
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa
File: Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa (raw, json)
Hash identifier: XmoZ91/pkNWZ+kcdqr7S2mJAWOBYH2TBEvZdqMLp/SA=
Subject key identifier: 67:A1:60:0C:6D:94:60:9B:74:01:6D:30:5E:C8:32:B4:CE:D4:6C:99
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198693A5F77CCC559DB454A6C066A5DCA23
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa
Signing time: Sat 02 Aug 2025 05:21:29 +0000
ROA not before: Sat 02 Aug 2025 05:21:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 273478
IP address blocks: 151.244.241.0/24 maxlen: 24
151.245.242.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 15:11:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:69:3a:5f:77:cc:c5:59:db:45:4a:6c:06:6a:5d:ca:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 2 05:21:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67a1600c6d94609b74016d305ec832b4ced46c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d3:1e:ec:29:64:f5:61:61:dc:58:a2:7c:18:
62:c0:30:52:bd:ab:30:6d:5d:e4:b0:cc:87:3a:27:
31:ce:a3:2a:9a:67:6d:62:68:3f:69:ee:82:6d:ce:
e3:38:3c:85:cf:8c:d6:c9:ef:1f:10:ec:0c:be:64:
1e:03:ae:d4:01:a7:6a:ff:f0:aa:a1:a7:67:c7:17:
af:c3:9d:85:e9:9f:b7:e8:d7:d7:17:56:50:f3:85:
c0:2b:16:8f:b8:9b:ff:b7:6f:15:51:4a:f1:01:97:
69:c3:34:6c:4f:6a:96:a9:18:65:4a:46:eb:6a:e7:
37:16:c6:68:73:26:eb:e7:24:50:dc:97:4f:76:37:
77:45:2f:87:0c:f8:37:f2:02:d2:9c:cc:3f:51:b5:
c7:36:13:37:90:c3:72:38:40:7d:15:61:9b:14:92:
54:6b:d4:52:58:a8:9e:b0:d5:1e:ec:9b:44:a7:b7:
fa:27:f5:91:4a:ca:41:4b:ac:38:dd:80:9b:36:79:
a4:93:21:fc:40:68:b8:7c:14:81:f0:5b:66:1b:39:
ba:52:3f:0b:38:a9:b5:e7:22:89:d5:17:69:d8:ea:
ba:a1:fa:7c:36:47:17:e7:1e:b4:f5:67:f1:00:f9:
8d:ec:4a:28:c2:c0:d4:32:2a:94:ac:1e:6f:5f:6e:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:60:0C:6D:94:60:9B:74:01:6D:30:5E:C8:32:B4:CE:D4:6C:99
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Z6FgDG2UYJt0AW0wXsgytM7UbJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.244.241.0/24
151.245.242.0/23
Signature Algorithm: sha256WithRSAEncryption
0a:6b:8d:a9:e0:d2:ed:fe:36:9e:1b:38:f0:df:a6:9e:9e:7c:
36:b2:7d:fe:3f:68:1e:c8:68:40:20:12:17:fd:77:52:71:28:
13:a4:aa:4b:94:da:c3:e4:0a:db:e9:ce:8b:5f:24:37:9d:bb:
7e:18:6a:60:27:af:f3:3b:d2:3c:78:59:68:ad:56:57:aa:0b:
d6:e2:72:a1:f3:52:6c:2c:83:ea:8f:99:4b:ff:ea:e4:b1:2c:
15:2c:6b:d1:62:2c:db:e5:d1:1a:84:a8:60:66:a7:cd:50:15:
74:0d:3e:70:d6:fd:9d:e2:01:54:69:e2:b4:30:b2:d3:d1:b7:
44:0c:ca:b8:f2:0f:d7:b9:ff:1a:6a:c1:c1:19:ff:a1:42:cc:
55:7f:00:ec:b5:4b:c3:dc:49:a2:3e:b7:40:c6:da:02:cf:db:
6c:11:42:10:f9:64:15:7a:cf:dc:56:44:cf:88:15:a0:71:a4:
3f:d1:5e:c7:6b:a9:bb:67:5e:79:58:bd:cb:5a:90:18:31:73:
87:5e:e4:a1:c9:9b:a8:6a:a9:db:39:10:a4:3c:76:b3:13:63:
57:c3:23:4a:25:f8:a8:c8:1a:ab:e0:77:44:98:ec:d8:c5:ad:
db:e8:0c:d9:7a:7d:f2:a3:2a:88:06:7c:fc:97:f3:85:52:6d:
52:9c:e6:97
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZhpOl93zMVZ20VKbAZqXcojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwODAyMDUyMTI5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2ExNjAwYzZkOTQ2MDliNzQwMTZkMzA1ZWM4MzJiNGNlZDQ2Yzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9Me7Clk9WFh3FiifBhiwDBSvasw
bV3ksMyHOicxzqMqmmdtYmg/ae6Cbc7jODyFz4zWye8fEOwMvmQeA67UAadq//Cq
oadnxxevw52F6Z+36NfXF1ZQ84XAKxaPuJv/t28VUUrxAZdpwzRsT2qWqRhlSkbr
auc3FsZocybr5yRQ3JdPdjd3RS+HDPg38gLSnMw/UbXHNhM3kMNyOEB9FWGbFJJU
a9RSWKiesNUe7JtEp7f6J/WRSspBS6w43YCbNnmkkyH8QGi4fBSB8FtmGzm6Uj8L
OKm15yKJ1Rdp2Oq6ofp8NkcX5x609WfxAPmN7EoowsDUMiqUrB5vX26WdwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGehYAxtlGCbdAFtMF7IMrTO1GyZMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvWjZGZ0RHMlVZSnQwQVcwd1hzZ3l0TTdVYkprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAl/TxAwQB
l/XyMA0GCSqGSIb3DQEBCwUAA4IBAQAKa42p4NLt/jaeGzjw36aennw2sn3+P2ge
yGhAIBIX/XdScSgTpKpLlNrD5Arb6c6LXyQ3nbt+GGpgJ6/zO9I8eFlorVZXqgvW
4nKh81JsLIPqj5lL/+rksSwVLGvRYizb5dEahKhgZqfNUBV0DT5w1v2d4gFUaeK0
MLLT0bdEDMq48g/Xuf8aasHBGf+hQsxVfwDstUvD3EmiPrdAxtoCz9tsEUIQ+WQV
es/cVkTPiBWgcaQ/0V7Ha6m7Z155WL3LWpAYMXOHXuShyZuoaqnbORCkPHazE2NX
wyNKJfioyBqr4HdEmOzYxa3b6AzZen3yoyqIBnz8l/OFUm1SnOaX
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:42 2025 by rpki-client