Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/rT8IwEu0R7XvBONHvj-kbxWP-SY.roa
File: rT8IwEu0R7XvBONHvj-kbxWP-SY.roa (raw, json)
Hash identifier: OimGH/PlnvVtU7NDUV68f0dF/edesBfld/mOlqtnm5w=
Subject key identifier: AD:3F:08:C0:4B:B4:47:B5:EF:04:E3:47:BE:3F:A4:6F:15:8F:F9:26
Certificate issuer: /CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Certificate serial: 01A0AAAFDE61E4757474CED2CF7AD4E62128
Authority key identifier: E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/rT8IwEu0R7XvBONHvj-kbxWP-SY.roa
Signing time: Wed 16 Sep 2026 14:47:27 +0000
ROA not before: Wed 16 Sep 2026 14:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.186.48.0/20 maxlen: 24
151.186.48.0/24 maxlen: 24
151.186.49.0/24 maxlen: 24
151.186.50.0/24 maxlen: 24
151.186.51.0/24 maxlen: 24
151.186.52.0/24 maxlen: 24
151.186.53.0/24 maxlen: 24
151.186.54.0/24 maxlen: 24
151.186.55.0/24 maxlen: 24
151.186.56.0/24 maxlen: 24
151.186.57.0/24 maxlen: 24
151.186.58.0/24 maxlen: 24
151.186.59.0/24 maxlen: 24
151.186.60.0/24 maxlen: 24
151.186.61.0/24 maxlen: 24
151.186.62.0/24 maxlen: 24
151.186.63.0/24 maxlen: 24
151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:af:de:61:e4:75:74:74:ce:d2:cf:7a:d4:e6:21:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7133dcaf2b1ebf5dade5a33aa1b2fb99d2689ba
Validity
Not Before: Sep 16 14:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad3f08c04bb447b5ef04e347be3fa46f158ff926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4d:c4:7f:80:85:23:09:57:fa:61:d1:63:7f:
60:44:1e:b5:30:90:80:67:1d:90:93:ed:e6:f2:fc:
5a:d3:db:91:a5:60:07:01:0b:55:c5:0d:ca:1f:f7:
13:52:ae:5d:6a:4c:73:62:1b:3b:5b:12:53:23:cf:
26:49:1b:4d:89:51:24:0f:2f:86:35:68:47:4a:29:
0e:55:b3:40:10:52:55:47:0b:d2:0e:36:00:ce:c3:
ca:30:fc:f5:a2:9d:f1:27:b3:6d:2b:bf:6d:7b:ec:
01:44:ef:7f:2e:29:86:0a:49:82:58:12:25:bb:81:
cb:63:c1:73:46:22:ab:06:89:3e:73:d5:df:d1:a8:
80:72:36:25:2e:b4:80:bd:20:ca:63:06:b2:38:8a:
af:1e:e4:97:3e:e9:09:72:5f:b6:e5:a5:c1:be:3e:
44:14:30:a8:6d:b1:5a:c7:d7:b7:2c:8c:8c:a7:a9:
99:4e:ec:f4:cb:10:e3:9f:70:0b:f4:e3:dc:05:16:
26:8d:ab:2b:1a:fa:40:5c:ed:1b:9c:d9:de:d7:6f:
31:1c:9d:d8:b1:79:e7:f4:80:59:0a:70:5a:0d:1f:
04:23:ed:4a:ff:64:bd:f4:13:98:aa:b5:fc:a2:1d:
ed:ca:87:5c:bc:e8:ba:4e:ca:fe:16:31:fb:7c:7b:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:08:C0:4B:B4:47:B5:EF:04:E3:47:BE:3F:A4:6F:15:8F:F9:26
X509v3 Authority Key Identifier:
keyid:E7:13:3D:CA:F2:B1:EB:F5:DA:DE:5A:33:AA:1B:2F:B9:9D:26:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xM9yvKx6_Xa3lozqhsvuZ0mibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/rT8IwEu0R7XvBONHvj-kbxWP-SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/5e4df8-ae8c-44a7-bd6e-19ce46a42fa4/1/5xM9yvKx6_Xa3lozqhsvuZ0mibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.48.0/20
