Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vE1Ui6Tp1ZN1_CX-svqe9I2WTK8.roa
File: vE1Ui6Tp1ZN1_CX-svqe9I2WTK8.roa (raw, json)
Hash identifier: SdBE11l19Kj1c0/oh2QmofrOfyeUUl2wlvV5P1ySnCg=
Subject key identifier: BC:4D:54:8B:A4:E9:D5:93:75:FC:25:FE:B2:FA:9E:F4:8D:96:4C:AF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E096562467F88A502BE959028B9138FD9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vE1Ui6Tp1ZN1_CX-svqe9I2WTK8.roa
Signing time: Fri 08 May 2026 21:01:39 +0000
ROA not before: Fri 08 May 2026 21:01:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 151.240.156.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.241.34.0/24 maxlen: 24
151.241.38.0/24 maxlen: 24
151.241.42.0/24 maxlen: 24
151.241.44.0/24 maxlen: 24
151.241.46.0/24 maxlen: 24
151.241.49.0/24 maxlen: 24
151.241.114.0/24 maxlen: 24
151.241.118.0/24 maxlen: 24
151.241.120.0/24 maxlen: 24
151.241.121.0/24 maxlen: 24
151.241.124.0/24 maxlen: 24
151.241.126.0/24 maxlen: 24
151.242.141.0/24 maxlen: 24
151.244.7.0/24 maxlen: 24
151.244.9.0/24 maxlen: 24
151.244.10.0/24 maxlen: 24
151.244.13.0/24 maxlen: 24
151.244.15.0/24 maxlen: 24
151.244.25.0/24 maxlen: 24
151.244.27.0/24 maxlen: 24
151.244.29.0/24 maxlen: 24
151.244.31.0/24 maxlen: 24
151.244.33.0/24 maxlen: 24
151.244.35.0/24 maxlen: 24
151.244.37.0/24 maxlen: 24
151.244.39.0/24 maxlen: 24
151.244.41.0/24 maxlen: 24
151.244.43.0/24 maxlen: 24
151.244.45.0/24 maxlen: 24
151.244.47.0/24 maxlen: 24
151.244.49.0/24 maxlen: 24
151.244.51.0/24 maxlen: 24
151.244.53.0/24 maxlen: 24
151.244.71.0/24 maxlen: 24
151.244.74.0/24 maxlen: 24
151.244.94.0/24 maxlen: 24
151.244.96.0/24 maxlen: 24
151.244.98.0/24 maxlen: 24
151.244.100.0/24 maxlen: 24
151.244.104.0/24 maxlen: 24
151.244.197.0/24 maxlen: 24
151.244.200.0/24 maxlen: 24
151.244.202.0/24 maxlen: 24
151.245.7.0/24 maxlen: 24
151.245.17.0/24 maxlen: 24
151.245.19.0/24 maxlen: 24
151.245.21.0/24 maxlen: 24
151.245.23.0/24 maxlen: 24
151.245.27.0/24 maxlen: 24
151.245.31.0/24 maxlen: 24
151.245.33.0/24 maxlen: 24
151.245.35.0/24 maxlen: 24
151.245.37.0/24 maxlen: 24
151.245.39.0/24 maxlen: 24
151.245.41.0/24 maxlen: 24
151.245.43.0/24 maxlen: 24
151.245.45.0/24 maxlen: 24
151.245.47.0/24 maxlen: 24
151.245.49.0/24 maxlen: 24
151.245.51.0/24 maxlen: 24
151.245.53.0/24 maxlen: 24
151.245.55.0/24 maxlen: 24
151.245.71.0/24 maxlen: 24
151.245.73.0/24 maxlen: 24
151.245.75.0/24 maxlen: 24
151.245.93.0/24 maxlen: 24
151.245.95.0/24 maxlen: 24
151.245.97.0/24 maxlen: 24
151.245.99.0/24 maxlen: 24
151.245.101.0/24 maxlen: 24
151.245.103.0/24 maxlen: 24
151.245.105.0/24 maxlen: 24
151.245.107.0/24 maxlen: 24
151.245.135.0/24 maxlen: 24
151.245.197.0/24 maxlen: 24
151.245.200.0/24 maxlen: 24
151.245.202.0/24 maxlen: 24
151.247.189.0/24 maxlen: 24
151.247.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:09:65:62:46:7f:88:a5:02:be:95:90:28:b9:13:8f:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 8 21:01:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bc4d548ba4e9d59375fc25feb2fa9ef48d964caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:89:0c:1b:05:d5:d3:bf:0b:c9:90:66:7e:13:
32:b2:39:53:69:a8:c2:ef:b6:dc:24:c7:af:23:e2:
bd:60:96:91:a8:98:e6:76:74:87:09:2e:e5:dc:11:
36:25:58:cf:6d:de:98:dc:f5:ca:43:9b:22:3a:27:
