Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wepdvi3bEFCiy94PQAVfUMPPmKo.roa
File: wepdvi3bEFCiy94PQAVfUMPPmKo.roa (raw, json)
Hash identifier: 5+fjn7XsOeY/ojfbin6SbMHQs41xc6Knp21XJsbKNcI=
Subject key identifier: C1:EA:5D:BE:2D:DB:10:50:A2:CB:DE:0F:40:05:5F:50:C3:CF:98:AA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DCF53CC031A48B495133EDFD4359B77F9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wepdvi3bEFCiy94PQAVfUMPPmKo.roa
Signing time: Mon 27 Apr 2026 14:24:28 +0000
ROA not before: Mon 27 Apr 2026 14:24:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.246.144.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 04:20:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:53:cc:03:1a:48:b4:95:13:3e:df:d4:35:9b:77:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 27 14:24:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1ea5dbe2ddb1050a2cbde0f40055f50c3cf98aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:5d:4e:05:de:3d:fc:c1:31:bc:1e:f4:53:
38:3e:81:75:6c:41:18:04:c8:5b:39:4e:86:43:72:
16:63:83:8f:4d:f1:4d:4e:de:bb:6e:0c:53:f4:90:
37:1f:f2:d4:a0:9a:a0:58:aa:a4:b3:db:20:19:04:
53:5b:7e:4d:52:d9:e7:1a:34:25:1b:74:34:97:80:
d0:fa:7b:51:55:b8:d8:8e:b1:41:cb:c0:9f:11:bd:
f9:d0:35:c8:64:69:2e:38:6c:30:c3:3a:14:59:d2:
53:48:56:46:aa:30:50:6b:2e:fa:e0:13:25:40:74:
41:b2:1e:a3:3c:cb:ab:53:7e:5a:2e:74:d4:78:3b:
32:a9:7e:12:12:09:5f:82:a9:9b:8a:f3:3f:0d:6c:
5f:05:3e:a5:d1:74:85:eb:40:c5:5c:15:8d:4e:00:
3c:9d:03:2a:8b:be:d3:c6:46:2b:19:c2:8b:d6:c6:
b4:7e:51:9d:cb:24:df:48:76:92:77:c6:8e:9f:01:
8b:4f:89:dd:a6:77:5d:0c:00:f8:cd:96:a5:c4:e0:
ab:2a:d9:71:b6:e3:06:11:b7:9f:23:c5:d9:6f:8f:
e3:22:91:29:75:1e:9a:f1:87:04:e3:7a:9c:26:f1:
a0:15:14:8d:86:bf:e6:6d:fa:5c:50:f3:59:f0:e6:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:EA:5D:BE:2D:DB:10:50:A2:CB:DE:0F:40:05:5F:50:C3:CF:98:AA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wepdvi3bEFCiy94PQAVfUMPPmKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.246.144.0/24
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
96:55:2e:32:a0:71:88:a4:6b:fc:27:ae:38:22:fe:7a:36:12:
ac:5f:b7:59:8a:ca:d5:22:af:98:cc:66:33:ca:95:dc:d7:10:
d9:07:81:d1:85:d4:59:59:f5:1e:2e:a3:fb:7d:7a:50:f7:8c:
30:f9:3d:e1:f3:32:6d:22:de:8a:3b:b7:f3:4e:17:b5:28:7a:
79:33:5a:0a:36:0e:3e:c9:6e:9c:1c:22:96:50:bf:6a:55:25:
2d:f1:f8:b4:2b:5d:94:98:2b:2d:37:50:67:13:d6:92:86:2d:
02:db:98:94:91:88:37:89:1d:7c:56:c1:95:63:4f:0a:56:12:
a0:30:24:68:ab:37:a7:30:83:0d:9d:12:c2:5c:6b:7b:29:32:
45:de:92:c9:eb:4a:8e:76:9a:84:de:97:4e:c0:5a:d4:ce:80:
3b:4c:e3:b4:43:f7:61:c8:37:58:0b:7a:10:1e:9b:85:c1:69:
84:b0:52:5f:86:2d:27:be:17:08:8a:dc:82:7c:c7:fb:c4:eb:
71:c3:b7:5a:08:6d:dd:98:e9:9e:33:36:18:61:ff:21:96:8c:
9e:8d:61:e0:04:88:c4:67:7c:41:3a:62:d3:ca:86:b7:ab:48:
0f:4a:e2:98:7a:0a:1b:8c:d2:42:91:f9:01:2a:22:b8:19:3d:
27:e1:16:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:58 2026 by rpki-client