Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2SauedN3-IaRdD8cqNFjHN-_9U.roa
File: Z2SauedN3-IaRdD8cqNFjHN-_9U.roa (raw, json)
Hash identifier: nfu2N6GCytNM5uegP4uGp6DbrNXgmbgoqflM3egxOqo=
Subject key identifier: 67:64:9A:B9:E7:4D:DF:E2:1A:45:D0:FC:72:A3:45:8C:73:7E:FF:D5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D2F1B1D2373B2DFAA56F9AF02D1C75CA4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2SauedN3-IaRdD8cqNFjHN-_9U.roa
Signing time: Fri 27 Mar 2026 11:43:19 +0000
ROA not before: Fri 27 Mar 2026 11:43:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34224
IP address blocks: 151.246.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:1b:1d:23:73:b2:df:aa:56:f9:af:02:d1:c7:5c:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 27 11:43:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=67649ab9e74ddfe21a45d0fc72a3458c737effd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5b:05:5f:2c:da:a6:01:b9:e3:30:3b:be:0b:
6c:09:fe:fc:b5:34:e3:d4:2d:a3:a2:e7:56:46:ad:
d4:4b:f2:a0:c3:cf:6f:35:78:d6:9e:b5:13:57:fc:
71:b0:4d:9a:19:c5:53:c7:93:ec:33:30:08:3e:c1:
4d:80:4b:3a:31:b0:8a:30:89:85:0d:5e:1f:ba:c5:
3f:01:6e:62:8b:74:a4:71:13:25:68:2b:59:60:cf:
6e:53:d8:6e:24:69:aa:ab:c9:40:65:0b:66:25:66:
22:d2:80:2d:33:3a:b2:a2:de:a4:3f:f8:fd:7f:06:
41:8c:11:9d:6f:df:8d:fe:8f:ae:b5:18:b1:da:b6:
87:a9:7a:4f:1c:0d:ca:eb:5e:84:e9:56:f9:2a:81:
93:21:3b:12:17:45:f9:55:93:b4:d2:81:21:c2:05:
6c:76:a4:63:b1:0b:9e:35:49:e9:4a:74:be:ad:b7:
99:48:1d:af:6a:e3:7c:bb:fb:d8:a0:85:48:17:47:
1a:94:70:91:8c:51:c4:60:ab:df:32:8c:2b:22:e4:
d2:ef:9b:5f:44:09:9a:3e:c2:01:cb:c5:6a:10:d0:
12:7d:c8:d3:b9:1c:d4:a8:28:3f:bb:ca:ad:86:12:
ee:fb:84:7c:cb:85:6e:e1:8c:fa:f0:d2:78:0d:f0:
f2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:64:9A:B9:E7:4D:DF:E2:1A:45:D0:FC:72:A3:45:8C:73:7E:FF:D5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z2SauedN3-IaRdD8cqNFjHN-_9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.246.192.0/24
Signature Algorithm: sha256WithRSAEncryption
96:a9:8e:58:cf:4c:e9:c6:b0:d8:e5:53:39:62:28:4b:2d:0c:
d1:c3:4f:80:26:09:0d:5c:06:48:ac:b5:45:af:82:af:bd:d4:
e9:14:71:a6:e0:36:1b:f3:55:cc:07:f3:7e:a9:ba:57:8d:80:
30:55:f3:8d:de:ac:7d:11:2f:80:a4:ef:7f:13:61:90:38:92:
36:b3:0a:4e:0a:8c:29:9a:92:2e:db:0e:08:2d:d9:ca:36:8d:
31:f3:5b:14:1c:db:18:43:8a:ee:3f:01:ab:77:92:ab:3f:91:
9f:30:b2:09:85:3f:47:d0:e8:43:19:ab:de:eb:89:71:5a:2b:
49:32:98:b4:d6:1f:e9:5d:8a:37:f8:4e:71:3d:2f:0f:aa:4a:
1f:5f:0b:fd:94:51:5a:30:ac:6a:b9:7c:d4:fb:be:22:45:72:
87:aa:c3:af:77:94:19:ad:2a:2e:f8:f8:68:9f:78:e0:10:a7:
8e:9c:1f:8c:5a:f6:10:aa:48:df:a7:60:42:60:b8:9b:af:3c:
6c:07:0e:95:17:be:61:67:18:c4:0f:73:c9:24:b1:22:54:8e:
ae:82:ed:9a:57:05:ad:d2:c0:ea:31:cc:4a:1f:88:00:8e:e4:
a3:4b:ae:00:02:bb:5b:d3:05:47:92:a4:6d:7b:37:79:76:9b:
57:a3:6e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:10:00 2026 by rpki-client