Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/05Zl42Px66tOqcKMfObHEjhI3ik.roa
File: 05Zl42Px66tOqcKMfObHEjhI3ik.roa (raw, json)
Hash identifier: dU/O9g1EE2W2KknGHdFYuZ7mhORVdmB16Nvzk/HQHek=
Subject key identifier: D3:96:65:E3:63:F1:EB:AB:4E:A9:C2:8C:7C:E6:C7:12:38:48:DE:29
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A11B6725A4D43D50377E9A2C0BE993A0E4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/05Zl42Px66tOqcKMfObHEjhI3ik.roa
Signing time: Thu 08 Oct 2026 12:05:06 +0000
ROA not before: Thu 08 Oct 2026 12:05:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.150.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.243.167.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.66.0/24 maxlen: 24
151.244.67.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.226.0/24 maxlen: 24
151.246.249.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:67:25:a4:d4:3d:50:37:7e:9a:2c:0b:e9:93:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 8 12:05:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d39665e363f1ebab4ea9c28c7ce6c7123848de29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0a:60:02:ed:26:c4:8d:27:af:6b:e7:06:52:
c3:4b:a6:0c:96:5c:e3:5b:ab:04:f1:e4:af:9e:fd:
26:36:0d:9a:60:97:34:bf:a0:38:8f:8e:18:b6:4f:
57:41:2b:2c:91:20:c2:57:cb:89:69:f3:de:c5:c0:
bd:4f:5f:11:82:ce:8c:02:c8:ae:9e:b7:b9:2f:e4:
46:4b:c9:9e:d6:1d:10:f6:3e:50:1a:c4:c6:45:76:
5d:79:32:cf:7d:d4:4a:44:73:e7:09:e5:89:3e:8d:
79:fd:48:64:9e:f8:2b:7f:e9:9f:0f:1c:cb:b5:97:
ed:17:5c:74:1f:d4:ef:8f:11:2a:be:81:b7:5f:51:
fe:4a:67:96:2c:38:75:ee:6c:33:27:89:75:65:b0:
7f:bd:66:6c:09:9f:e7:69:69:e1:a7:46:35:15:c6:
f3:12:06:28:a6:c4:66:66:9c:33:c0:b3:37:ee:d4:
e8:62:d6:8e:d5:bf:75:48:23:e5:e3:3d:97:f0:bb:
a2:ac:ec:40:33:cb:89:b4:d3:59:5d:67:a2:57:6b:
58:03:d4:a1:d9:22:f4:93:b8:e2:93:c6:6f:2c:e6:
ad:50:8d:40:5f:1c:fc:e0:3b:b9:4d:a0:83:56:de:
a5:be:2c:56:70:1f:d7:cb:27:4d:8b:06:5a:c3:0b:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:65:E3:63:F1:EB:AB:4E:A9:C2:8C:7C:E6:C7:12:38:48:DE:29
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/05Zl42Px66tOqcKMfObHEjhI3ik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.150.0/24
151.241.24.0/24
151.243.167.0/24
151.244.38.0/24
151.244.52.0/24
151.244.66.0/23
151.244.118.0/24
151.244.221.0/24
151.245.108.0/24
151.246.226.0/24
151.246.249.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
59:04:21:97:cc:9e:ec:dc:b4:d6:c1:45:14:47:74:fd:f8:5d:
99:a0:c5:cc:a4:94:52:ea:53:25:93:27:c4:2e:6f:cb:40:1d:
7a:2b:41:67:ed:e0:e1:f0:bb:76:0f:ab:ad:2e:46:20:7a:57:
64:73:53:59:fc:ba:8d:09:18:16:58:d7:13:42:a8:6d:61:89:
f5:7a:3d:78:9a:5f:f9:ab:89:ff:fc:01:34:0e:56:69:d2:1f:
91:c6:84:0c:ed:87:79:9e:b5:1f:eb:5b:dd:7c:3f:f2:fe:3e:
4b:8a:c2:7a:85:99:10:f1:e7:07:f4:a5:b3:1a:8c:cd:22:f8:
c0:fe:5f:d8:53:c8:a6:37:07:fe:3e:f4:73:20:26:c9:23:53:
23:29:37:2b:03:e9:c6:35:2b:a4:b3:b7:f4:fd:1f:8f:f6:ed:
0e:29:f8:6b:37:00:59:50:e7:99:df:15:40:69:36:18:87:aa:
12:0f:5d:34:92:68:53:29:91:5c:29:d6:51:c3:49:16:ad:dc:
37:a8:28:77:f2:52:fd:92:26:93:11:86:62:79:f3:9f:74:09:
e1:3a:a2:e9:e9:87:23:60:3f:8a:ec:85:3d:7c:40:9d:77:7a:
0a:54:5c:4e:41:5e:36:fe:2f:74:68:d8:90:01:18:0a:4e:bf:
81:a3:51:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:25:41 2026 by rpki-client