Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VFPfgzLoE-he1OAfv1_PlrL_Dyo.roa
File: VFPfgzLoE-he1OAfv1_PlrL_Dyo.roa (raw, json)
Hash identifier: DgLL1tYTexiQx1h4wJpNIScwRzynRRtEdgOn4NHrPhc=
Subject key identifier: 54:53:DF:83:32:E8:13:E8:5E:D4:E0:1F:BF:5F:CF:96:B2:FF:0F:2A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0D3CD35ABA8E2E75E4903D03D01EA20EB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VFPfgzLoE-he1OAfv1_PlrL_Dyo.roa
Signing time: Thu 24 Sep 2026 14:23:56 +0000
ROA not before: Thu 24 Sep 2026 14:23:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 151.241.109.0/24 maxlen: 24
151.241.155.0/24 maxlen: 24
151.241.215.0/24 maxlen: 24
151.241.216.0/24 maxlen: 24
151.241.217.0/24 maxlen: 24
151.241.221.0/24 maxlen: 24
151.241.226.0/24 maxlen: 24
151.241.227.0/24 maxlen: 24
151.241.228.0/24 maxlen: 24
151.241.229.0/24 maxlen: 24
151.241.234.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.145.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.176.0/24 maxlen: 24
151.243.177.0/24 maxlen: 24
151.243.180.0/24 maxlen: 24
151.243.181.0/24 maxlen: 24
151.243.182.0/24 maxlen: 24
151.243.190.0/24 maxlen: 24
151.243.191.0/24 maxlen: 24
151.243.196.0/24 maxlen: 24
151.243.198.0/23 maxlen: 24
151.243.198.0/24 maxlen: 24
151.243.199.0/24 maxlen: 24
151.243.208.0/24 maxlen: 24
151.243.209.0/24 maxlen: 24
151.243.212.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.224.0/24 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.244.243.0/24 maxlen: 24
151.244.246.0/24 maxlen: 24
151.244.251.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
151.245.136.0/24 maxlen: 24
151.245.137.0/24 maxlen: 24
151.245.139.0/24 maxlen: 24
151.245.140.0/24 maxlen: 24
151.245.216.0/24 maxlen: 24
151.245.217.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.208.0/24 maxlen: 24
151.247.209.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:cd:35:ab:a8:e2:e7:5e:49:03:d0:3d:01:ea:20:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 24 14:23:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5453df8332e813e85ed4e01fbf5fcf96b2ff0f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e4:75:08:6b:7f:ee:08:a3:90:cc:6f:aa:e3:
bd:1a:96:c0:7b:2e:ae:68:c0:4d:09:14:38:d8:ff:
9a:8b:75:96:6d:82:b2:47:97:12:2e:cb:b0:15:4a:
9d:4d:cf:f3:32:f6:10:c7:7e:ae:ac:29:ad:e3:9e:
cd:c5:06:5d:73:bf:42:03:14:4c:a7:9d:5b:b1:2a:
be:bb:2e:03:f2:5c:f8:e2:e7:17:06:02:76:9d:ee:
6e:e1:40:8f:78:a2:69:32:da:87:82:ff:58:09:27:
66:bd:8b:97:7b:ff:86:18:a8:4a:6f:cd:c3:5b:8c:
ee:e1:8b:86:c5:27:4b:27:6b:bf:a6:c5:96:f6:c0:
39:de:68:42:c4:3c:b1:4d:77:65:d0:83:a9:55:5d:
0b:1b:0e:9c:7f:93:96:b2:1e:2b:28:0b:22:c3:91:
ec:42:9c:16:0f:02:45:bd:5b:0d:1f:03:38:b7:98:
56:0f:6a:1f:3c:3a:52:d5:3f:21:0a:20:2e:b4:ee:
6d:40:f2:dc:61:97:0a:a9:8a:5e:1a:61:e6:ee:c8:
f0:58:a1:c4:ee:84:15:42:8a:e0:52:9e:9e:99:b2:
e0:72:6d:ba:14:3f:07:0f:51:fd:21:06:54:90:a5:
bf:aa:3b:bb:8f:e9:d7:9f:b9:52:e3:d6:bf:ef:d4:
7a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:53:DF:83:32:E8:13:E8:5E:D4:E0:1F:BF:5F:CF:96:B2:FF:0F:2A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/VFPfgzLoE-he1OAfv1_PlrL_Dyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.109.0/24
