Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyomAbM1n5nlfX8sekT_Yy4PciY.roa
File: GyomAbM1n5nlfX8sekT_Yy4PciY.roa (raw, json)
Hash identifier: JX/JL8a+UjQKFmWiGLYqSMPySZlJhthOrk0168attws=
Subject key identifier: 1B:2A:26:01:B3:35:9F:99:E5:7D:7F:2C:7A:44:FF:63:2E:0F:72:26
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1155F90F9EE0AE98E0168A11D79EEBEB5
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyomAbM1n5nlfX8sekT_Yy4PciY.roa
Signing time: Wed 07 Oct 2026 07:59:06 +0000
ROA not before: Wed 07 Oct 2026 07:59:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 151.240.146.0/24 maxlen: 24
151.241.166.0/24 maxlen: 24
151.242.160.0/23 maxlen: 24
151.242.162.0/24 maxlen: 24
151.242.163.0/24 maxlen: 24
151.242.236.0/24 maxlen: 24
151.245.174.0/24 maxlen: 24
151.246.128.0/24 maxlen: 24
151.247.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:5f:90:f9:ee:0a:e9:8e:01:68:a1:1d:79:ee:be:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 7 07:59:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1b2a2601b3359f99e57d7f2c7a44ff632e0f7226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:8d:e6:ba:48:3a:60:37:5a:4f:51:f5:5a:c7:
6a:03:c6:e6:f7:03:93:80:8e:b0:e1:1b:51:c3:f9:
ce:02:ad:3d:92:7c:15:35:ba:26:2f:b9:04:9b:c1:
11:f2:99:c5:ab:33:9b:c2:86:65:a7:e8:6a:15:07:
43:3a:73:92:36:ad:93:83:35:f3:a8:2c:11:8f:f0:
26:e8:88:c7:45:6a:77:e4:43:63:c6:eb:39:42:a5:
44:a7:42:0f:b5:e7:2f:cd:05:58:55:2d:08:7d:a9:
ea:cd:8d:0c:30:cf:2a:6f:56:5c:a1:c1:46:63:6b:
39:b3:57:ef:26:e5:39:71:f9:52:df:b0:0e:2a:96:
fa:85:83:17:0f:26:13:2f:de:18:93:b5:7e:93:b9:
7a:9b:b3:43:d3:23:63:d5:80:96:44:c2:3b:1e:85:
b2:0f:4b:e0:2e:9e:e0:ee:db:d6:1b:35:37:2d:37:
9d:66:24:e4:93:7d:fd:5b:d1:47:8b:17:26:a8:ed:
62:8a:d3:48:d8:89:14:3b:ca:53:83:1d:26:2c:f4:
9d:fc:37:e1:9c:b9:66:fe:39:12:7d:55:ea:68:04:
c5:c5:e0:ab:d1:4a:ab:b1:7a:04:f9:8f:97:5b:9a:
09:9d:6e:7f:8d:2d:bb:1d:62:3c:ba:26:81:b0:a0:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:2A:26:01:B3:35:9F:99:E5:7D:7F:2C:7A:44:FF:63:2E:0F:72:26
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/GyomAbM1n5nlfX8sekT_Yy4PciY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.146.0/24
151.241.166.0/24
151.242.160.0/22
151.242.236.0/24
151.245.174.0/24
151.246.128.0/24
151.247.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:7a:ae:f6:7d:b4:cc:42:07:38:1a:c8:30:95:0f:37:3c:42:
6e:c7:c5:ad:f2:58:b1:49:5c:0b:98:dc:6c:f9:24:34:f5:ba:
13:7d:82:36:b4:9e:c3:55:3e:bc:5b:01:50:76:ab:4e:d9:34:
c2:3b:06:1d:70:62:9f:34:b5:3e:8a:9f:52:01:c3:ec:a4:3f:
0c:c8:1c:2d:36:00:10:6d:08:c9:9f:3b:35:a4:e4:ab:d8:0b:
11:84:74:9c:83:af:fc:ee:b7:23:41:64:b6:1a:19:e6:41:d5:
79:dd:82:e1:7e:97:c7:a3:15:9f:ea:92:16:8e:bd:de:05:5b:
7c:62:18:05:91:4b:c5:8b:6b:2a:a6:70:f1:6e:0f:06:b7:c7:
06:20:fb:cf:36:a8:6a:da:af:fc:f5:9a:e5:96:be:44:b5:40:
a4:8d:14:c8:5f:fb:d0:af:f2:6a:79:e7:60:82:98:2b:ad:fc:
95:33:82:0c:c4:97:55:93:fa:55:d4:16:02:7d:b9:62:f1:b5:
b7:99:e0:fb:ce:5a:2d:56:6d:38:aa:b8:23:96:64:66:dd:69:
e0:a0:c6:d8:88:17:1f:76:53:77:f4:f0:88:6d:9e:43:46:79:
e1:68:b3:8e:f8:61:a3:22:f3:8d:63:14:4b:18:91:cf:47:57:
87:58:d1:da
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAaEVX5D57grpjgFooR157r61MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDA3MDc1OTA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYjJhMjYwMWIzMzU5Zjk5ZTU3ZDdmMmM3YTQ0ZmY2MzJlMGY3MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3o3mukg6YDdaT1H1WsdqA8bm9wOT
gI6w4RtRw/nOAq09knwVNbomL7kEm8ER8pnFqzObwoZlp+hqFQdDOnOSNq2TgzXz
qCwRj/Am6IjHRWp35ENjxus5QqVEp0IPtecvzQVYVS0IfanqzY0MMM8qb1ZcocFG
Y2s5s1fvJuU5cflS37AOKpb6hYMXDyYTL94Yk7V+k7l6m7ND0yNj1YCWRMI7HoWy
D0vgLp7g7tvWGzU3LTedZiTkk339W9FHixcmqO1iitNI2IkUO8pTgx0mLPSd/Dfh
nLlm/jkSfVXqaATFxeCr0UqrsXoE+Y+XW5oJnW5/jS27HWI8uiaBsKBpkwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFBsqJgGzNZ+Z5X1/LHpE/2MuD3ImMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvR3lvbUFiTTFuNW5sZlg4c2VrVF9ZeTRQY2lZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAl/CSAwQA
l/GmAwQCl/KgAwQAl/LsAwQAl/WuAwQAl/aAAwQAl/eoMA0GCSqGSIb3DQEBCwUA
A4IBAQCeeq72fbTMQgc4GsgwlQ83PEJux8Wt8lixSVwLmNxs+SQ09boTfYI2tJ7D
VT68WwFQdqtO2TTCOwYdcGKfNLU+ip9SAcPspD8MyBwtNgAQbQjJnzs1pOSr2AsR
hHScg6/87rcjQWS2GhnmQdV53YLhfpfHoxWf6pIWjr3eBVt8YhgFkUvFi2sqpnDx
bg8Gt8cGIPvPNqhq2q/89Zrllr5EtUCkjRTIX/vQr/JqeedggpgrrfyVM4IMxJdV
k/pV1BYCfbli8bW3meD7zlotVm04qrgjlmRm3WngoMbYiBcfdlN39PCIbZ5DRnnh
aLOO+GGjIvONYxRLGJHPR1eHWNHa
-----END CERTIFICATE-----
Generated at Sun Oct 18 09:31:54 2026 by rpki-client