Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yHl0B8dXCdIDGgUVTblw4trlc2Q.roa
File: yHl0B8dXCdIDGgUVTblw4trlc2Q.roa (raw, json)
Hash identifier: wzEtlPJm3MQwyurHWcSkx4cY5l+WMUGo9dSplkqkzO0=
Subject key identifier: C8:79:74:07:C7:57:09:D2:03:1A:05:15:4D:B9:70:E2:DA:E5:73:64
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A12F33167B0F272253F8C7C12FACE42366
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yHl0B8dXCdIDGgUVTblw4trlc2Q.roa
Signing time: Mon 12 Oct 2026 08:20:39 +0000
ROA not before: Mon 12 Oct 2026 08:20:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.244.194.0/24 maxlen: 24
151.244.195.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.245.189.0/24 maxlen: 24
151.245.199.0/24 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/24 maxlen: 24
151.245.225.0/24 maxlen: 24
151.245.228.0/24 maxlen: 24
151.245.247.0/24 maxlen: 24
151.246.120.0/24 maxlen: 24
151.246.121.0/24 maxlen: 24
151.246.122.0/24 maxlen: 24
151.246.123.0/24 maxlen: 24
151.246.124.0/24 maxlen: 24
151.246.125.0/24 maxlen: 24
151.246.126.0/24 maxlen: 24
151.246.127.0/24 maxlen: 24
151.246.184.0/24 maxlen: 24
151.246.255.0/24 maxlen: 24
151.247.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:33:16:7b:0f:27:22:53:f8:c7:c1:2f:ac:e4:23:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 08:20:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c8797407c75709d2031a05154db970e2dae57364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:67:8c:c9:3f:72:23:f7:48:4a:61:5d:ca:8e:
b5:63:76:8c:d5:a1:10:d1:1a:c7:48:44:47:0f:4b:
34:ba:a1:bd:1f:63:e0:ea:c8:58:40:54:3d:87:ea:
87:44:f0:ca:91:32:00:09:44:3b:40:6f:02:04:61:
09:3b:50:2f:8c:45:59:e7:12:0a:d2:ef:0f:a1:ab:
1c:29:49:cf:56:fe:5c:22:f2:21:70:eb:b8:c9:2a:
a3:96:08:10:ff:80:3b:20:12:10:a5:9c:0f:88:4a:
ad:97:49:5c:05:f8:74:e0:e7:2a:a4:4a:39:1c:f4:
5c:93:45:c5:57:ae:21:dd:af:bb:ae:f6:a4:6d:27:
14:0c:d2:73:1c:e0:1d:3c:cd:7c:63:ff:44:27:4f:
2f:44:c5:ae:0d:69:b3:99:83:d3:f5:4e:5c:96:b8:
b1:62:c8:30:3b:e0:41:b1:47:a4:1b:4b:6f:62:e2:
3e:00:f3:63:79:fe:cc:a3:9f:c9:4c:a8:94:15:4c:
ac:fc:30:b9:3f:7d:14:63:87:a9:c2:65:f3:c4:b7:
b5:26:ee:a9:2e:d2:a9:d1:48:ce:94:35:54:62:1b:
77:72:68:56:96:de:93:63:a4:a6:35:be:c5:91:cd:
2e:fa:68:0b:8f:19:3c:69:3b:a7:82:cf:29:50:ff:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:79:74:07:C7:57:09:D2:03:1A:05:15:4D:B9:70:E2:DA:E5:73:64
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yHl0B8dXCdIDGgUVTblw4trlc2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.6.0-151.240.8.255
151.240.10.0/24
151.240.12.0/23
151.240.16.0/24
151.240.18.0/24
151.240.24.0/24
151.240.26.0/24
151.240.60.0/24
151.240.73.0/24
151.240.76.0/24
151.240.87.0/24
151.240.97.0/24
151.244.194.0/23
151.244.235.0/24
151.245.189.0/24
151.245.199.0/24
151.245.220.0/24
151.245.224.0/23
151.245.228.0/24
151.245.247.0/24
151.246.120.0/21
151.246.184.0/24
151.246.255.0/24
151.247.162.0/24
Signature Algorithm: sha256WithRSAEncryption
09:f9:b2:20:e5:57:b3:b9:c1:ee:eb:71:37:32:83:11:96:3a:
10:d2:7c:1f:58:c3:90:b0:ad:07:83:71:e1:97:be:32:43:02:
e8:2d:94:2a:cc:cc:8a:39:92:47:fd:b2:ba:8b:9b:67:30:84:
42:82:fc:2b:32:a5:6e:87:d6:84:46:38:9d:77:91:2a:8c:e8:
e0:f5:fa:6b:f4:9c:c6:44:76:51:f6:8f:34:b7:46:97:f3:7b:
9c:d5:b7:21:48:c5:5f:6b:97:1a:5e:16:8d:26:d4:10:f1:b0:
24:90:24:e1:2e:b7:e5:fc:3a:8f:f0:06:a1:7c:7c:c0:d4:0c:
b9:87:46:c2:6d:44:9b:43:68:6e:ad:b3:d8:66:46:55:da:ab:
da:f7:ae:e2:a3:62:01:f5:d9:ee:97:4b:24:e2:fd:c5:75:ec:
8f:98:5f:52:2d:e4:ed:b5:5d:ab:22:24:79:51:3b:83:d8:37:
e9:3f:48:fe:0e:84:cc:3f:26:b6:a6:a4:91:17:68:c5:3a:07:
db:2d:40:23:6d:a0:15:37:18:fb:49:ed:d4:ea:49:e3:86:05:
ec:28:ce:c8:c2:13:8c:f4:6f:56:5e:4b:96:c1:1a:24:cb:f2:
0d:d9:93:59:0b:b3:77:55:aa:81:37:59:4e:34:71:cc:ea:1f:
66:b7:6a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:12:03 2026 by rpki-client