Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8FMiwaSecWvFLe7i-qfbEQcoVjM.roa
File: 8FMiwaSecWvFLe7i-qfbEQcoVjM.roa (raw, json)
Hash identifier: 55QklnBSsZhhKKHgXy0wsg1r9TfT8JSDzeCDxrVzbMk=
Subject key identifier: F0:53:22:C1:A4:9E:71:6B:C5:2D:EE:E2:FA:A7:DB:11:07:28:56:33
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0196706BBD53330EAD68FBB100C5341C422D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8FMiwaSecWvFLe7i-qfbEQcoVjM.roa
Signing time: Sat 26 Apr 2025 04:47:11 +0000
ROA not before: Sat 26 Apr 2025 04:47:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 151.240.0.0/24 maxlen: 24
151.240.1.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.3.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.8.0/24 maxlen: 24
151.240.9.0/24 maxlen: 24
151.240.10.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.28.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.43.0/24 maxlen: 24
151.240.44.0/24 maxlen: 24
151.240.46.0/24 maxlen: 24
151.240.47.0/24 maxlen: 24
151.240.48.0/24 maxlen: 24
151.240.49.0/24 maxlen: 24
151.240.50.0/24 maxlen: 24
151.240.51.0/24 maxlen: 24
151.240.52.0/24 maxlen: 24
151.240.53.0/24 maxlen: 24
151.240.54.0/24 maxlen: 24
151.240.55.0/24 maxlen: 24
151.240.56.0/24 maxlen: 24
151.240.57.0/24 maxlen: 24
151.240.58.0/24 maxlen: 24
151.240.59.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.62.0/24 maxlen: 24
151.240.63.0/24 maxlen: 24
151.240.64.0/24 maxlen: 24
151.240.65.0/24 maxlen: 24
151.240.66.0/24 maxlen: 24
151.240.67.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.77.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.91.0/24 maxlen: 24
151.240.92.0/24 maxlen: 24
151.240.93.0/24 maxlen: 24
151.240.94.0/24 maxlen: 24
151.240.95.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.100.0/24 maxlen: 24
151.240.101.0/24 maxlen: 24
151.240.102.0/24 maxlen: 24
151.240.103.0/24 maxlen: 24
151.240.104.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.106.0/24 maxlen: 24
151.240.107.0/24 maxlen: 24
151.240.108.0/24 maxlen: 24
151.240.109.0/24 maxlen: 24
151.240.110.0/24 maxlen: 24
151.240.111.0/24 maxlen: 24
151.240.112.0/24 maxlen: 24
151.240.113.0/24 maxlen: 24
151.240.114.0/24 maxlen: 24
151.240.115.0/24 maxlen: 24
151.240.116.0/24 maxlen: 24
151.240.117.0/24 maxlen: 24
151.240.118.0/24 maxlen: 24
151.240.119.0/24 maxlen: 24
151.240.120.0/24 maxlen: 24
151.240.121.0/24 maxlen: 24
151.240.122.0/24 maxlen: 24
151.240.123.0/24 maxlen: 24
151.240.124.0/24 maxlen: 24
151.240.125.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.226.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.230.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.243.0/24 maxlen: 24
151.240.244.0/24 maxlen: 24
151.240.245.0/24 maxlen: 24
151.240.246.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.240.251.0/24 maxlen: 24
151.240.252.0/24 maxlen: 24
151.240.253.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:70:6b:bd:53:33:0e:ad:68:fb:b1:00:c5:34:1c:42:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 26 04:47:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f05322c1a49e716bc52deee2faa7db1107285633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:e9:6b:89:58:92:3d:7e:d6:03:93:95:b3:
24:2c:f9:ea:87:81:65:13:5f:6e:12:2f:ff:41:f6:
38:29:3f:c3:d0:08:9c:b4:60:6a:ca:45:5c:fd:0f:
25:b2:9f:da:d0:19:3e:65:e5:06:94:8a:01:1f:05:
a3:2c:c4:aa:f3:f3:94:42:d3:42:30:cf:b5:29:56:
53:90:41:57:83:5d:8d:2e:29:be:09:ec:1c:c6:ed:
16:14:bb:18:03:43:61:6d:a6:7e:ad:74:d1:38:ed:
3d:a8:d7:b8:d6:89:9c:85:97:1d:95:83:3a:6f:1a:
6a:ee:3c:66:7d:c5:83:81:47:33:d5:c2:4f:69:e0:
1d:a2:a2:83:d5:b0:28:a7:f2:ba:5a:d0:c7:e7:1e:
5e:8e:f4:37:a8:8d:af:12:7c:4a:e1:26:5e:f6:a7:
d0:fa:6c:3a:77:88:79:17:a0:61:28:64:8c:52:f5:
32:1f:30:bb:c1:5d:35:0c:b2:eb:37:6c:26:ec:95:
7e:e6:ea:90:58:7e:2f:90:4d:51:a5:a1:59:53:2b:
27:0f:fb:30:11:9d:ec:1b:b2:c0:a3:05:03:de:4d:
ba:51:6e:5c:dd:8c:0e:29:19:c3:65:27:02:4c:4c:
25:66:a7:15:1e:5d:1f:81:c7:4a:65:72:63:56:e1:
c2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:53:22:C1:A4:9E:71:6B:C5:2D:EE:E2:FA:A7:DB:11:07:28:56:33
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8FMiwaSecWvFLe7i-qfbEQcoVjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0-151.240.44.255
151.240.46.0-151.240.154.255
151.240.156.0-151.240.255.255
Signature Algorithm: sha256WithRSAEncryption
35:88:11:24:88:23:6f:ef:2f:88:8d:4d:04:5f:d7:b4:8d:eb:
cc:74:1f:b1:ff:78:cd:24:e2:e7:9f:ba:c2:dd:aa:52:31:5b:
f4:7a:2c:ef:e3:55:c0:06:45:f9:a4:ef:fa:ca:f2:05:cc:41:
f7:e6:82:de:28:d1:72:fa:9c:6e:79:7d:fa:fe:31:67:05:39:
07:d5:b5:a3:2d:74:91:95:e2:23:2b:7f:2b:08:a9:8a:22:83:
13:9d:29:fb:80:96:1d:4d:de:e5:c3:ee:6b:0c:16:86:cf:cc:
52:90:1f:1b:db:83:b2:0a:39:4d:89:9b:dd:60:fd:07:12:9e:
95:2e:a0:f8:f0:69:b2:22:9f:e8:19:89:d7:08:d5:62:00:e0:
77:47:85:9c:be:1f:89:77:d8:67:51:0f:5a:26:79:b1:60:ef:
b8:ba:df:9d:d5:9d:ed:ff:d9:57:06:0d:f3:1a:2a:5a:4f:c0:
ad:c0:2f:cb:e2:44:49:d8:21:58:d3:e5:25:b8:fe:b2:75:8f:
a4:e3:d4:d2:67:31:cd:a9:5c:5a:ea:5f:01:35:ec:8b:3f:ff:
8e:61:da:a8:f2:3e:6b:5c:c3:24:b8:43:3e:c0:56:02:55:e9:
ac:a7:66:f6:ea:80:31:66:99:71:55:21:95:75:d8:43:72:04:
1e:fe:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:55:42 2025 by rpki-client