Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83Pp90J5cAeI42dYTrhC5CPBXS8.roa
File: 83Pp90J5cAeI42dYTrhC5CPBXS8.roa (raw, json)
Hash identifier: 2C3u5ebarPQmI9X7TDI8Ecv0g2jMY1YmV3ot/fJ+a04=
Subject key identifier: F3:73:E9:F7:42:79:70:07:88:E3:67:58:4E:B8:42:E4:23:C1:5D:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A04853E9A7F4CC702067AA7E64647239AB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83Pp90J5cAeI42dYTrhC5CPBXS8.roa
Signing time: Fri 28 Aug 2026 12:24:13 +0000
ROA not before: Fri 28 Aug 2026 12:24:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 151.240.156.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.241.34.0/24 maxlen: 24
151.241.38.0/24 maxlen: 24
151.241.42.0/24 maxlen: 24
151.241.44.0/24 maxlen: 24
151.241.46.0/24 maxlen: 24
151.241.49.0/24 maxlen: 24
151.241.114.0/24 maxlen: 24
151.241.118.0/24 maxlen: 24
151.241.120.0/24 maxlen: 24
151.241.121.0/24 maxlen: 24
151.241.124.0/24 maxlen: 24
151.241.126.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.141.0/24 maxlen: 24
151.244.7.0/24 maxlen: 24
151.244.9.0/24 maxlen: 24
151.244.10.0/24 maxlen: 24
151.244.13.0/24 maxlen: 24
151.244.15.0/24 maxlen: 24
151.244.25.0/24 maxlen: 24
151.244.27.0/24 maxlen: 24
151.244.29.0/24 maxlen: 24
151.244.31.0/24 maxlen: 24
151.244.33.0/24 maxlen: 24
151.244.35.0/24 maxlen: 24
151.244.37.0/24 maxlen: 24
151.244.39.0/24 maxlen: 24
151.244.41.0/24 maxlen: 24
151.244.43.0/24 maxlen: 24
151.244.45.0/24 maxlen: 24
151.244.47.0/24 maxlen: 24
151.244.49.0/24 maxlen: 24
151.244.51.0/24 maxlen: 24
151.244.53.0/24 maxlen: 24
151.244.71.0/24 maxlen: 24
151.244.74.0/24 maxlen: 24
151.244.94.0/24 maxlen: 24
151.244.96.0/24 maxlen: 24
151.244.98.0/24 maxlen: 24
151.244.100.0/24 maxlen: 24
151.244.104.0/24 maxlen: 24
151.244.165.0/24 maxlen: 24
151.244.197.0/24 maxlen: 24
151.244.200.0/24 maxlen: 24
151.244.202.0/24 maxlen: 24
151.245.7.0/24 maxlen: 24
151.245.17.0/24 maxlen: 24
151.245.19.0/24 maxlen: 24
151.245.21.0/24 maxlen: 24
151.245.23.0/24 maxlen: 24
151.245.27.0/24 maxlen: 24
151.245.31.0/24 maxlen: 24
151.245.33.0/24 maxlen: 24
151.245.35.0/24 maxlen: 24
151.245.37.0/24 maxlen: 24
151.245.39.0/24 maxlen: 24
151.245.41.0/24 maxlen: 24
151.245.43.0/24 maxlen: 24
151.245.45.0/24 maxlen: 24
151.245.47.0/24 maxlen: 24
151.245.49.0/24 maxlen: 24
151.245.51.0/24 maxlen: 24
151.245.53.0/24 maxlen: 24
151.245.55.0/24 maxlen: 24
151.245.71.0/24 maxlen: 24
151.245.73.0/24 maxlen: 24
151.245.75.0/24 maxlen: 24
151.245.93.0/24 maxlen: 24
151.245.95.0/24 maxlen: 24
151.245.97.0/24 maxlen: 24
151.245.99.0/24 maxlen: 24
151.245.101.0/24 maxlen: 24
151.245.103.0/24 maxlen: 24
151.245.105.0/24 maxlen: 24
151.245.107.0/24 maxlen: 24
151.245.135.0/24 maxlen: 24
151.245.197.0/24 maxlen: 24
151.245.200.0/24 maxlen: 24
151.245.202.0/24 maxlen: 24
151.247.189.0/24 maxlen: 24
151.247.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:53:e9:a7:f4:cc:70:20:67:aa:7e:64:64:72:39:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 28 12:24:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f373e9f74279700788e367584eb842e423c15d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:42:5b:70:fa:2d:61:b2:2e:64:52:9b:5d:07:
bc:09:4d:ba:58:ca:a7:23:7e:49:3b:1f:37:57:67:
e6:52:d6:39:c3:7f:b8:45:a5:57:9f:6a:7a:59:1b:
2b:1a:b4:d3:88:07:a2:e3:87:bd:5e:58:d0:21:0e:
