Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aDanW-dtBjbFovDY-ehnhuCC9Iw.roa
File: aDanW-dtBjbFovDY-ehnhuCC9Iw.roa (raw, json)
Hash identifier: wvAI7VSmEpj5lrAtvV8ywlRMrbvdH+xjQNmvAiuRgmU=
Subject key identifier: 68:36:A7:5B:E7:6D:06:36:C5:A2:F0:D8:F9:E8:67:86:E0:82:F4:8C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CB7AC521EB216D69213C03FD39252656D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aDanW-dtBjbFovDY-ehnhuCC9Iw.roa
Signing time: Wed 04 Mar 2026 07:07:29 +0000
ROA not before: Wed 04 Mar 2026 07:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:ac:52:1e:b2:16:d6:92:13:c0:3f:d3:92:52:65:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 4 07:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6836a75be76d0636c5a2f0d8f9e86786e082f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6a:b4:93:34:e6:20:75:3d:a6:9a:04:81:8a:
f1:39:a7:71:8f:c0:91:cb:a7:39:10:81:e8:b8:92:
36:8f:2e:e0:f8:66:f7:d9:ea:f0:80:20:8a:46:d9:
78:6c:2f:ea:3b:5b:02:19:43:7e:fa:f6:28:87:1b:
94:f4:ad:66:8c:76:62:fd:14:df:60:7b:13:32:1f:
fe:66:7b:05:9a:db:eb:52:09:17:6a:c9:53:1a:99:
26:c6:b8:fa:c4:4b:fc:3e:bb:b8:ab:2e:53:b1:8f:
ca:9d:fd:a5:ec:93:b7:46:ee:db:8a:ed:d5:3c:b9:
8c:ab:4c:b6:4f:ac:a1:2a:3e:c3:49:50:38:17:a5:
c5:80:a8:8b:24:e2:c1:4f:1a:bb:cb:7e:7c:f0:c5:
34:48:ce:ae:27:c4:ad:c5:5f:ec:0a:31:48:b7:4c:
bb:db:fb:e7:e1:71:34:3a:b0:fb:ff:45:a5:2e:64:
1a:9d:0b:0d:55:86:08:40:f5:49:53:dc:54:80:e9:
00:b4:6f:30:d9:15:a9:1f:27:71:9f:a7:87:1b:7e:
61:6e:ac:8a:12:cc:97:97:ad:1a:2e:4e:ed:d8:8f:
46:ea:ad:52:05:a9:3b:5a:c9:c5:03:6c:02:1c:76:
70:e8:22:f4:d8:31:1e:9b:12:49:95:d0:44:85:a4:
c1:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:36:A7:5B:E7:6D:06:36:C5:A2:F0:D8:F9:E8:67:86:E0:82:F4:8C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/aDanW-dtBjbFovDY-ehnhuCC9Iw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.240.24.0/24
151.241.8.0/24
151.241.68.0/24
151.242.103.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:f7:b0:82:54:ae:32:3b:dd:fb:1d:32:57:51:ed:7c:ea:49:
81:e8:54:f0:3a:33:31:cf:c7:cc:26:58:31:3f:c8:72:05:46:
ed:50:c7:d0:79:8a:38:fd:fa:bb:b5:97:8f:6c:3b:f1:a5:b8:
30:e2:9d:b4:10:88:44:8a:37:2a:b2:e0:a2:c4:f8:53:9d:04:
bb:b4:6b:3a:af:59:2f:c5:5d:c1:ce:20:ed:8d:82:5d:50:e5:
1c:b4:83:54:3e:48:14:f5:12:d1:af:bc:f4:18:98:c4:ed:d4:
5e:57:56:ff:ef:d5:59:52:17:74:a4:ee:66:86:bd:23:08:00:
30:0f:f8:cd:31:19:3d:fb:37:af:b8:58:ab:9a:f6:b3:4b:6b:
76:bc:ef:86:97:9e:25:61:26:21:94:8a:61:ec:64:9a:50:8e:
af:4b:10:bc:ec:5b:fd:dc:8e:94:6e:9a:47:81:40:30:52:75:
db:96:1c:5f:4b:be:eb:b2:2d:00:6e:bb:c3:61:74:83:0b:35:
b9:3b:80:35:03:e8:73:e1:54:7f:92:b1:ba:2a:a9:0f:9b:5e:
51:11:1a:d6:98:17:6e:be:c0:55:ab:6c:5a:5b:a5:87:ce:86:
de:73:a3:42:07:78:83:f9:ea:b2:b0:3c:e4:34:34:b9:7b:89:
31:f7:9e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:03:45 2026 by rpki-client