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
76:07:8e:f7:2c:f6:ff:87:8e:56:fe:53:fc:e9:1c:56:c5:3d:
cc:13:6a:a6:6b:c3:28:45:97:24:7f:c4:bd:35:c6:7f:be:12:
cb:ed:e4:14:3d:3a:e6:51:a2:d3:44:d5:69:6d:3e:75:9e:fd:
7b:d3:e7:13:6c:d4:5a:e8:99:21:dd:b4:8b:c2:2c:fe:88:4f:
b2:95:4b:e7:94:7b:97:12:15:a2:38:9a:71:c9:d2:b0:72:00:
ad:b3:c5:ae:39:de:73:7c:7c:71:d9:2f:f4:98:b1:83:fb:d2:
b2:5a:dd:c5:c2:e5:7f:2a:6a:78:4c:a0:5d:0a:92:ad:b4:b3:
24:e7:9a:1e:30:8a:5f:57:47:96:13:1e:70:3d:e5:10:3f:34:
8c:c5:ff:dc:cb:36:3f:64:5f:aa:07:11:8a:cd:90:37:6f:89:
b5:0a:d2:e9:12:ef:94:99:6b:24:f3:25:f1:0c:8f:23:73:b6:
2d:4c:a4:94:24:2c:93:9f:41:30:f0:ae:6e:ed:fc:2c:77:48:
9b:02:50:e6:90:f5:be:8d:66:07:49:04:86:19:f5:e0:48:8a:
83:c2:72:93:53:d3:a6:e5:79:82:c6:ad:ec:48:c0:a1:dd:ae:
4d:13:7c:4f:ba:51:f1:39:47:5c:29:6a:d0:80:db:12:d0:10:
c8:98:4b:4e
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAaCqr95h5HV0dM7Sz3rU5iEoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MTMzZGNhZjJiMWViZjVkYWRlNWEzM2FhMWIyZmI5OWQy
Njg5YmEwHhcNMjYwOTE2MTQ0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDNmMDhjMDRiYjQ0N2I1ZWYwNGUzNDdiZTNmYTQ2ZjE1OGZmOTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtU3Ef4CFIwlX+mHRY39gRB61MJCA
Zx2Qk+3m8vxa09uRpWAHAQtVxQ3KH/cTUq5dakxzYhs7WxJTI88mSRtNiVEkDy+G
NWhHSikOVbNAEFJVRwvSDjYAzsPKMPz1op3xJ7NtK79te+wBRO9/LimGCkmCWBIl
u4HLY8FzRiKrBok+c9Xf0aiAcjYlLrSAvSDKYwayOIqvHuSXPukJcl+25aXBvj5E
FDCobbFax9e3LIyMp6mZTuz0yxDjn3AL9OPcBRYmjasrGvpAXO0bnNne128xHJ3Y
sXnn9IBZCnBaDR8EI+1K/2S99BOYqrX8oh3tyodcvOi6Tsr+FjH7fHtmPQIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFK0/CMBLtEe17wTjR74/pG8Vj/kmMB8GA1UdIwQY
MBaAFOcTPcrysev12t5aM6obL7mdJom6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUt
MTljZTQ2YTQyZmE0LzEvclQ4SXdFdTBSN1h2Qk9OSHZqLWtieFdQLVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi81ZTRkZjgtYWU4Yy00NGE3LWJkNmUtMTljZTQ2YTQyZmE0
LzEvNXhNOXl2S3g2X1hhM2xvenFoc3Z1WjBtaWJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQEl7owMAwD
BASXupADBASXusAwDwQCAAIwCQMHACoE5MQABTANBgkqhkiG9w0BAQsFAAOCAQEA
dgeO9yz2/4eOVv5T/OkcVsU9zBNqpmvDKEWXJH/EvTXGf74Sy+3kFD065lGi00TV
aW0+dZ79e9PnE2zUWuiZId20i8Is/ohPspVL55R7lxIVojiaccnSsHIArbPFrjne
c3x8cdkv9Jixg/vSslrdxcLlfypqeEygXQqSrbSzJOeaHjCKX1dHlhMecD3lED80
jMX/3Ms2P2RfqgcRis2QN2+JtQrS6RLvlJlrJPMl8QyPI3O2LUyklCQsk59BMPCu
bu38LHdImwJQ5pD1vo1mB0kEhhn14EiKg8Jyk1PTpuV5gsat7EjAod2uTRN8T7pR
8TlHXClq0IDbEtAQyJhLTg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 18:36:38 2026 by rpki-client