c2:6f:92:a8:55:86:49:19:e4:ea:4f:d9:f5:9a:fd:
fb:85:83:1e:45:16:2e:76:a5:df:0a:1e:3d:96:5d:
22:f1:06:f8:01:36:b8:1c:0f:1c:0a:d4:3e:f5:09:
51:99:34:bb:1a:12:07:57:a8:d3:bb:e6:ca:ed:be:
a2:70:99:c4:c2:74:c3:4f:3c:1f:b7:b0:2e:da:ca:
b3:39:bd:54:2c:a7:6b:83:bc:14:52:cb:49:12:23:
91:3c:5d:4e:33:d2:8d:93:88:00:f8:31:af:b5:aa:
ff:d8:ef:a3:b5:8b:4c:ae:a4:d8:ce:77:fc:9e:cd:
ca:7c:a7:96:1c:be:11:c2:17:45:e4:e4:46:1d:d4:
aa:9c:ac:ea:7e:2b:27:11:41:62:04:70:9d:3a:a6:
be:55:76:bf:32:59:92:10:aa:8a:df:e7:ad:61:40:
3e:d3:70:c5:29:c7:07:e4:ff:a8:fe:e6:bf:e3:a0:
16:e8:a0:d8:c8:2c:01:86:33:09:95:8c:38:40:77:
79:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:73:E9:F7:42:79:70:07:88:E3:67:58:4E:B8:42:E4:23:C1:5D:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/83Pp90J5cAeI42dYTrhC5CPBXS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.156.0/24
151.240.159.0/24
151.240.162.0/24
151.240.164.0/24
151.240.166.0/24
151.240.168.0/24
151.240.170.0/24
151.240.172.0/24
151.240.174.0/24
151.240.176.0/24
151.240.178.0/24
151.240.219.0/24
151.240.221.0/24
151.240.223.0/24
151.240.225.0/24
151.241.34.0/24
151.241.38.0/24
151.241.42.0/24
151.241.44.0/24
151.241.46.0/24
151.241.49.0/24
151.241.114.0/24
151.241.118.0/24
151.241.120.0/23
151.241.124.0/24
151.241.126.0/24
151.242.82.0/24
151.242.141.0/24
151.244.7.0/24
151.244.9.0-151.244.10.255
151.244.13.0/24
151.244.15.0/24
151.244.25.0/24
151.244.27.0/24
151.244.29.0/24
151.244.31.0/24
151.244.33.0/24
151.244.35.0/24
151.244.37.0/24
151.244.39.0/24
151.244.41.0/24
151.244.43.0/24
151.244.45.0/24
151.244.47.0/24
151.244.49.0/24
151.244.51.0/24
151.244.53.0/24
151.244.71.0/24
151.244.74.0/24
151.244.94.0/24
151.244.96.0/24
151.244.98.0/24
151.244.100.0/24
151.244.104.0/24
151.244.165.0/24
151.244.197.0/24
151.244.200.0/24
151.244.202.0/24
151.245.7.0/24
151.245.17.0/24
151.245.19.0/24
151.245.21.0/24
151.245.23.0/24
151.245.27.0/24
151.245.31.0/24
151.245.33.0/24
151.245.35.0/24
151.245.37.0/24
151.245.39.0/24
151.245.41.0/24
151.245.43.0/24
151.245.45.0/24
151.245.47.0/24
151.245.49.0/24
151.245.51.0/24
151.245.53.0/24
151.245.55.0/24
151.245.71.0/24
151.245.73.0/24
151.245.75.0/24
151.245.93.0/24
151.245.95.0/24
151.245.97.0/24
151.245.99.0/24
151.245.101.0/24
151.245.103.0/24
151.245.105.0/24
151.245.107.0/24
151.245.135.0/24
151.245.197.0/24
151.245.200.0/24
151.245.202.0/24
151.247.189.0-151.247.190.255
Signature Algorithm: sha256WithRSAEncryption
30:a6:4b:c7:4d:88:7d:46:4b:7d:d1:c6:f9:31:2a:96:f4:5c:
35:d8:f5:46:d6:1b:d5:6c:df:3f:3f:68:01:6a:eb:a6:9e:2e:
e1:34:b6:31:83:92:03:76:94:61:d6:e3:a8:e0:88:d6:d4:80:
25:15:79:71:13:03:73:69:65:2e:35:1e:11:17:0a:a3:e7:b9:
8c:35:e2:03:63:17:4b:32:2c:e9:5a:13:60:79:2b:72:09:37:
0c:01:87:cf:55:49:dc:36:a7:0f:d3:e9:f1:78:e6:f8:7e:59:
3b:52:be:e6:e4:95:af:0e:46:c8:57:31:26:87:f1:5b:21:7d:
d9:ef:23:8c:32:79:7d:67:54:18:63:7e:a1:48:94:7f:03:1f:
70:05:d8:94:ec:14:77:84:91:d6:cd:63:88:f4:4b:25:50:26:
4b:d6:91:df:18:08:ab:70:d5:32:6e:84:f9:a2:6c:bd:b2:7a:
d3:e1:f0:fa:23:2c:bc:1d:88:8d:82:92:8f:55:87:25:3f:fc:
3e:25:17:9b:35:07:36:d8:55:a0:9e:f8:74:b5:62:d9:1a:06:
80:bb:3d:c7:43:5a:35:cb:92:c3:b0:ee:b3:be:23:89:90:cc:
c3:73:3a:15:d6:aa:bc:42:8c:f8:76:66:ce:29:90:92:2a:5a:
15:9a:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:58:25 2026 by rpki-client