151.241.155.0/24
151.241.215.0-151.241.217.255
151.241.221.0/24
151.241.226.0-151.241.229.255
151.241.234.0/24
151.242.88.0/24
151.243.3.0/24
151.243.145.0/24
151.243.169.0/24
151.243.171.0/24
151.243.173.0/24
151.243.176.0/23
151.243.180.0-151.243.182.255
151.243.190.0/23
151.243.196.0/24
151.243.198.0/23
151.243.208.0/23
151.243.212.0/24
151.243.217.0/24
151.243.224.0/23
151.243.232.0/24
151.243.245.0/24
151.243.247.0/24
151.244.243.0/24
151.244.246.0/24
151.244.251.0/24
151.244.253.0/24
151.245.92.0/24
151.245.136.0/23
151.245.139.0-151.245.140.255
151.245.216.0/23
151.247.196.0/23
151.247.208.0/23
151.247.219.0/24
Signature Algorithm: sha256WithRSAEncryption
08:96:a5:0d:e6:77:0c:d1:5f:c7:2d:68:2a:cf:9c:1b:8b:bf:
b8:49:03:67:e1:9f:19:ef:96:c2:a9:f8:ff:2c:c9:3f:47:33:
69:62:09:52:6b:b3:91:86:af:29:6c:0f:6d:d9:3b:2c:6c:69:
82:93:76:24:84:6e:bc:65:56:8c:77:b6:6f:08:63:80:7a:1d:
1b:38:91:0d:27:93:10:8b:49:c9:48:35:40:2d:0e:55:19:22:
ea:d7:ca:02:a3:6a:6d:9d:ae:0c:96:a6:c0:cf:4b:c4:5f:c2:
78:5a:3e:16:3b:0a:1f:c5:98:cc:8d:f6:d5:6f:5b:d2:e9:76:
db:57:35:ad:bc:4c:13:4c:1b:4d:a6:81:fa:21:c7:90:2a:b4:
c6:7e:a7:d9:ee:5e:ee:8a:e2:81:1a:c6:c1:76:8a:8e:ef:56:
b6:62:fd:7d:ec:87:4e:75:2f:b9:9b:bd:1a:5c:33:b2:35:0d:
0b:39:d5:de:38:52:5b:c8:d7:a4:da:b9:d4:18:9a:88:7a:68:
d0:b7:be:29:f6:a2:40:61:b7:21:f6:bf:c7:8d:ff:97:22:db:
b1:4c:fc:c4:ed:22:21:d0:21:79:80:ec:df:3d:fb:30:b0:81:
2e:53:7f:58:80:0e:b5:c0:a5:33:f5:39:22:4f:a7:9c:52:3a:
d8:e7:26:ee
-----BEGIN CERTIFICATE-----
MIIF7zCCBNegAwIBAgISAaDTzTWrqOLnXkkD0D0B6iDrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTI0MTQyMzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NDUzZGY4MzMyZTgxM2U4NWVkNGUwMWZiZjVmY2Y5NmIyZmYwZjJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+R1CGt/7gijkMxvquO9GpbAey6u
aMBNCRQ42P+ai3WWbYKyR5cSLsuwFUqdTc/zMvYQx36urCmt457NxQZdc79CAxRM
p51bsSq+uy4D8lz44ucXBgJ2ne5u4UCPeKJpMtqHgv9YCSdmvYuXe/+GGKhKb83D
W4zu4YuGxSdLJ2u/psWW9sA53mhCxDyxTXdl0IOpVV0LGw6cf5OWsh4rKAsiw5Hs
QpwWDwJFvVsNHwM4t5hWD2ofPDpS1T8hCiAutO5tQPLcYZcKqYpeGmHm7sjwWKHE
7oQVQorgUp6embLgcm26FD8HD1H9IQZUkKW/qju7j+nXn7lS49a/79R67wIDAQAB
o4IC+zCCAvcwHQYDVR0OBBYEFFRT34My6BPoXtTgH79fz5ay/w8qMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVkZQZmd6TG9FLWhlMU9BZnYxX1BsckxfRHlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBDwYIKwYBBQUHAQcBAf8Egf8wgfwwgfkEAgABMIHyAwQA
l/FtAwQAl/GbMAwDBACX8dcDBAGX8dgDBACX8d0wDAMEAZfx4gMEAZfx5AMEAJfx
6gMEAJfyWAMEAJfzAwMEAJfzkQMEAJfzqQMEAJfzqwMEAJfzrQMEAZfzsDAMAwQC
l/O0AwQAl/O2AwQBl/O+AwQAl/PEAwQBl/PGAwQBl/PQAwQAl/PUAwQAl/PZAwQB
l/PgAwQAl/PoAwQAl/P1AwQAl/P3AwQAl/TzAwQAl/T2AwQAl/T7AwQAl/T9AwQA
l/VcAwQBl/WIMAwDBACX9YsDBACX9YwDBAGX9dgDBAGX98QDBAGX99ADBACX99sw
DQYJKoZIhvcNAQELBQADggEBAAiWpQ3mdwzRX8ctaCrPnBuLv7hJA2fhnxnvlsKp
+P8syT9HM2liCVJrs5GGrylsD23ZOyxsaYKTdiSEbrxlVox3tm8IY4B6HRs4kQ0n
kxCLSclINUAtDlUZIurXygKjam2drgyWpsDPS8RfwnhaPhY7Ch/FmMyN9tVvW9Lp
dttXNa28TBNMG02mgfohx5AqtMZ+p9nuXu6K4oEaxsF2io7vVrZi/X3sh051L7mb
vRpcM7I1DQs51d44UlvI16TaudQYmoh6aNC3vin2okBhtyH2v8eN/5ci27FM/MTt
IiHQIXmA7N89+zCwgS5Tf1iADrXApTP1OSJPp5xSOtjnJu4=
-----END CERTIFICATE-----
Generated at Sun Oct 4 10:23:10 2026 by rpki-client