Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wj9dhyG-fyJm2zp0i1pfNKkblHE.roa
File: wj9dhyG-fyJm2zp0i1pfNKkblHE.roa (raw, json)
Hash identifier: DipbaMu6WTgYb6aPZCpeQ2YIIYWkF0fSVz/3i1Gnl5o=
Subject key identifier: C2:3F:5D:87:21:BE:7F:22:66:DB:3A:74:8B:5A:5F:34:A9:1B:94:71
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E888AF67698E494BDF335BB319966E683
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wj9dhyG-fyJm2zp0i1pfNKkblHE.roa
Signing time: Tue 02 Jun 2026 13:34:28 +0000
ROA not before: Tue 02 Jun 2026 13:34:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3320
IP address blocks: 151.242.79.0/24 maxlen: 24
151.242.90.0/24 maxlen: 24
151.242.93.0/24 maxlen: 24
151.242.94.0/24 maxlen: 24
151.242.98.0/24 maxlen: 24
151.242.100.0/24 maxlen: 24
151.242.107.0/24 maxlen: 24
151.242.109.0/24 maxlen: 24
151.242.113.0/24 maxlen: 24
151.242.115.0/24 maxlen: 24
151.242.196.0/22 maxlen: 22
151.243.164.0/24 maxlen: 24
151.243.185.0/24 maxlen: 24
151.245.128.0/24 maxlen: 24
151.245.129.0/24 maxlen: 24
151.245.130.0/24 maxlen: 24
151.245.131.0/24 maxlen: 24
151.245.145.0/24 maxlen: 24
151.245.150.0/24 maxlen: 24
151.245.169.0/24 maxlen: 24
151.246.243.0/24 maxlen: 24
151.246.247.0/24 maxlen: 24
151.246.250.0/24 maxlen: 24
151.247.178.0/24 maxlen: 24
151.247.218.0/24 maxlen: 24
151.247.222.0/24 maxlen: 24
151.247.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:88:8a:f6:76:98:e4:94:bd:f3:35:bb:31:99:66:e6:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 2 13:34:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c23f5d8721be7f2266db3a748b5a5f34a91b9471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:a0:cc:11:a3:89:f9:c8:9c:d0:34:41:2c:
cf:ee:1a:c7:9a:a7:cf:42:2e:74:3c:56:db:3c:38:
eb:a5:20:10:b5:66:f9:7d:18:c6:61:e7:f0:8f:13:
0a:0b:4e:de:9f:be:10:9b:1a:2c:47:23:6b:10:97:
50:f9:1d:21:6a:24:10:3c:27:8a:96:52:b9:e2:f1:
a7:19:6f:84:b4:ba:62:f4:bd:bd:97:6f:57:1c:7a:
59:07:d9:5a:14:f7:1d:29:e3:32:d3:fe:fa:d7:80:
7a:e1:40:b4:11:be:3f:9f:7b:12:55:c3:8b:ad:14:
18:8b:a7:65:b2:71:dd:9c:4c:15:69:0a:d4:33:e4:
db:73:fb:f0:b2:ad:9f:c6:01:77:5c:fe:44:82:04:
14:d1:b2:1b:e0:0c:c7:b3:e0:86:a2:e0:ba:a6:dd:
26:70:38:ec:ea:5a:8e:b7:a9:97:20:aa:77:57:66:
41:1f:a8:a8:58:f6:76:8f:89:51:cb:bd:3c:4a:7a:
00:53:ca:77:a7:d8:87:92:e1:23:52:8d:e7:be:87:
91:11:33:be:bf:4e:44:65:8f:82:e7:b2:d9:fc:32:
90:32:09:82:c8:64:c4:07:4b:10:c7:78:a7:16:86:
51:9b:13:66:00:6f:e1:a1:0d:0a:6e:68:ef:88:42:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3F:5D:87:21:BE:7F:22:66:DB:3A:74:8B:5A:5F:34:A9:1B:94:71
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/wj9dhyG-fyJm2zp0i1pfNKkblHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.79.0/24
151.242.90.0/24
151.242.93.0-151.242.94.255
