Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W6g5yh5Vur51Nsn2kKguT8jpH0U.roa
File: W6g5yh5Vur51Nsn2kKguT8jpH0U.roa (raw, json)
Hash identifier: RJQE5BnJ7UOx2Pc9rWb+nclSxvv06LODKJL9pe9Pwnk=
Subject key identifier: 5B:A8:39:CA:1E:55:BA:BE:75:36:C9:F6:90:A8:2E:4F:C8:E9:1F:45
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DC308372824DA865240C3F33BC79E3A92
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W6g5yh5Vur51Nsn2kKguT8jpH0U.roa
Signing time: Sat 25 Apr 2026 05:06:28 +0000
ROA not before: Sat 25 Apr 2026 05:06:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.166.0/24 maxlen: 24
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.205.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 14:21:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c3:08:37:28:24:da:86:52:40:c3:f3:3b:c7:9e:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 25 05:06:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5ba839ca1e55babe7536c9f690a82e4fc8e91f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:18:b9:79:ea:d7:66:3a:e7:b7:f2:7f:b6:5f:
76:31:d6:36:b9:33:87:ac:25:a7:f5:20:bd:65:d6:
8c:82:f5:fc:68:a1:37:fe:6b:cc:1e:64:bf:c1:e3:
0b:67:25:27:c7:d0:96:d0:26:3b:5c:15:bb:84:53:
fd:50:c3:6b:c5:77:c6:78:9a:ea:8e:bf:10:c5:cf:
e7:bc:8b:3a:38:0c:c4:27:37:00:46:d8:3c:29:90:
37:d2:a3:e0:3b:12:b2:ef:bb:d9:32:64:3a:4a:6a:
b8:18:25:b4:50:4c:53:82:b5:3a:b0:4a:1c:b9:24:
33:01:1a:68:82:f2:46:a0:bb:1a:73:9e:b6:02:e1:
74:34:41:6d:d3:66:dc:f7:91:4c:07:fa:1b:61:d7:
77:18:a4:78:fa:3d:ab:7d:fa:83:a2:f8:e9:29:0f:
fe:eb:e1:52:5e:68:7b:fc:da:70:3e:c7:40:ad:d8:
6f:d6:86:aa:a8:42:e7:27:43:7f:2e:a8:9c:d7:1e:
7a:4c:c3:e8:89:5f:24:d6:a0:79:1d:85:06:1e:34:
92:67:18:d7:1d:8a:12:fc:92:ce:23:5d:f1:1f:a0:
9a:ee:5c:3c:de:0f:7b:dc:ac:24:03:01:a3:4d:75:
de:49:17:c1:c8:c3:22:a9:ce:07:17:04:01:fe:59:
64:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:39:CA:1E:55:BA:BE:75:36:C9:F6:90:A8:2E:4F:C8:E9:1F:45
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W6g5yh5Vur51Nsn2kKguT8jpH0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.240.24.0/24
151.241.68.0/24
151.242.59.0/24
151.242.103.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.243.166.0/24
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.15.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.205.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:a2:de:6f:1b:b4:d3:b9:53:46:03:b3:ff:68:ac:2e:90:62:
38:cc:79:b2:8e:17:4d:83:8a:ba:bd:8f:19:ce:cd:5a:63:a5:
a8:67:4a:45:6c:b8:55:c4:f3:36:35:90:93:27:a5:8c:20:2a:
9b:b0:bd:62:d0:7d:4d:88:1f:e3:14:cb:f3:d2:ab:6a:75:69:
6e:24:b6:62:6f:e3:13:15:7a:90:79:4c:44:18:4d:67:dd:46:
75:d0:f5:d7:29:74:20:6e:5b:4f:e6:ed:50:61:16:d6:1f:f1:
89:91:0d:26:0d:00:26:3e:8b:7d:ff:23:f1:c8:a1:fa:59:01:
70:5d:e6:5b:6a:80:15:c8:c1:95:6a:c3:10:2c:9b:89:49:5a:
79:05:61:c1:82:49:e8:e7:a6:7e:88:88:f8:d2:48:9f:96:2a:
16:9f:b3:73:42:e7:11:07:05:09:8b:2e:3d:e9:0e:a8:d3:12:
ea:39:73:1e:8f:c7:0f:d5:48:80:bc:46:48:d6:af:65:34:79:
00:a4:30:e2:ea:be:fe:da:06:59:b7:a0:5f:57:c6:22:fb:fd:
f3:39:47:0a:16:4f:93:5a:5d:48:a9:f8:72:6d:62:55:86:3a:
19:ab:7d:ec:9b:2f:fc:04:fe:77:6a:e5:1d:81:7f:5e:a6:3d:
5a:07:b9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 17:26:22 2026 by rpki-client