Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4j0BBims8yXiEnzrUnoF_L2P17A.roa
File: 4j0BBims8yXiEnzrUnoF_L2P17A.roa (raw, json)
Hash identifier: 9TglEtyDFVcuK7exBikH9r9Ly7imurFd7tBQId3Fc4g=
Subject key identifier: E2:3D:01:06:29:AC:F3:25:E2:12:7C:EB:52:7A:05:FC:BD:8F:D7:B0
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C5FD229669DD4B697EEF3ED5E2D493A9F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4j0BBims8yXiEnzrUnoF_L2P17A.roa
Signing time: Sun 15 Feb 2026 05:42:14 +0000
ROA not before: Sun 15 Feb 2026 05:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.247.83.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.109.0/24 maxlen: 24
151.247.110.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Feb 2026 09:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:d2:29:66:9d:d4:b6:97:ee:f3:ed:5e:2d:49:3a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 15 05:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e23d010629acf325e2127ceb527a05fcbd8fd7b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:4a:35:a3:56:18:cd:ac:31:58:b9:ff:b1:19:
dc:12:36:2b:b0:f3:f2:53:c7:17:72:1d:33:43:4c:
79:98:43:0f:30:87:b6:29:56:8c:a1:d7:3e:19:58:
82:43:0c:b9:5f:89:e9:29:d0:72:a9:53:a5:47:c0:
49:50:d2:fd:9c:9c:18:0f:e5:47:9c:eb:82:75:1f:
20:f7:86:cd:df:92:30:77:4b:43:99:ad:49:fd:cb:
45:60:48:a5:f9:84:56:e7:1a:b5:88:f5:fe:46:9c:
49:11:80:71:10:5f:cc:27:87:51:d0:24:e5:85:f9:
39:f4:a4:cc:12:6c:f8:1d:24:9d:f8:b1:43:e1:ec:
42:98:4a:a3:63:7e:da:cb:ec:36:c1:c9:84:71:7b:
1e:de:3b:90:f8:63:45:75:a4:c0:e7:16:7d:6a:cd:
77:ff:5a:69:bb:14:90:b6:be:de:87:df:d6:ae:93:
9b:e9:72:20:1d:f2:e7:dd:a5:be:d2:1f:60:06:93:
c6:48:96:27:9a:66:d0:e4:b9:88:b0:1c:ef:8b:89:
77:a8:e5:ea:e3:e0:95:ab:eb:e9:44:4c:c2:b9:e1:
a0:f3:1a:ed:3b:5b:5f:12:d6:e0:5f:6a:3f:37:96:
32:10:bc:f1:e6:53:65:b7:34:33:d8:6f:19:2d:db:
3c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3D:01:06:29:AC:F3:25:E2:12:7C:EB:52:7A:05:FC:BD:8F:D7:B0
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4j0BBims8yXiEnzrUnoF_L2P17A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.241.51.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.245.166.0/24
151.245.177.0/24
151.247.83.0/24
151.247.89.0/24
151.247.109.0-151.247.110.255
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:df:d7:ef:2f:34:92:2a:7b:ea:90:95:54:b3:11:95:f8:47:
7a:55:30:b6:e8:ef:ee:3f:85:f0:68:ad:0c:50:58:62:0d:84:
ef:45:46:ac:7f:1a:2e:2f:cf:d0:a6:63:3c:d8:10:19:18:b4:
c5:d7:cd:40:ea:48:2b:3b:e0:3b:3d:77:65:21:f8:df:cc:56:
36:68:03:36:ac:c9:e5:ba:7a:2f:75:40:91:ce:6f:60:a7:3b:
a0:87:40:c1:51:80:7d:e7:22:b3:51:8f:db:b0:95:21:ee:16:
9d:ea:60:8a:69:d6:c7:16:f9:42:be:23:00:11:3e:7f:5a:88:
ea:42:1b:ce:65:a8:fa:a6:7a:e0:57:99:0e:40:59:7c:46:6d:
fd:72:d9:96:bc:e5:c7:8a:c5:e1:14:97:76:32:d1:ca:dd:61:
08:11:ec:40:13:3a:57:10:57:e3:5c:3d:6d:16:79:44:e5:48:
4e:e5:8c:85:e3:d0:0d:7f:60:c8:e7:75:dc:b9:5d:34:c7:bf:
40:3b:e0:3d:03:38:5d:f5:34:86:bc:b2:21:24:e5:54:db:d5:
c4:be:e4:7f:fe:3c:5c:0d:37:6e:b6:0a:96:a6:0e:f2:71:2d:
16:bf:07:7b:f6:33:b0:42:27:2e:8d:b9:22:16:6b:2d:6d:42:
b1:b1:f7:18
-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgISAZxf0ilmndS2l+7z7V4tSTqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjE1MDU0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjNkMDEwNjI5YWNmMzI1ZTIxMjdjZWI1MjdhMDVmY2JkOGZkN2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10o1o1YYzawxWLn/sRncEjYrsPPy
U8cXch0zQ0x5mEMPMIe2KVaModc+GViCQwy5X4npKdByqVOlR8BJUNL9nJwYD+VH
nOuCdR8g94bN35Iwd0tDma1J/ctFYEil+YRW5xq1iPX+RpxJEYBxEF/MJ4dR0CTl
hfk59KTMEmz4HSSd+LFD4exCmEqjY37ay+w2wcmEcXse3juQ+GNFdaTA5xZ9as13
/1ppuxSQtr7eh9/WrpOb6XIgHfLn3aW+0h9gBpPGSJYnmmbQ5LmIsBzvi4l3qOXq
4+CVq+vpREzCueGg8xrtO1tfEtbgX2o/N5YyELzx5lNltzQz2G8ZLds8SwIDAQAB
o4ICZTCCAmEwHQYDVR0OBBYEFOI9AQYprPMl4hJ861J6Bfy9j9ewMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNGowQkJpbXM4eVhpRW56clVub0ZfTDJQMTdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHsGCCsGAQUFBwEHAQH/BGwwajBoBAIAATBiAwQAl/ACAwQA
l/EhAwQAl/ErAwQAl/EwAwQAl/EzAwQAl/IaAwQAl/MaAwQAl/QqAwQAl/VFAwQA
l/WmAwQAl/WxAwQAl/dTAwQAl/dZMAwDBACX920DBACX924DBACX9/YwDQYJKoZI
hvcNAQELBQADggEBAC7f1+8vNJIqe+qQlVSzEZX4R3pVMLbo7+4/hfBorQxQWGIN
hO9FRqx/Gi4vz9CmYzzYEBkYtMXXzUDqSCs74Ds9d2Uh+N/MVjZoAzasyeW6ei91
QJHOb2CnO6CHQMFRgH3nIrNRj9uwlSHuFp3qYIpp1scW+UK+IwARPn9aiOpCG85l
qPqmeuBXmQ5AWXxGbf1y2Za85ceKxeEUl3Yy0crdYQgR7EATOlcQV+NcPW0WeUTl
SE7ljIXj0A1/YMjnddy5XTTHv0A74D0DOF31NIa8siEk5VTb1cS+5H/+PFwNN262
CpamDvJxLRa/B3v2M7BCJy6NuSIWay1tQrGx9xg=
-----END CERTIFICATE-----
Generated at Sat Feb 21 16:31:21 2026 by rpki-client