151.242.98.0/24
151.242.100.0/24
151.242.107.0/24
151.242.109.0/24
151.242.113.0/24
151.242.115.0/24
151.242.196.0/22
151.243.164.0/24
151.243.185.0/24
151.245.128.0/22
151.245.145.0/24
151.245.150.0/24
151.245.169.0/24
151.246.243.0/24
151.246.247.0/24
151.246.250.0/24
151.247.178.0/24
151.247.218.0/24
151.247.222.0/24
151.247.255.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:f5:fe:79:0e:de:f9:5e:9f:27:2a:3a:58:60:cd:0c:4d:4b:
0c:53:6c:bf:2d:b3:65:ac:92:eb:1c:f4:af:8d:be:c9:10:95:
82:df:30:76:20:bf:ca:ca:b2:b6:8d:ec:fc:0e:2d:03:33:9d:
76:1d:7b:d4:ad:b3:15:ba:8b:28:ba:69:8e:b9:ca:dc:0f:31:
4d:48:77:80:48:67:ec:20:fc:eb:02:e9:ff:1d:83:34:7a:b5:
e0:3e:a4:c6:33:dc:7a:8b:ff:cf:37:5d:bf:e7:95:d6:13:69:
ee:89:48:dd:10:a5:68:02:59:07:2f:04:f0:fa:aa:40:2d:b7:
60:09:d3:dd:8c:05:5c:e9:bf:27:20:8c:52:5a:41:17:9e:cd:
79:02:ba:ba:a9:a6:9d:d9:aa:eb:ea:c1:c4:8c:97:33:e8:9c:
82:70:31:a0:27:09:18:ab:09:cf:83:ba:f2:da:45:a6:85:4d:
97:01:f0:7a:52:20:0f:8b:e6:11:96:ce:e9:59:28:3d:96:ce:
28:9a:9d:5a:04:de:b0:fc:b7:80:93:13:0a:6f:32:3a:47:02:
62:13:82:38:71:7d:1c:dc:75:96:a7:df:99:e9:cb:df:1c:f0:
9d:88:9a:93:ec:0e:51:da:08:71:7b:73:14:dc:8e:2a:9d:84:
7e:56:dd:ee
-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgISAZ6IivZ2mOSUvfM1uzGZZuaDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjAyMTMzNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMjNmNWQ4NzIxYmU3ZjIyNjZkYjNhNzQ4YjVhNWYzNGE5MWI5NDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM6gzBGjifnInNA0QSzP7hrHmqfP
Qi50PFbbPDjrpSAQtWb5fRjGYefwjxMKC07en74QmxosRyNrEJdQ+R0haiQQPCeK
llK54vGnGW+EtLpi9L29l29XHHpZB9laFPcdKeMy0/7614B64UC0Eb4/n3sSVcOL
rRQYi6dlsnHdnEwVaQrUM+Tbc/vwsq2fxgF3XP5EggQU0bIb4AzHs+CGouC6pt0m
cDjs6lqOt6mXIKp3V2ZBH6ioWPZ2j4lRy708SnoAU8p3p9iHkuEjUo3nvoeRETO+
v05EZY+C57LZ/DKQMgmCyGTEB0sQx3inFoZRmxNmAG/hoQ0KbmjviEJ9iwIDAQAB
o4ICmjCCApYwHQYDVR0OBBYEFMI/XYchvn8iZts6dItaXzSpG5RxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvd2o5ZGh5Ry1meUptMnpwMGkxcGZOS2tibEhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGvBggrBgEFBQcBBwEB/wSBnzCBnDCBmQQCAAEwgZIDBACX
8k8DBACX8lowDAMEAJfyXQMEAJfyXgMEAJfyYgMEAJfyZAMEAJfyawMEAJfybQME
AJfycQMEAJfycwMEApfyxAMEAJfzpAMEAJfzuQMEApf1gAMEAJf1kQMEAJf1lgME
AJf1qQMEAJf28wMEAJf29wMEAJf2+gMEAJf3sgMEAJf32gMEAJf33gMEAJf3/zAN
BgkqhkiG9w0BAQsFAAOCAQEAC/X+eQ7e+V6fJyo6WGDNDE1LDFNsvy2zZayS6xz0
r42+yRCVgt8wdiC/ysqyto3s/A4tAzOddh171K2zFbqLKLppjrnK3A8xTUh3gEhn
7CD86wLp/x2DNHq14D6kxjPceov/zzddv+eV1hNp7olI3RClaAJZBy8E8PqqQC23
YAnT3YwFXOm/JyCMUlpBF57NeQK6uqmmndmq6+rBxIyXM+icgnAxoCcJGKsJz4O6
8tpFpoVNlwHwelIgD4vmEZbO6VkoPZbOKJqdWgTesPy3gJMTCm8yOkcCYhOCOHF9
HNx1lqffmenL3xzwnYiak+wOUdoIcXtzFNyOKp2Eflbd7g==
-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:39 2026 by rpki-client