT
1f/LImDgTSlzmu7iyMOPdkl9e/5CJNaXvclxOUGCELsNjiCD9BPJ8QpXkQopzVqH
Yy7/
-----END CERTIFICATE-----
Generated at Thu Nov 5 17:25:04 2026 by rpki-client