52:d5:16:d2:37:c0:6a:0e:3c:6a:58:5c:a5:bf:cc:
6d:60:1b:bb:76:f5:33:6d:20:d0:ea:58:cd:c4:e2:
88:62:b1:15:37:21:32:35:77:30:2a:42:02:a9:de:
38:5f:50:6b:85:e7:a1:dc:3a:2d:1f:a0:e0:94:44:
66:b9:ba:5d:9a:cc:3b:69:91:62:93:89:24:dc:e7:
7f:1a:a1:ef:24:fc:9a:43:f3:fa:3e:28:e0:80:69:
eb:fa:0b:d4:6d:01:7f:f3:b8:7f:c2:46:53:7b:2d:
49:b6:00:f5:1f:b9:27:e5:e8:c0:f1:f7:6b:01:67:
21:85:83:88:65:4c:22:2c:6e:a0:e7:3f:b5:c8:c1:
c0:78:f6:5f:26:37:78:40:b4:11:ab:d1:12:f7:8b:
60:8e:c4:75:27:61:71:7a:71:11:7e:48:a8:ef:ed:
44:04:ad:0b:9b:29:08:4b:bb:7f:85:a7:cd:46:6a:
aa:11:82:22:28:f6:fe:7d:a0:4a:47:3f:dc:37:d1:
b1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:4D:54:8B:A4:E9:D5:93:75:FC:25:FE:B2:FA:9E:F4:8D:96:4C:AF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vE1Ui6Tp1ZN1_CX-svqe9I2WTK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.156.0/24
151.240.159.0/24
151.240.162.0/24
151.240.164.0/24
151.240.166.0/24
151.240.168.0/24
151.240.170.0/24
151.240.172.0/24
151.240.174.0/24
151.240.176.0/24
151.240.178.0/24
151.240.219.0/24
151.240.221.0/24
151.240.223.0/24
151.240.225.0/24
151.241.34.0/24
151.241.38.0/24
151.241.42.0/24
151.241.44.0/24
151.241.46.0/24
151.241.49.0/24
151.241.114.0/24
151.241.118.0/24
151.241.120.0/23
151.241.124.0/24
151.241.126.0/24
151.242.141.0/24
151.244.7.0/24
151.244.9.0-151.244.10.255
151.244.13.0/24
151.244.15.0/24
151.244.25.0/24
151.244.27.0/24
151.244.29.0/24
151.244.31.0/24
151.244.33.0/24
151.244.35.0/24
151.244.37.0/24
151.244.39.0/24
151.244.41.0/24
151.244.43.0/24
151.244.45.0/24
151.244.47.0/24
151.244.49.0/24
151.244.51.0/24
151.244.53.0/24
151.244.71.0/24
151.244.74.0/24
151.244.94.0/24
151.244.96.0/24
151.244.98.0/24
151.244.100.0/24
151.244.104.0/24
151.244.197.0/24
151.244.200.0/24
151.244.202.0/24
151.245.7.0/24
151.245.17.0/24
151.245.19.0/24
151.245.21.0/24
151.245.23.0/24
151.245.27.0/24
151.245.31.0/24
151.245.33.0/24
151.245.35.0/24
151.245.37.0/24
151.245.39.0/24
151.245.41.0/24
151.245.43.0/24
151.245.45.0/24
151.245.47.0/24
151.245.49.0/24
151.245.51.0/24
151.245.53.0/24
151.245.55.0/24
151.245.71.0/24
151.245.73.0/24
151.245.75.0/24
151.245.93.0/24
151.245.95.0/24
151.245.97.0/24
151.245.99.0/24
151.245.101.0/24
151.245.103.0/24
151.245.105.0/24
151.245.107.0/24
151.245.135.0/24
151.245.197.0/24
151.245.200.0/24
151.245.202.0/24
151.247.189.0-151.247.190.255
Signature Algorithm: sha256WithRSAEncryption
43:d7:ba:20:9b:b5:ef:71:9d:6f:55:93:23:ed:b4:9d:44:b1:
ff:77:51:cb:b4:84:59:7a:77:ab:6f:20:b0:35:55:b3:71:69:
c9:c6:68:b2:2c:5a:33:2a:39:66:53:61:b4:d5:20:0b:ca:0d:
ed:b6:96:9b:2d:b3:ae:4c:54:5f:b9:02:b4:6e:18:ce:a8:fa:
9b:d0:a0:53:8a:e4:a5:60:c6:3e:13:47:50:cd:e5:ca:25:3e:
2f:f6:5c:bf:ce:a2:17:82:0e:46:82:3d:ff:58:65:b2:98:b4:
b4:4d:6f:4d:8f:d7:65:ab:10:cd:4e:cf:5d:12:a7:53:17:4a:
6d:31:60:59:5d:9b:bc:67:2f:3a:54:88:d1:10:1f:a0:38:63:
a7:e7:2d:c0:8c:e2:a8:cc:1b:bd:16:da:6b:40:19:95:82:56:
2e:f1:d1:d0:11:8f:7a:a9:35:a9:ff:e0:7a:ea:8e:68:9f:59:
bd:eb:8e:4a:21:c6:92:af:8f:b7:3e:60:cc:ea:ac:b0:67:f2:
9b:83:1b:08:74:c3:e7:70:e0:72:c7:3d:2f:0e:ed:11:9a:1b:
92:22:90:13:4c:8c:8f:a8:93:8a:38:fd:9c:8e:be:b9:7c:24:
97:81:f3:5b:57:96:9d:31:ba:8f:83:ee:ac:cd:ae:d8:2c:8d:
c4:22:47:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:07 2026 by rpki-client