Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M5I6AYfuLVHHLlxdfy0yZHzSv6U.roa
File: M5I6AYfuLVHHLlxdfy0yZHzSv6U.roa (raw, json)
Hash identifier: skfTTUU2VlHVdcCy9DKPxjMoLy9R+UKlGrkpS4V3nBY=
Subject key identifier: 33:92:3A:01:87:EE:2D:51:C7:2E:5C:5D:7F:2D:32:64:7C:D2:BF:A5
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5D930B88266576CE8447BB5AC85A70FE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M5I6AYfuLVHHLlxdfy0yZHzSv6U.roa
Signing time: Mon 25 May 2026 05:19:38 +0000
ROA not before: Mon 25 May 2026 05:19:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 151.240.150.0/24 maxlen: 24
151.243.167.0/24 maxlen: 24
151.244.38.0/24 maxlen: 24
151.244.52.0/24 maxlen: 24
151.244.66.0/24 maxlen: 24
151.244.67.0/24 maxlen: 24
151.244.118.0/24 maxlen: 24
151.244.221.0/24 maxlen: 24
151.245.108.0/24 maxlen: 24
151.246.226.0/24 maxlen: 24
151.246.249.0/24 maxlen: 24
151.247.27.0/24 maxlen: 24
151.247.92.0/24 maxlen: 24
151.247.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5d:93:0b:88:26:65:76:ce:84:47:bb:5a:c8:5a:70:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 25 05:19:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=33923a0187ee2d51c72e5c5d7f2d32647cd2bfa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:6b:0e:ba:5c:7f:59:b6:3b:40:30:fb:f7:1c:
18:70:c4:02:82:fe:ae:bf:a0:98:b3:07:f5:e7:1a:
5c:73:b1:71:41:aa:9d:ed:a6:f4:5f:ca:bb:7a:15:
4e:fd:27:d7:50:86:8d:c6:cd:8b:2b:47:86:4f:79:
ae:d3:d5:51:b9:f5:8e:34:7b:d8:2a:bd:f4:33:a8:
23:89:66:c1:4a:30:dc:41:dc:2b:13:51:81:c4:1d:
6a:6f:6f:7a:a7:d8:f4:76:b6:59:e5:a6:7f:82:8a:
7c:ae:8f:d9:81:e4:9e:06:69:fb:4d:5c:36:d0:bd:
b5:77:46:e5:fc:5e:e4:fc:1a:56:b1:fe:8c:15:7a:
45:c9:af:3d:a0:49:74:e4:de:ad:e4:11:57:c4:7e:
e0:a6:b1:21:92:e0:bb:ab:bc:92:7a:a9:ee:d6:4e:
57:2e:4b:02:a3:ce:fa:cc:94:eb:47:1e:50:52:88:
22:b4:5c:d0:ea:2f:af:c3:9f:4e:0a:aa:8e:ff:e6:
12:b4:82:6d:68:13:70:e0:7d:0a:cf:a3:6b:47:8f:
4d:90:47:8f:5f:77:96:4a:8c:4f:c3:6c:f7:08:5c:
2c:d8:bc:8e:56:15:de:4d:9a:62:19:39:c5:39:fe:
77:c9:6a:a9:d0:20:92:e6:42:97:97:d6:7f:08:90:
50:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:92:3A:01:87:EE:2D:51:C7:2E:5C:5D:7F:2D:32:64:7C:D2:BF:A5
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/M5I6AYfuLVHHLlxdfy0yZHzSv6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.150.0/24
151.243.167.0/24
151.244.38.0/24
151.244.52.0/24
151.244.66.0/23
151.244.118.0/24
151.244.221.0/24
151.245.108.0/24
151.246.226.0/24
151.246.249.0/24
151.247.27.0/24
151.247.92.0/24
151.247.151.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:a1:29:a1:1d:ab:aa:09:4e:90:a6:2c:19:a7:5d:9e:29:21:
3b:6f:bf:d0:45:20:a1:f1:32:59:c3:5d:0c:a2:31:8e:a8:5c:
c8:dc:79:82:df:ae:c8:7c:76:27:67:a7:3f:a4:68:de:83:58:
3d:06:bc:07:7f:61:39:dd:91:da:79:07:1f:86:ce:12:77:d5:
db:33:42:ab:a6:f3:d5:60:2f:d9:b0:d6:4e:fe:3d:f2:70:fa:
ad:8c:85:56:d9:d0:c7:af:4d:e1:0a:ca:38:74:0d:ee:88:48:
78:ba:08:fd:e6:72:4a:ca:6a:81:ed:e3:91:31:21:32:e1:63:
1c:e4:52:34:be:d3:4f:fa:db:92:82:a3:4e:b7:1f:dc:91:89:
61:c3:3f:ef:40:2b:32:81:75:27:26:b3:ac:ad:7c:0b:58:6f:
2c:bf:71:95:0a:a0:ba:4e:87:35:53:a9:d0:e8:58:ff:78:11:
c1:27:36:03:1c:ca:69:e7:6b:22:dd:3b:3c:ad:95:e1:d2:b4:
a0:1b:c2:8e:c1:80:53:e5:dd:0c:57:27:99:ff:b4:14:cd:2e:
e7:17:75:4c:b7:0a:07:37:89:07:e0:41:e5:69:d3:6b:7e:43:
50:1a:ae:3a:fe:65:ae:65:e5:15:1d:25:76:10:9e:77:af:ff:
03:c3:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:26:48 2026 by rpki-client