Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kx5Q29jQxspVe7liS2L9FT6CSbI.roa
File: kx5Q29jQxspVe7liS2L9FT6CSbI.roa (raw, json)
Hash identifier: 7DWpfta82NYooL2EUFKWSsof4Sei2ZJEEtC9Sbmh8U8=
Subject key identifier: 93:1E:50:DB:D8:D0:C6:CA:55:7B:B9:62:4B:62:FD:15:3E:82:49:B2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F1CA4964F49B0F14971D616104AE14C16
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kx5Q29jQxspVe7liS2L9FT6CSbI.roa
Signing time: Wed 01 Jul 2026 07:46:16 +0000
ROA not before: Wed 01 Jul 2026 07:46:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 151.240.11.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.6.0/24 maxlen: 24
151.244.36.0/24 maxlen: 24
151.244.55.0/24 maxlen: 24
151.244.60.0/24 maxlen: 24
151.244.107.0/24 maxlen: 24
151.244.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:a4:96:4f:49:b0:f1:49:71:d6:16:10:4a:e1:4c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 1 07:46:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=931e50dbd8d0c6ca557bb9624b62fd153e8249b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:51:bb:f1:54:a9:82:c6:2b:34:ce:21:11:fa:
71:45:8c:6c:6c:b7:26:ec:4a:bf:2e:dc:b7:50:53:
81:7b:d6:ef:33:e5:e0:66:d4:04:5c:77:9c:2b:34:
e6:07:8b:99:dd:3a:2a:f6:da:83:73:28:cb:32:c6:
d8:d8:79:d0:3b:f5:24:be:d4:13:f6:4f:57:45:16:
58:e4:6a:40:fe:c3:15:b7:75:9e:9d:f3:96:1e:6b:
84:07:be:89:b2:75:b1:1f:6d:c0:96:e2:65:cd:ad:
d6:12:8a:99:2a:41:b6:4b:28:01:a4:32:11:a7:58:
46:30:9b:8a:f7:ce:a5:a6:18:51:02:a0:8a:f6:8d:
00:81:d0:a6:67:cc:c0:7c:f4:53:5d:73:8d:1c:b4:
d1:63:47:c2:e4:fb:67:69:dc:3e:f8:a3:20:6e:08:
2a:a0:cd:57:36:50:53:f3:c6:7b:1e:b2:75:e2:15:
49:12:68:e9:6e:6b:d7:6d:48:cb:7b:c5:11:b3:f4:
12:84:1e:50:a5:b0:51:1d:89:de:e5:a5:b0:4b:64:
98:79:4f:45:39:99:4a:54:74:a7:31:3b:d7:3f:e5:
9d:ed:cf:8b:10:50:aa:51:5a:10:0b:88:22:61:db:
55:bc:56:c8:1d:32:be:81:0e:91:eb:cd:fa:68:cb:
91:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:1E:50:DB:D8:D0:C6:CA:55:7B:B9:62:4B:62:FD:15:3E:82:49:B2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/kx5Q29jQxspVe7liS2L9FT6CSbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.11.0/24
151.240.32.0-151.240.42.255
151.240.88.0-151.240.90.255
151.240.204.0/24
151.240.254.0/24
151.241.6.0/24
151.244.36.0/24
151.244.55.0/24
151.244.60.0/24
151.244.107.0/24
151.244.127.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8c:1e:11:b2:a9:ef:6f:ce:da:f4:4e:6c:5c:b0:76:08:fa:
08:06:e2:01:70:f4:65:fc:42:56:92:b0:b4:e5:0c:9d:cf:5b:
83:94:df:ce:4b:0a:8c:34:55:57:ad:e3:09:86:6a:9e:6b:ca:
56:1e:e4:86:f3:76:d8:42:2e:e8:79:78:a8:5f:b5:aa:01:96:
5f:57:49:dd:e1:39:1c:92:e7:b8:99:1a:ca:a0:01:75:40:e2:
b3:9e:30:c4:94:32:57:3b:55:b1:c2:07:68:67:f4:ad:f9:61:
32:c1:68:05:1e:28:51:6c:30:f8:e4:b8:ae:94:ce:79:00:4c:
98:57:b9:2c:a2:c3:83:03:f3:e8:95:62:cc:63:8d:ce:5c:6d:
b2:46:89:da:fa:8e:87:70:27:22:e5:15:f3:b9:12:b2:01:17:
ee:af:40:15:a0:fd:b3:c1:ea:d1:c3:19:60:a3:1f:69:f0:e3:
4d:98:e9:e1:7b:5e:15:d3:4e:63:e8:2b:fd:3f:0a:8d:aa:12:
15:c9:9f:8f:38:99:03:d8:e5:9d:7e:54:a0:a2:98:71:b1:a3:
44:03:31:3e:51:8d:03:88:3a:d5:32:e3:81:06:23:d1:c2:85:
f4:0b:86:78:79:3e:69:56:2c:58:78:ff:47:60:db:97:47:ec:
80:b9:93:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:32 2026 by rpki-client