Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/WcAF1BO2BoRWrv_NdRxvAi9Chls.roa
File: WcAF1BO2BoRWrv_NdRxvAi9Chls.roa (raw, json)
Hash identifier: fnFUCetRyaJXfx+VJv96T9z/429RVueF9Q8gV6yw4pI=
Subject key identifier: 59:C0:05:D4:13:B6:06:84:56:AE:FF:CD:75:1C:6F:02:2F:42:86:5B
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01A0AAAFDECAA03A23FAD32AE54346B47A21
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/WcAF1BO2BoRWrv_NdRxvAi9Chls.roa
Signing time: Wed 16 Sep 2026 14:47:27 +0000
ROA not before: Wed 16 Sep 2026 14:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.186.48.0/20 maxlen: 24
151.186.48.0/24 maxlen: 24
151.186.49.0/24 maxlen: 24
151.186.50.0/24 maxlen: 24
151.186.51.0/24 maxlen: 24
151.186.52.0/24 maxlen: 24
151.186.53.0/24 maxlen: 24
151.186.54.0/24 maxlen: 24
151.186.55.0/24 maxlen: 24
151.186.56.0/24 maxlen: 24
151.186.57.0/24 maxlen: 24
151.186.58.0/24 maxlen: 24
151.186.59.0/24 maxlen: 24
151.186.60.0/24 maxlen: 24
151.186.61.0/24 maxlen: 24
151.186.62.0/24 maxlen: 24
151.186.63.0/24 maxlen: 24
151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:af:de:ca:a0:3a:23:fa:d3:2a:e5:43:46:b4:7a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Sep 16 14:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=59c005d413b6068456aeffcd751c6f022f42865b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e9:e8:74:6c:10:31:db:ae:99:bc:77:6a:0c:
f1:d4:9b:3d:24:b8:82:a1:09:40:e5:a3:50:8f:23:
d6:4d:ea:45:eb:b1:65:1a:a0:08:a8:9a:b7:4f:1f:
cc:3e:f4:0c:bf:09:b4:ca:fb:bc:ca:c0:6d:b0:77:
cb:23:a4:65:00:38:cb:0a:ce:87:17:16:f3:24:00:
e0:6c:4c:1b:67:d9:05:b9:92:cb:01:95:65:2f:42:
f9:57:1c:cb:92:f3:b1:c2:67:4b:84:75:20:8e:ec:
5d:9a:72:e9:22:ad:be:0a:35:8b:a6:69:15:01:79:
37:f4:17:23:b4:02:dc:97:95:3e:9d:f8:34:a9:dd:
ad:5d:a1:6b:3d:e4:68:68:70:4d:64:b3:b1:97:3c:
01:21:d3:24:42:f2:70:46:3e:e4:e0:77:ea:0f:8a:
c6:60:f9:2f:84:ea:29:58:a0:de:8f:d7:db:ee:93:
c3:24:83:f1:6e:d1:14:c7:bd:95:79:22:1a:4d:20:
5e:0d:8f:f8:a9:53:09:c7:57:93:cf:5f:ab:21:15:
0a:52:90:40:69:11:f3:de:1e:b8:d3:64:71:1e:e9:
b9:3c:b5:6a:5a:03:89:de:ae:3f:12:2b:79:cb:67:
3f:6a:a2:73:cc:8e:a4:c2:b3:6f:f9:1b:b0:6f:48:
10:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:05:D4:13:B6:06:84:56:AE:FF:CD:75:1C:6F:02:2F:42:86:5B
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/WcAF1BO2BoRWrv_NdRxvAi9Chls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.48.0/20
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
17:62:c8:88:3a:cb:64:6a:5c:ed:79:37:92:c2:06:5d:c5:d1:
15:81:4e:a3:b6:38:a8:20:d4:14:da:71:52:34:e6:8f:99:76:
01:ef:0b:58:d3:e4:d2:c1:35:08:8e:cb:fa:23:50:11:d2:ad:
f9:f8:71:e3:4c:64:9d:d7:5e:7e:5a:01:a7:39:fe:86:e9:34:
18:a2:42:ea:d5:4b:08:5a:16:1e:da:1f:4e:83:5e:2c:38:df:
40:5c:21:bf:4e:85:45:1a:77:3d:64:39:b5:a9:42:d5:a6:57:
92:6b:a2:fc:bd:88:91:76:18:3b:e0:cb:6f:6a:5a:ef:f2:14:
d8:1a:e1:4e:8b:75:72:0a:0d:83:d0:c7:0d:ea:e5:c6:d1:f7:
1c:42:3d:dc:57:59:20:b9:53:cd:8b:27:e4:63:af:ec:55:46:
c6:08:a0:95:59:b6:ad:3c:9c:ae:7c:fb:c6:55:fc:3e:d9:26:
4d:a4:81:1c:39:74:06:57:9b:45:75:e0:f0:c5:95:cb:ce:1c:
4d:71:bc:3d:6b:df:71:b7:f4:71:39:18:f8:16:5e:0a:65:94:
6a:b1:42:eb:f8:c8:84:8d:5c:66:91:df:3b:f0:65:0d:dc:82:
c9:34:21:b5:64:4a:45:37:e8:47:e4:f2:06:12:31:f9:d3:9f:
30:a5:3d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:43:27 2026 by rpki-client