Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kSzQ8kgg984He9ieYkX_AeHOOhc.roa
File: kSzQ8kgg984He9ieYkX_AeHOOhc.roa (raw, json)
Hash identifier: d/Sc8wCWP1LeeFcSz4u82nk093TknSLuwjxY9/DPWb4=
Subject key identifier: 91:2C:D0:F2:48:20:F7:CE:07:7B:D8:9E:62:45:FF:01:E1:CE:3A:17
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E5FA34DD2C9668832C543D97110CE09D3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kSzQ8kgg984He9ieYkX_AeHOOhc.roa
Signing time: Mon 25 May 2026 14:56:38 +0000
ROA not before: Mon 25 May 2026 14:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 151.240.43.0/24 maxlen: 24
151.240.44.0/24 maxlen: 24
151.240.46.0/24 maxlen: 24
151.240.47.0/24 maxlen: 24
151.240.48.0/24 maxlen: 24
151.240.49.0/24 maxlen: 24
151.240.50.0/24 maxlen: 24
151.240.51.0/24 maxlen: 24
151.240.52.0/24 maxlen: 24
151.240.53.0/24 maxlen: 24
151.240.54.0/24 maxlen: 24
151.240.55.0/24 maxlen: 24
151.240.56.0/24 maxlen: 24
151.240.57.0/24 maxlen: 24
151.240.58.0/24 maxlen: 24
151.240.59.0/24 maxlen: 24
151.240.62.0/24 maxlen: 24
151.240.63.0/24 maxlen: 24
151.240.64.0/24 maxlen: 24
151.240.65.0/24 maxlen: 24
151.240.66.0/24 maxlen: 24
151.240.67.0/24 maxlen: 24
151.240.91.0/24 maxlen: 24
151.240.92.0/24 maxlen: 24
151.240.93.0/24 maxlen: 24
151.240.94.0/24 maxlen: 24
151.240.95.0/24 maxlen: 24
151.240.101.0/24 maxlen: 24
151.240.102.0/24 maxlen: 24
151.240.103.0/24 maxlen: 24
151.240.104.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.106.0/24 maxlen: 24
151.240.107.0/24 maxlen: 24
151.240.108.0/24 maxlen: 24
151.240.109.0/24 maxlen: 24
151.240.111.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.247.119.0/24 maxlen: 24
151.247.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:a3:4d:d2:c9:66:88:32:c5:43:d9:71:10:ce:09:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 25 14:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=912cd0f24820f7ce077bd89e6245ff01e1ce3a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:da:db:d5:e3:c5:70:e8:e9:48:c0:e9:9c:70:
25:61:88:62:41:4c:7b:79:b2:f4:78:76:70:e0:69:
19:72:2d:03:7a:c7:d0:b4:2e:cf:9c:22:4c:c9:f0:
cd:14:35:c7:66:48:0a:64:15:d2:a0:b3:12:54:e9:
fb:9c:69:0d:44:cf:6a:71:51:bf:f9:b9:2d:ae:ec:
8b:5f:ed:da:16:f8:ea:2d:6a:15:8a:06:68:e1:d7:
fa:26:32:4d:b8:d5:b8:34:94:1d:4d:9f:be:82:25:
bc:fe:5b:3b:cc:0e:2e:7c:c5:ff:00:e7:f4:28:b5:
a3:ed:77:c4:6e:27:f0:ff:f6:6e:5d:02:68:54:d0:
d6:15:c7:e0:b2:ec:4c:20:fc:67:79:61:9c:47:74:
5d:78:86:c5:d4:52:f7:11:6a:c8:ae:0f:8e:3d:bd:
94:72:4b:34:08:c3:96:0e:a0:08:30:9e:28:58:55:
2e:d5:5e:67:47:8d:5b:ad:5b:99:d4:e0:ca:0a:ee:
c3:d5:b5:24:f8:08:ce:19:79:22:6c:45:e7:ed:44:
f7:5f:6a:0d:04:34:63:ca:a5:98:1e:7c:8d:4d:e3:
3a:d4:ff:38:42:80:17:96:19:fd:77:9b:2f:4d:ba:
a9:94:e1:83:4a:3c:91:d0:94:f7:c4:6e:2e:1d:9e:
45:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:D0:F2:48:20:F7:CE:07:7B:D8:9E:62:45:FF:01:E1:CE:3A:17
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kSzQ8kgg984He9ieYkX_AeHOOhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.43.0-151.240.44.255
151.240.46.0-151.240.59.255
151.240.62.0-151.240.67.255
151.240.91.0-151.240.95.255
151.240.101.0-151.240.109.255
151.240.111.0/24
151.244.58.0/24
151.247.119.0/24
151.247.167.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:2e:16:0a:cd:f4:e2:4d:8b:e5:b5:17:8d:c9:e2:d4:6e:5d:
66:8c:f2:6b:e1:60:98:5c:4c:16:c8:75:9c:c1:3d:31:84:e6:
7c:d0:34:c8:1b:5d:74:7f:a0:5f:02:80:47:08:91:e8:81:65:
59:85:73:f0:16:cb:18:97:ca:29:93:75:43:9e:7a:56:99:d8:
63:8d:e3:b2:38:55:0c:2e:dc:38:01:19:58:2e:bc:36:f2:ef:
eb:cd:45:01:ff:1f:df:5c:bc:32:57:ba:fe:f7:a7:db:f7:04:
5c:17:88:d7:bd:8d:13:6d:d1:c6:1a:ec:9a:6f:ac:36:03:c1:
80:c2:ae:3f:70:ad:23:a5:2d:6a:06:d6:33:34:7b:0f:e8:b8:
7c:11:05:0b:6b:b4:85:f8:13:e9:3a:4e:c5:42:1c:4e:52:83:
b7:2f:1c:60:b8:d5:98:8f:46:fc:c8:5b:1c:e7:7f:18:f5:79:
a5:4c:25:37:4d:60:36:cc:12:e8:2b:46:98:31:bd:c7:a3:63:
45:29:c4:b5:3b:cd:a0:f9:90:e7:39:95:ae:b7:49:5b:7c:5b:
69:65:c6:cf:3e:28:43:8c:eb:2e:35:67:16:8f:ff:4a:08:ad:
1d:aa:00:8e:69:14:b2:db:cc:a9:07:63:5d:0a:45:d4:a1:e4:
92:15:20:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:08:26 2026 by rpki-client