Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pR3ONBPkhVIoJ0rmO3Ep_n6m7c0.roa
File: pR3ONBPkhVIoJ0rmO3Ep_n6m7c0.roa (raw, json)
Hash identifier: bdtK5+KG9P+jdWzZRRJHq2rF1HA38FAUkpJCXq3qwGE=
Subject key identifier: A5:1D:CE:34:13:E4:85:52:28:27:4A:E6:3B:71:29:FE:7E:A6:ED:CD
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CF5F615F6B0F937DD650251ECCB8FF345
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pR3ONBPkhVIoJ0rmO3Ep_n6m7c0.roa
Signing time: Mon 16 Mar 2026 09:24:31 +0000
ROA not before: Mon 16 Mar 2026 09:24:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.41.0/24 maxlen: 24
151.247.44.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.47.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.75.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.78.0/24 maxlen: 24
151.247.82.0/24 maxlen: 24
151.247.91.0/24 maxlen: 24
151.247.94.0/24 maxlen: 24
151.247.102.0/24 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.231.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f5:f6:15:f6:b0:f9:37:dd:65:02:51:ec:cb:8f:f3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 16 09:24:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a51dce3413e4855228274ae63b7129fe7ea6edcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:06:e3:a9:bc:32:39:2c:55:8a:09:8e:44:84:
75:24:d4:b7:86:4c:84:22:dd:07:45:a5:f8:3d:72:
fc:e3:74:b3:82:77:a7:05:ce:24:1f:9b:5e:cb:91:
a6:85:4f:09:d7:d8:cd:ae:11:59:49:9d:d4:98:32:
8e:e7:01:56:60:36:29:18:c0:54:67:f2:8a:3b:e2:
42:f9:26:a2:f8:6a:63:d7:23:14:ae:ff:7c:65:5e:
3a:42:9c:de:ae:4b:9b:18:e5:c2:6b:69:66:7c:52:
6a:c2:f1:24:da:af:06:bd:d0:db:2a:47:b1:fc:f7:
8a:49:ba:f7:f1:ba:b8:13:20:37:6b:85:fb:d8:c6:
c1:f4:8e:e1:f0:a7:26:f3:88:67:0b:27:68:1e:91:
da:98:fe:23:62:7b:1f:9f:ee:de:3c:7b:8c:79:9f:
47:89:ed:74:62:70:08:4c:8c:14:a0:e1:18:01:ea:
e9:5c:df:dc:1f:8a:6b:37:d9:63:6d:a1:9f:3c:a9:
1f:63:61:dd:60:45:28:39:82:4f:35:47:d0:d7:7c:
f1:82:2a:37:36:aa:1d:b9:bb:ce:db:81:9d:ec:0c:
42:60:74:1f:f8:c8:51:a4:a0:76:99:63:ec:7e:c8:
f7:47:7f:8a:b3:2b:cf:1b:59:00:48:a3:86:11:64:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1D:CE:34:13:E4:85:52:28:27:4A:E6:3B:71:29:FE:7E:A6:ED:CD
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/pR3ONBPkhVIoJ0rmO3Ep_n6m7c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.41.0/24
151.247.44.0/23
151.247.47.0-151.247.48.255
151.247.75.0-151.247.78.255
151.247.82.0/24
151.247.91.0/24
151.247.94.0/24
151.247.102.0/24
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.231.0/24
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
87:f8:20:1d:a6:9e:a0:59:53:2f:d5:53:0c:e7:95:c8:a3:15:
ea:7c:d0:92:0a:11:9d:9b:fe:a4:03:95:ad:a6:a5:c7:06:7d:
5d:c3:28:f0:aa:6f:37:18:96:e4:1e:58:8c:01:76:6e:0f:6a:
9c:dc:0f:b3:24:58:b6:ed:7c:53:a1:34:40:a9:fc:f0:be:f5:
8c:b1:f2:f5:5a:7d:4a:39:22:e0:f6:64:fa:fd:97:42:50:bf:
a2:0e:e6:a3:1e:7a:8d:38:81:6b:7f:a7:86:ca:2d:a4:a6:77:
86:46:05:7a:70:e1:c3:c4:1c:93:65:8a:02:fb:83:d5:54:20:
40:fb:da:24:83:cd:34:d6:18:15:fd:13:cd:b2:7d:5f:a1:db:
35:e5:6a:60:5f:fd:2d:6a:60:91:7a:94:1f:cb:c2:a2:35:46:
96:58:3a:ed:6a:c8:31:14:27:89:f3:23:0e:e4:aa:92:e0:55:
ce:bd:0a:92:98:bf:6c:39:d5:7f:93:bd:ee:21:a8:5b:7f:4c:
2c:ca:aa:c9:50:8c:ad:f4:16:49:f3:21:fd:12:46:c1:5f:e9:
a5:a4:17:26:45:be:21:1a:fa:8a:29:fe:fe:33:31:11:7e:5d:
2e:f3:86:32:7e:64:7a:98:c3:b5:f5:54:44:69:d3:72:77:ef:
ed:19:35:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 12:31:13 2026 by rpki-client