Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zm50gC_d8RqkQSQTIWE1_3BKGNw.roa
File: zm50gC_d8RqkQSQTIWE1_3BKGNw.roa (raw, json)
Hash identifier: H6RbNP+sFlk1J+mN6JlArBnNrmU9uoQXBeBL59x7qTw=
Subject key identifier: CE:6E:74:80:2F:DD:F1:1A:A4:41:24:13:21:61:35:FF:70:4A:18:DC
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019BFF147F0505D9433DBB8FE137FE8CDDE3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zm50gC_d8RqkQSQTIWE1_3BKGNw.roa
Signing time: Tue 27 Jan 2026 10:51:31 +0000
ROA not before: Tue 27 Jan 2026 10:51:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 151.243.48.0/24 maxlen: 24
151.243.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:ff:14:7f:05:05:d9:43:3d:bb:8f:e1:37:fe:8c:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jan 27 10:51:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ce6e74802fddf11aa4412413216135ff704a18dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:19:f6:37:30:61:04:dd:7a:f6:e2:a2:4a:
37:fe:01:dc:03:ee:45:68:6c:d0:f7:ad:86:80:32:
28:9a:55:24:2a:51:a4:ee:e6:51:c1:ab:eb:2c:9a:
8a:62:8d:c5:cd:ae:06:96:a6:de:3d:64:e7:ea:c4:
a4:8e:55:9f:f3:95:fb:56:9b:12:66:05:6f:80:4f:
14:0b:b8:90:af:a4:67:4f:e9:01:05:e4:55:14:df:
60:f5:28:79:b2:8c:29:4c:9f:44:16:89:0e:e1:58:
4d:34:b6:89:7e:62:35:e8:6c:33:49:7f:36:6c:db:
2a:81:94:11:78:96:29:58:7b:28:90:e0:b5:65:c7:
09:a1:b1:95:37:6d:eb:dd:4e:3c:34:c8:12:38:dd:
9d:6d:4f:33:69:35:39:93:4f:c4:e2:1f:0b:e1:36:
50:d0:c6:0d:1f:2e:6d:7b:d6:29:5f:e1:68:9f:34:
52:fa:9e:0e:24:45:99:26:2d:07:e8:36:3f:40:92:
c8:dc:89:1d:ea:49:e0:51:fc:f4:f9:01:74:f6:65:
85:14:f6:50:3b:f8:5d:8f:95:a2:96:e1:45:72:fb:
87:0f:40:9a:98:53:e9:be:ae:67:ab:8d:d3:2b:72:
ef:52:a9:32:4e:80:29:07:30:7f:62:96:fb:07:4e:
84:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:6E:74:80:2F:DD:F1:1A:A4:41:24:13:21:61:35:FF:70:4A:18:DC
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/zm50gC_d8RqkQSQTIWE1_3BKGNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.243.48.0/24
151.243.56.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:19:16:a7:18:55:fb:7d:d4:f3:89:17:f0:27:3c:a7:fb:f0:
ed:50:43:4f:08:58:a0:61:3a:1a:60:88:e2:da:5b:5c:1f:b6:
29:31:19:38:ed:13:ea:9b:3f:89:16:4f:62:c3:25:99:d0:24:
7b:25:8d:74:d4:23:8d:81:e9:d5:56:bd:b6:2a:0e:18:aa:60:
aa:df:6b:f6:11:61:94:7e:f3:ba:58:01:dd:e2:96:67:63:d4:
c3:5e:ed:d2:58:40:1e:1f:29:c1:88:17:49:fd:cf:de:53:e6:
be:a4:b8:db:8e:f6:f2:57:50:21:d6:71:f7:56:52:20:2a:17:
da:bb:52:31:8e:41:46:52:04:b2:e9:09:1c:ae:ff:d9:94:1a:
2d:b9:16:09:d3:d7:25:b9:2a:2a:b2:82:3e:46:26:3d:dc:f1:
51:4c:83:34:6c:30:77:9a:75:24:51:cf:cf:21:61:e7:21:f3:
43:3e:c2:9f:2c:a5:eb:3d:7f:24:6e:de:be:5b:b8:06:8b:38:
5c:36:3f:75:b9:76:9b:e8:eb:31:58:79:c9:35:d8:49:03:ef:
15:d8:cf:24:7a:d3:b4:59:78:1d:9b:3f:ba:2e:4a:df:7e:f0:
e0:fb:c9:a1:56:96:24:74:55:86:31:08:d3:16:f6:a2:1e:68:
49:0a:81:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:47:41 2026 by rpki-client