Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U5hPUi1BS0Y4DL_6D8gm7VVaUwc.roa
File: U5hPUi1BS0Y4DL_6D8gm7VVaUwc.roa (raw, json)
Hash identifier: BWf4TcSOwu4SUTCNCSdLMwDlTuZoK2jKADwDNWibnUk=
Subject key identifier: 53:98:4F:52:2D:41:4B:46:38:0C:BF:FA:0F:C8:26:ED:55:5A:53:07
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08051D5DF358775609437A82AC023988E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U5hPUi1BS0Y4DL_6D8gm7VVaUwc.roa
Signing time: Tue 08 Sep 2026 09:20:41 +0000
ROA not before: Tue 08 Sep 2026 09:20:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.240.0.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.148.0/24 maxlen: 24
151.241.150.0/24 maxlen: 24
151.241.157.0/24 maxlen: 24
151.241.220.0/24 maxlen: 24
151.242.1.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.157.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.49.0/24 maxlen: 24
151.243.51.0/24 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.114.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.136.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.142.0/24 maxlen: 24
151.244.162.0/24 maxlen: 24
151.244.178.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.245.29.0/24 maxlen: 24
151.245.38.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.48.0/24 maxlen: 24
151.245.52.0/24 maxlen: 24
151.245.60.0/24 maxlen: 24
151.245.61.0/24 maxlen: 24
151.245.63.0/24 maxlen: 24
151.245.65.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.91.0/24 maxlen: 24
151.245.102.0/24 maxlen: 24
151.245.109.0/24 maxlen: 24
151.245.120.0/24 maxlen: 24
151.245.138.0/24 maxlen: 24
151.245.141.0/24 maxlen: 24
151.245.146.0/24 maxlen: 24
151.245.148.0/24 maxlen: 24
151.245.162.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.170.0/24 maxlen: 24
151.245.226.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.246.132.0/24 maxlen: 24
151.246.133.0/24 maxlen: 24
151.246.134.0/24 maxlen: 24
151.246.135.0/24 maxlen: 24
151.246.179.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
151.246.222.0/24 maxlen: 24
151.246.248.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:51:d5:df:35:87:75:60:94:37:a8:2a:c0:23:98:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 09:20:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53984f522d414b46380cbffa0fc826ed555a5307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:e4:23:7c:60:3c:a0:0d:f1:e2:86:94:ca:
ed:82:fb:ea:e3:19:88:fb:26:fa:1d:98:81:b0:26:
9a:0e:a6:ee:cd:5b:f0:67:90:7f:1d:21:37:f4:bd:
ca:7c:12:59:36:58:c6:69:98:54:28:ce:93:f1:2b:
ac:72:7f:94:6f:9d:94:a2:58:a0:97:88:5a:fd:6a:
2a:c7:f7:7c:39:06:c1:69:21:dc:4c:52:91:f8:4b:
c3:c1:69:ae:f2:c7:aa:17:96:4f:1c:e1:9a:32:5f:
da:ff:9e:17:66:24:12:de:37:a4:2a:7e:da:54:8a:
e8:a7:34:a5:72:ec:fc:5b:b9:a6:23:6a:5b:0d:5d:
b3:b2:97:06:42:a4:98:2a:6a:bc:d1:dc:18:81:d3:
88:75:02:62:38:4c:f1:99:a8:bd:e0:ef:71:dd:f9:
4d:dc:f1:1e:ca:34:bf:06:81:78:90:b2:5e:b4:b5:
e7:71:5f:f0:be:40:4e:ca:c6:c6:37:15:9f:54:50:
7a:f0:f3:e0:47:c0:6b:89:6b:bb:b2:c7:82:1d:67:
b2:02:98:c3:a6:cf:ca:e8:7c:44:49:68:d4:4c:5c:
c4:63:ff:2d:9d:3c:f9:5b:ee:e7:98:a0:41:01:9c:
70:17:09:63:f7:df:f1:fc:0d:d3:65:cc:91:42:05:
ab:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:98:4F:52:2D:41:4B:46:38:0C:BF:FA:0F:C8:26:ED:55:5A:53:07
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/U5hPUi1BS0Y4DL_6D8gm7VVaUwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0/24
151.240.5.0-151.240.6.255
151.240.133.0/24
151.241.1.0/24
151.241.25.0/24
151.241.148.0/24
151.241.150.0/24
151.241.157.0/24
151.241.220.0/24
151.242.1.0/24
151.242.7.0/24
151.242.12.0/24
151.242.14.0/24
151.242.59.0/24
151.242.77.0/24
151.242.119.0/24
151.242.157.0/24
151.243.21.0/24
151.243.47.0/24
151.243.49.0/24
151.243.51.0/24
151.243.57.0/24
151.243.60.0/23
151.243.88.0/24
151.243.114.0/24
151.243.120.0/24
151.243.136.0/24
151.244.105.0/24
151.244.142.0/24
151.244.162.0/24
151.244.178.0/24
151.244.236.0/24
151.245.29.0/24
151.245.38.0/24
151.245.40.0/24
151.245.48.0/24
151.245.52.0/24
151.245.60.0/23
151.245.63.0/24
151.245.65.0/24
151.245.68.0/24
151.245.91.0/24
151.245.102.0/24
151.245.109.0/24
151.245.120.0/24
151.245.138.0/24
151.245.141.0/24
151.245.146.0/24
151.245.148.0/24
151.245.162.0/24
151.245.166.0/24
151.245.170.0/24
151.245.226.0/24
151.245.241.0/24
151.246.132.0/22
151.246.179.0-151.246.180.255
151.246.222.0/24
151.246.248.0/24
151.247.45.0/24
151.247.89.0/24
151.247.108.0/24
151.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5b:25:0e:83:4a:5b:c9:1a:98:61:d7:b4:68:67:91:31:4c:
33:16:c9:89:2a:e0:13:68:ce:45:c5:ec:df:74:8f:88:21:e9:
36:01:c3:1d:15:88:42:e3:c4:cb:55:45:77:a9:77:96:1e:c7:
6d:da:7a:8e:de:f5:1e:2c:fe:2c:ee:e3:dc:6e:4c:09:90:09:
ea:b5:0c:7c:f8:f8:e6:d3:a3:d2:e7:6f:a3:b4:78:05:30:e2:
e8:02:86:7d:1d:2b:69:13:c8:f8:a6:5e:54:8e:7f:29:e2:50:
f9:1f:55:75:03:bc:b1:31:ae:3c:a0:64:cb:de:eb:68:aa:65:
16:e8:cc:6a:b6:5f:3a:99:cb:20:d9:ef:44:a3:5d:13:b4:4e:
22:cd:47:33:3c:17:db:bb:a6:16:0d:c9:8d:da:0b:b9:c3:c6:
6a:e7:d9:6f:59:36:13:84:87:e1:0d:79:7f:b8:cd:e7:ed:0c:
5f:7d:68:bc:6b:23:51:39:0c:de:a3:c5:d6:ad:4c:42:38:9f:
7e:15:68:ce:8f:b2:f4:31:2a:10:70:4d:f2:ab:1c:58:28:18:
3c:fe:e9:4b:39:ab:82:47:aa:97:b5:24:ea:93:b5:ac:b9:94:
e4:5a:2a:a0:e7:56:fb:90:4a:a5:40:53:dc:fe:09:71:9e:0a:
56:08:59:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:29:54 2026 by rpki-client