Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9m2QpdTSriad_MMh2TBsW-tPpH4.roa
File: 9m2QpdTSriad_MMh2TBsW-tPpH4.roa (raw, json)
Hash identifier: BNJ9CHuGCQs60nQ8oROFb2I/ILIBOXR2Y0DUf+gIrUU=
Subject key identifier: F6:6D:90:A5:D4:D2:AE:26:9D:FC:C3:21:D9:30:6C:5B:EB:4F:A4:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1436CB37119E5FCD3A2A5BD1D04889688
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9m2QpdTSriad_MMh2TBsW-tPpH4.roa
Signing time: Fri 16 Oct 2026 06:35:59 +0000
ROA not before: Fri 16 Oct 2026 06:35:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 151.240.3.0/24 maxlen: 24
151.242.227.0/24 maxlen: 24
151.243.113.0/24 maxlen: 24
151.243.133.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.246.216.0/23 maxlen: 24
151.247.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:43:6c:b3:71:19:e5:fc:d3:a2:a5:bd:1d:04:88:96:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 16 06:35:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f66d90a5d4d2ae269dfcc321d9306c5beb4fa47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:22:65:38:e9:80:b3:0c:64:9d:a1:28:08:69:
d2:05:95:e4:89:53:d3:c0:f0:e3:6e:33:46:f7:e1:
20:1f:57:32:49:5c:cb:0d:ce:98:ff:c9:3a:8c:49:
45:21:4d:dd:6c:6d:5e:f9:2a:f4:4a:44:72:8f:e4:
ce:83:ad:27:8d:e8:8f:40:0f:62:73:34:b5:0c:fb:
91:1d:10:14:32:42:4b:f0:ef:1b:f0:8c:9f:77:ef:
53:54:47:57:d9:ef:ae:cc:7a:78:3f:00:58:70:7c:
1a:07:78:45:b1:0f:94:03:b3:0b:d0:b6:5a:8b:10:
71:e4:61:da:20:64:80:f0:e4:25:9b:5e:5b:72:87:
6a:36:c6:68:36:28:c1:41:d9:c1:31:96:d3:ac:d5:
d9:10:56:06:8e:ce:7d:7e:3a:31:62:3c:c1:5f:d7:
88:9f:c7:bf:6f:30:17:46:31:01:73:84:0a:1d:a7:
5c:17:da:e4:24:a9:4c:2d:50:73:ac:06:7c:78:57:
4c:8e:b5:7a:0a:73:01:c2:0d:b5:b2:4e:57:b4:ec:
54:db:f7:0a:fb:59:b7:4c:3d:85:c4:1b:74:1f:75:
5f:7c:bc:42:48:30:c4:30:6d:80:c9:ab:4b:78:b6:
f3:98:cd:d2:9a:ae:c0:a5:81:bd:a5:25:4b:d3:3e:
83:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:90:A5:D4:D2:AE:26:9D:FC:C3:21:D9:30:6C:5B:EB:4F:A4:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/9m2QpdTSriad_MMh2TBsW-tPpH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.3.0/24
151.242.227.0/24
151.243.113.0/24
151.243.133.0/24
151.245.127.0/24
151.246.216.0/23
151.247.155.0/24
Signature Algorithm: sha256WithRSAEncryption
71:40:ac:fe:a6:b2:b3:ab:cc:ce:19:18:1f:94:b5:55:ae:1f:
4b:71:df:17:17:1d:4a:cb:91:b5:66:98:42:8d:b6:f2:c4:68:
ea:f4:03:bc:6a:d3:47:de:05:d3:9f:da:76:fb:2a:c1:06:6e:
ad:cb:30:7d:24:aa:b0:73:62:11:74:cb:f1:85:43:25:50:4a:
be:29:10:b3:2a:f0:54:db:3c:c1:58:28:ec:1a:50:29:1d:73:
07:4f:35:65:c4:6e:c4:cc:c8:d7:b7:2a:9f:e9:17:89:1c:72:
10:8d:f5:3d:27:77:39:0c:c9:58:19:09:c2:8e:53:89:20:50:
2a:55:70:d7:35:de:8e:a2:46:05:70:d2:6b:c1:d3:19:5a:7e:
23:4b:57:48:7a:c4:e7:fb:6d:73:9c:71:72:f1:74:19:90:a1:
d0:85:bc:27:4b:3f:6d:fd:26:a3:7c:2d:44:3d:36:8d:78:e8:
7b:25:cf:88:19:78:2c:c6:1c:aa:79:63:2c:2d:6b:f8:7c:bd:
05:81:dd:14:85:36:bf:f7:f6:ad:91:5c:a6:8e:86:a4:e4:9a:
78:0e:74:af:4e:c9:ba:ac:44:59:35:1a:64:53:38:79:52:59:
e7:3b:93:95:f1:14:ef:e2:18:b2:af:53:55:43:3a:6f:08:f9:
1f:34:1c:9f
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaFDbLNxGeX806KlvR0EiJaIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDE2MDYzNTU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjZkOTBhNWQ0ZDJhZTI2OWRmY2MzMjFkOTMwNmM1YmViNGZhNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iJlOOmAswxknaEoCGnSBZXkiVPT
wPDjbjNG9+EgH1cySVzLDc6Y/8k6jElFIU3dbG1e+Sr0SkRyj+TOg60njeiPQA9i
czS1DPuRHRAUMkJL8O8b8Iyfd+9TVEdX2e+uzHp4PwBYcHwaB3hFsQ+UA7ML0LZa
ixBx5GHaIGSA8OQlm15bcodqNsZoNijBQdnBMZbTrNXZEFYGjs59fjoxYjzBX9eI
n8e/bzAXRjEBc4QKHadcF9rkJKlMLVBzrAZ8eFdMjrV6CnMBwg21sk5XtOxU2/cK
+1m3TD2FxBt0H3VffLxCSDDEMG2AyatLeLbzmM3Smq7ApYG9pSVL0z6DxwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFPZtkKXU0q4mnfzDIdkwbFvrT6R+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOW0yUXBkVFNyaWFkX01NaDJUQnNXLXRQcEg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/ADAwQA
l/LjAwQAl/NxAwQAl/OFAwQAl/V/AwQBl/bYAwQAl/ebMA0GCSqGSIb3DQEBCwUA
A4IBAQBxQKz+prKzq8zOGRgflLVVrh9Lcd8XFx1Ky5G1ZphCjbbyxGjq9AO8atNH
3gXTn9p2+yrBBm6tyzB9JKqwc2IRdMvxhUMlUEq+KRCzKvBU2zzBWCjsGlApHXMH
TzVlxG7EzMjXtyqf6ReJHHIQjfU9J3c5DMlYGQnCjlOJIFAqVXDXNd6OokYFcNJr
wdMZWn4jS1dIesTn+21znHFy8XQZkKHQhbwnSz9t/SajfC1EPTaNeOh7Jc+IGXgs
xhyqeWMsLWv4fL0Fgd0UhTa/9/atkVymjoak5Jp4DnSvTsm6rERZNRpkUzh5Ulnn
O5OV8RTv4hiyr1NVQzpvCPkfNByf
-----END CERTIFICATE-----
Generated at Wed Oct 21 04:51:38 2026 by rpki-client