Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jTdHd9imKBbnikA9OnfS1Vd7z6s.roa
File: jTdHd9imKBbnikA9OnfS1Vd7z6s.roa (raw, json)
Hash identifier: kHmorj/+CV38r0v5jhubGEtIxTBPyXgPt5yaW+t4wyQ=
Subject key identifier: 8D:37:47:77:D8:A6:28:16:E7:8A:40:3D:3A:77:D2:D5:57:7B:CF:AB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A01FE9C65A9C38C761674D0F1C018B6F0D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jTdHd9imKBbnikA9OnfS1Vd7z6s.roa
Signing time: Thu 20 Aug 2026 16:03:29 +0000
ROA not before: Thu 20 Aug 2026 16:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.144.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:e9:c6:5a:9c:38:c7:61:67:4d:0f:1c:01:8b:6f:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 16:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d374777d8a62816e78a403d3a77d2d5577bcfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a9:0a:55:90:d5:a1:c9:f7:d4:f1:b2:1a:e1:
56:93:92:6d:1e:7a:4d:86:60:8d:39:7a:fd:fa:69:
4a:e7:e2:2c:0a:57:f6:04:0e:d4:c6:c1:6a:55:e2:
2b:02:92:49:b5:68:3d:a3:26:a3:23:44:dd:f2:b5:
25:e7:10:da:1a:b1:64:f7:16:04:68:b0:81:0d:73:
40:67:a4:4a:f0:66:19:84:72:20:d9:2c:cc:49:f8:
85:ae:e3:92:61:92:86:e7:a8:7c:55:c5:71:40:60:
c3:07:9a:e6:2f:56:17:0b:08:97:5d:a0:d2:cb:dc:
b5:c3:14:3a:35:16:c5:00:51:9a:75:d3:8a:08:65:
a0:16:66:ee:e3:7c:c4:65:9e:86:87:77:52:5f:a8:
15:de:57:9f:5b:10:65:05:23:1e:62:c1:e0:af:4e:
18:9b:2c:e3:c4:ec:b4:72:14:56:23:33:20:52:7c:
d1:c4:39:f5:8f:aa:b4:d3:f4:6d:ac:47:e7:a4:30:
7a:4e:a3:96:0e:3e:f2:7c:cb:63:94:27:ba:bd:77:
b3:38:ed:a2:2b:fd:19:92:a4:94:79:ac:9c:30:a0:
a8:77:94:ba:9c:57:95:8c:16:45:48:8b:9a:ae:ab:
e8:e5:0a:f9:2b:c7:4d:00:66:e6:c3:4d:ff:97:f9:
ad:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:37:47:77:D8:A6:28:16:E7:8A:40:3D:3A:77:D2:D5:57:7B:CF:AB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/jTdHd9imKBbnikA9OnfS1Vd7z6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.123.0/24
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.144.0/24
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
73:82:a2:7f:d4:b6:ff:ca:0c:e5:7f:22:c5:ef:8e:9f:9f:05:
1b:78:fe:02:28:dd:aa:89:41:cb:c8:d6:75:12:c1:69:35:51:
af:7e:43:81:ca:9f:c3:0d:c8:5f:3c:a1:ce:1c:4d:1e:86:df:
24:ca:b3:c3:32:cb:ef:a2:38:b1:7d:21:69:30:d1:b2:98:a8:
9d:45:3b:04:a9:96:60:a3:16:14:97:29:3a:43:a7:dc:31:0f:
07:45:83:8f:13:d5:37:cc:2c:25:f1:de:40:58:f1:0e:78:be:
15:ab:0c:00:9f:20:a1:70:88:bf:8c:38:f8:61:34:a5:1a:a5:
72:0b:c1:e1:87:5e:60:1e:70:d4:6c:28:b5:ca:7d:a6:1e:78:
5a:fd:24:a4:51:51:9b:95:f9:34:6c:4d:1d:54:14:f1:91:0c:
f9:38:0e:99:12:d3:02:0f:0d:b5:89:4a:92:3c:ca:7b:f0:d7:
46:c2:b2:ea:ca:df:13:d5:fe:59:dc:c6:98:28:2f:0f:01:bb:
9d:63:64:eb:15:7e:78:ca:31:1d:be:0a:0c:cd:47:ac:ea:8b:
0a:aa:5a:cf:94:84:9c:e9:b5:70:49:64:c4:f5:af:dc:c5:f5:
c4:05:6b:c4:5c:ce:e1:2a:49:29:1c:20:87:04:a9:0d:b9:79:
f7:a5:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:53:08 2026 by rpki-client