Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2m60sywcGT6d2G1M9_vEIqEOKjs.roa
File: 2m60sywcGT6d2G1M9_vEIqEOKjs.roa (raw, json)
Hash identifier: Yc6fcHkJ4xrh4lSRD4+hFA38DuOPJ0vGl/deSNjDl6w=
Subject key identifier: DA:6E:B4:B3:2C:1C:19:3E:9D:D8:6D:4C:F7:FB:C4:22:A1:0E:2A:3B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F3742647EF77C704F6716FDB186425B7D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2m60sywcGT6d2G1M9_vEIqEOKjs.roa
Signing time: Mon 06 Jul 2026 11:48:45 +0000
ROA not before: Mon 06 Jul 2026 11:48:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.244.227.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:37:42:64:7e:f7:7c:70:4f:67:16:fd:b1:86:42:5b:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:48:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=da6eb4b32c1c193e9dd86d4cf7fbc422a10e2a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:ba:7d:db:7f:ef:e0:88:2a:f3:e4:96:e4:
7b:ec:c7:df:65:b4:62:e5:1a:a5:50:4c:4e:c2:cc:
51:2b:db:48:a9:98:fb:9c:42:95:f3:b3:2b:b4:ee:
53:1b:94:58:5c:25:eb:0b:f9:41:93:61:4d:ac:aa:
b3:ca:28:29:a7:83:42:4c:94:9f:79:8a:56:33:a5:
91:4b:c6:53:1f:40:a0:13:84:c5:a4:db:02:aa:a6:
4a:c6:9e:db:27:ce:b2:10:cc:06:5f:fd:2a:74:9c:
5a:ca:4d:ee:99:79:59:c7:63:bf:87:45:9e:1c:5f:
57:b7:5a:20:76:cd:01:91:f2:50:0a:01:ad:5f:d2:
66:72:ae:20:c2:06:4d:05:ba:b9:ea:0a:8d:bf:31:
f2:21:9c:ac:48:3d:f2:86:09:e7:6f:e6:39:11:55:
f6:2d:92:b1:3c:a3:f8:49:fd:f0:80:54:53:65:a1:
7f:7d:3f:34:46:c7:75:dc:1d:e5:c6:e0:4b:35:63:
aa:a2:b0:cd:5e:09:aa:9c:dd:d6:06:5f:7b:7e:fa:
bf:6a:87:07:24:9b:68:f7:86:38:26:7e:a7:8f:ce:
62:b2:f1:28:83:4f:71:18:f1:74:f1:34:62:3f:28:
ba:35:e9:31:58:c5:ae:ef:02:97:66:73:f1:c5:3d:
59:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6E:B4:B3:2C:1C:19:3E:9D:D8:6D:4C:F7:FB:C4:22:A1:0E:2A:3B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/2m60sywcGT6d2G1M9_vEIqEOKjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.244.227.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
25:4b:40:cb:5b:b0:87:d3:b3:9b:00:a3:94:e0:7c:08:74:d6:
bb:e8:e0:03:e7:73:44:0b:63:da:9f:93:9c:0d:7f:de:4d:75:
21:2c:7c:95:af:09:f4:07:04:a3:0f:63:16:e3:1c:89:cf:0b:
df:67:86:3d:b7:23:28:bc:8f:2e:51:f9:de:3d:45:64:21:be:
29:a2:29:92:3c:0a:d4:f1:b6:05:1e:dd:34:39:f5:a4:1d:67:
f0:cd:3b:a6:e7:34:f2:af:e9:6a:c4:22:43:34:a8:ae:72:19:
b2:60:ec:65:75:45:e7:e0:33:25:a2:95:04:f9:ce:92:25:b0:
35:1f:4f:60:72:ca:24:ed:c3:00:35:8b:2e:36:22:ed:90:d2:
9f:f2:4b:bb:41:63:f5:15:95:97:4a:92:96:d5:51:a0:4f:3c:
c3:35:d8:7e:8a:40:8e:72:04:d3:20:6e:d4:15:a8:4e:07:fd:
a8:5a:9d:4c:6e:2d:d7:75:30:7d:46:17:3e:fc:94:99:42:73:
2c:c2:16:d3:74:5c:b7:92:ee:08:f3:87:c7:6f:da:30:10:52:
65:e5:23:8b:b8:45:0c:dd:ad:89:8b:3e:78:9c:dd:37:77:5e:
ee:f9:e0:98:ee:dd:11:02:31:6c:7f:fe:3f:46:af:ad:ad:c9:
60:ab:80:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 18:15:49 2026 by rpki-client