Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9W5Yfy8ptq-s_XmFxhuE_sa-cJY.roa
File: 9W5Yfy8ptq-s_XmFxhuE_sa-cJY.roa (raw, json)
Hash identifier: 4r0QfMng6HUZIRoZqNCwPBva5eAKejB5WCtJT0iSNAg=
Subject key identifier: F5:6E:58:7F:2F:29:B6:AF:AC:FD:79:85:C6:1B:84:FE:C6:BE:70:96
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E4FBB09E882A63EBCD4F5A9A2BC6CBA32
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9W5Yfy8ptq-s_XmFxhuE_sa-cJY.roa
Signing time: Fri 22 May 2026 12:48:38 +0000
ROA not before: Fri 22 May 2026 12:48:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.38.0/24 maxlen: 24
151.247.39.0/24 maxlen: 24
151.247.42.0/24 maxlen: 24
151.247.43.0/24 maxlen: 24
151.247.49.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
151.247.93.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:bb:09:e8:82:a6:3e:bc:d4:f5:a9:a2:bc:6c:ba:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 22 12:48:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f56e587f2f29b6afacfd7985c61b84fec6be7096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:f9:e0:41:4f:ad:ad:62:bd:82:69:0b:7b:
28:c4:c0:2a:ab:15:fc:e2:d5:d0:58:23:90:a2:5b:
18:35:f8:6d:fe:bd:ac:1c:e6:b9:4f:7b:1c:e3:b6:
48:6a:2e:42:20:92:78:a2:8e:a7:36:87:51:01:dc:
62:8e:6c:d1:5b:a1:dd:fb:c0:5e:bb:2e:62:ef:8e:
a5:7e:b8:39:52:d6:70:ea:69:5c:62:e9:ac:c2:68:
d9:1a:2c:22:7c:d3:48:92:3e:01:1e:d2:72:33:e5:
82:95:59:ef:1a:e0:85:5b:2b:ed:bb:f7:dd:4b:f5:
7b:fe:63:3f:6c:8f:33:29:f5:d1:9a:e4:75:7e:d4:
ab:27:af:ce:22:d9:51:79:b4:9e:b2:20:0b:0a:a4:
57:bc:b1:ff:ea:79:b5:5d:70:0e:12:a0:bd:f4:58:
dd:3c:9f:18:4a:a8:8b:ad:34:a7:c3:5f:a7:37:06:
71:77:f1:a5:3b:c1:55:3b:a8:39:52:24:c2:91:c7:
45:3f:a7:df:e6:11:35:f3:32:19:6f:2f:dd:c7:ec:
1f:05:d7:a4:72:e4:e2:b4:17:b6:3e:56:72:ed:39:
e3:50:9e:48:71:08:7c:d2:99:7b:0d:de:90:19:fe:
e2:3d:99:7d:2b:ad:39:7d:b6:ef:97:85:1d:0e:e6:
f4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6E:58:7F:2F:29:B6:AF:AC:FD:79:85:C6:1B:84:FE:C6:BE:70:96
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9W5Yfy8ptq-s_XmFxhuE_sa-cJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.245.166.0/24
151.245.177.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.38.0/23
151.247.42.0/23
151.247.49.0/24
151.247.54.0/24
151.247.93.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
59:fd:0d:55:62:e8:a4:ea:22:d6:99:f9:1d:d5:27:c4:5c:ae:
fc:cf:e2:84:ed:a1:f6:4f:d8:44:ff:97:50:aa:12:dd:92:e6:
37:ce:20:17:d8:e7:45:22:e6:87:72:e3:f6:d1:a4:9b:58:14:
5f:cb:49:e1:3e:3c:d4:88:4d:88:cf:01:14:da:d9:b7:2c:57:
35:67:1d:d8:2b:9f:6f:ad:30:b1:45:d9:99:73:48:44:0b:4c:
65:4d:f9:dc:1f:73:13:05:2f:63:e8:df:65:b3:14:5f:22:6d:
49:74:ee:62:91:0e:e0:48:74:b6:8e:fa:a2:66:79:5e:cc:a8:
2b:2b:25:8c:86:84:f7:9c:df:d8:9e:e7:08:55:08:33:b6:90:
99:7b:86:d0:d3:2a:f0:51:2d:85:35:5f:2e:e4:8d:18:98:62:
c8:b1:ca:c9:ca:cc:ce:39:5b:d8:1b:e7:03:53:27:4e:52:29:
72:31:5d:1e:3b:8e:15:93:60:2a:1e:22:1d:bc:f5:b5:a6:e4:
4b:0d:ac:5e:7e:c4:6e:d9:b4:7e:59:aa:6e:bf:bd:9c:8b:dc:
29:e1:df:b1:b5:12:0e:99:48:04:fb:d7:ee:90:00:80:10:ea:
7c:ab:c1:37:06:6d:ac:26:4a:03:2e:c1:d7:16:6c:64:ba:c6:
3a:4b:18:f0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:25 2026 by rpki-client