Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YjnhgnMogPo1XV2L9AXlKA0BKUg.roa
File: YjnhgnMogPo1XV2L9AXlKA0BKUg.roa (raw, json)
Hash identifier: 6VesW4hoRSh0a9ci+H3gq4APmUhpvFkvvxZzmvgkwG0=
Subject key identifier: 62:39:E1:82:73:28:80:FA:35:5D:5D:8B:F4:05:E5:28:0D:01:29:48
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1013017A6279153CD8155E0DFDFA2EB88
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YjnhgnMogPo1XV2L9AXlKA0BKUg.roa
Signing time: Sat 03 Oct 2026 09:54:51 +0000
ROA not before: Sat 03 Oct 2026 09:54:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139057
IP address blocks: 151.240.20.0/22 maxlen: 22
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.119.0/24 maxlen: 24
151.240.124.0/24 maxlen: 24
151.242.210.0/24 maxlen: 24
151.242.211.0/24 maxlen: 24
151.242.212.0/24 maxlen: 24
151.242.213.0/24 maxlen: 24
151.242.214.0/24 maxlen: 24
151.242.215.0/24 maxlen: 24
151.242.216.0/24 maxlen: 24
151.242.217.0/24 maxlen: 24
151.242.218.0/24 maxlen: 24
151.242.219.0/24 maxlen: 24
151.242.220.0/24 maxlen: 24
151.242.221.0/24 maxlen: 24
151.242.222.0/24 maxlen: 24
151.242.223.0/24 maxlen: 24
151.242.228.0/24 maxlen: 24
151.242.229.0/24 maxlen: 24
151.242.230.0/24 maxlen: 24
151.242.231.0/24 maxlen: 24
151.242.232.0/24 maxlen: 24
151.242.233.0/24 maxlen: 24
151.242.234.0/24 maxlen: 24
151.242.235.0/24 maxlen: 24
151.242.240.0/24 maxlen: 24
151.242.241.0/24 maxlen: 24
151.242.243.0/24 maxlen: 24
151.242.244.0/24 maxlen: 24
151.243.85.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.90.0/24 maxlen: 24
151.243.91.0/24 maxlen: 24
151.243.92.0/24 maxlen: 24
151.243.94.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 14:09:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:30:17:a6:27:91:53:cd:81:55:e0:df:df:a2:eb:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 3 09:54:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6239e182732880fa355d5d8bf405e5280d012948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:14:5a:ca:1f:b4:db:8e:46:29:b8:6b:78:c3:
d7:82:67:72:f6:da:31:c1:6f:94:85:0c:35:d6:dc:
1c:74:ca:ab:48:4e:36:69:d0:f3:a4:90:9d:f9:dc:
f0:c5:8a:62:63:0a:11:ee:4b:b9:93:08:e4:e8:74:
1f:6c:78:29:71:a4:46:9a:43:91:f6:bb:19:3b:29:
20:3a:c5:db:bb:08:48:a4:c3:85:15:fc:f7:74:d0:
c6:71:5b:f4:ec:f1:73:33:8b:d4:3f:36:05:1c:35:
88:36:01:50:ec:0a:c2:14:b0:c6:d6:cd:a6:a0:d3:
ac:38:f4:cb:6f:86:09:d1:55:99:43:42:a9:fc:76:
ee:cc:36:21:8b:72:2a:8b:99:f2:07:c5:95:dd:6a:
ec:ed:ca:d0:25:40:85:e0:bf:ad:de:4b:6e:f5:7a:
d3:6a:c5:05:9f:ad:b8:f8:7d:e2:24:25:7e:99:52:
4b:1f:13:90:db:63:2f:78:c9:4e:08:76:9e:78:4c:
69:51:87:11:a0:6c:be:f2:16:3b:d7:73:92:96:7d:
80:5f:41:b4:59:e0:2c:a8:c5:18:f5:fd:8f:6f:f4:
46:33:e3:3f:a8:2c:f4:11:88:54:33:1c:f4:cd:7c:
48:1e:31:81:fa:4c:75:8b:b6:bc:b1:9c:a5:d6:8c:
29:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:39:E1:82:73:28:80:FA:35:5D:5D:8B:F4:05:E5:28:0D:01:29:48
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YjnhgnMogPo1XV2L9AXlKA0BKUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.20.0/22
151.240.29.0/24
151.240.31.0/24
151.240.68.0-151.240.72.255
151.240.74.0/23
151.240.78.0-151.240.82.255
151.240.84.0-151.240.86.255
151.240.96.0/24
151.240.99.0/24
151.240.119.0/24
151.240.124.0/24
151.242.210.0-151.242.223.255
151.242.228.0-151.242.235.255
151.242.240.0/23
151.242.243.0-151.242.244.255
151.243.85.0/24
151.243.89.0-151.243.92.255
151.243.94.0/24
151.243.96.0/24
151.243.99.0/24
151.243.110.0/24
Signature Algorithm: sha256WithRSAEncryption
41:f9:ef:e6:65:ca:ae:62:c0:68:74:f1:be:1f:be:82:cd:17:
9f:98:90:95:6a:0a:ab:ae:c3:b2:7c:5e:2d:4e:51:ed:16:a4:
20:5f:b2:d9:ab:29:58:a2:ca:cf:be:11:2c:1a:ff:e6:55:d8:
29:82:62:e2:15:c2:0c:95:fe:fe:4e:b9:fc:2b:fc:a3:2e:04:
50:2b:c5:71:3f:ad:3a:45:6a:46:8e:6c:8f:85:99:d4:76:02:
2e:11:48:ee:3d:fe:fe:2c:1e:69:0a:9c:0e:79:2b:b0:40:01:
81:07:0b:08:13:fc:f1:1c:02:67:0f:12:a8:0c:93:ca:de:0d:
30:57:96:f3:42:1e:d3:68:ac:48:08:f7:0f:eb:35:e3:25:04:
52:e6:15:c8:54:b5:73:48:e4:41:fe:01:db:ca:1a:a3:81:64:
ce:22:9a:05:cb:ce:ac:a4:ee:65:20:9a:d7:d8:d3:ad:72:7d:
27:33:8b:ed:93:55:38:e8:34:34:6e:fc:cb:5e:36:2c:e3:a0:
a8:e6:28:a1:6c:98:b1:06:5e:86:dd:58:9c:6b:ed:97:dc:64:
23:48:50:ac:c5:5e:3d:c6:58:7c:79:57:0a:0e:e7:73:c9:0d:
b1:49:60:4d:fd:d7:97:dc:96:78:df:d8:c3:9a:71:fd:ae:83:
6e:4b:91:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:44:29 2026 by rpki-client