Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8XXZOsE5qqOLYBfvsJQwISwjv4U.roa
File: 8XXZOsE5qqOLYBfvsJQwISwjv4U.roa (raw, json)
Hash identifier: DSIHLz2HiOT4uM8Rvy3yXbwH9BKudG5uktFDSSFKQsU=
Subject key identifier: F1:75:D9:3A:C1:39:AA:A3:8B:60:17:EF:B0:94:30:21:2C:23:BF:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB070594C57E6A916C65AE90D8AAE459D
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8XXZOsE5qqOLYBfvsJQwISwjv4U.roa
Signing time: Wed 10 Jun 2026 07:30:13 +0000
ROA not before: Wed 10 Jun 2026 07:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51082
IP address blocks: 151.240.110.0/24 maxlen: 24
151.240.115.0/24 maxlen: 24
151.240.122.0/24 maxlen: 24
151.241.140.0/24 maxlen: 24
151.243.139.0/24 maxlen: 24
151.246.144.0/24 maxlen: 24
151.247.117.0/24 maxlen: 24
151.247.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b0:70:59:4c:57:e6:a9:16:c6:5a:e9:0d:8a:ae:45:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 07:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f175d93ac139aaa38b6017efb09430212c23bf85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:90:e7:78:81:04:9b:0c:1a:57:a1:84:75:a1:
c0:c7:5c:ee:33:bb:6b:31:f7:ca:71:68:65:31:ff:
07:7d:31:63:ee:aa:f3:12:38:68:b0:bb:44:af:1f:
87:53:88:f6:41:b0:b8:c7:75:9b:38:71:78:23:aa:
ce:bc:42:7b:84:ba:47:2b:ce:fc:10:20:86:ea:42:
1c:92:f0:b0:02:17:61:30:9b:a3:af:1d:1f:62:d9:
8b:76:af:6a:57:6f:00:ae:21:9f:ce:96:c1:1a:26:
ff:db:ea:aa:b9:34:f8:7a:db:53:bd:a4:5f:6c:43:
42:d7:70:eb:fa:a9:14:50:69:c4:97:6f:5d:cf:f0:
7a:0f:62:c0:4a:4c:c7:46:56:b8:06:c1:76:6c:82:
2f:aa:f0:1c:d2:ff:b8:29:28:14:ce:a1:43:56:00:
42:72:7e:35:a3:e2:8f:20:23:58:c8:b7:d4:88:1d:
8c:27:3a:19:02:51:6c:60:2f:a4:3a:d0:35:2b:86:
6f:9c:de:77:28:30:c9:30:d2:9e:31:53:3f:f8:95:
25:8a:50:33:a2:7d:a7:44:ed:21:59:ba:16:ef:2d:
bc:89:65:d7:36:ed:4f:40:7c:31:8f:2f:9c:c4:ec:
f2:06:f0:35:1a:81:ef:e3:8a:7a:b6:9f:0c:9b:77:
d9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:75:D9:3A:C1:39:AA:A3:8B:60:17:EF:B0:94:30:21:2C:23:BF:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/8XXZOsE5qqOLYBfvsJQwISwjv4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.110.0/24
151.240.115.0/24
151.240.122.0/24
151.241.140.0/24
151.243.139.0/24
151.246.144.0/24
151.247.117.0/24
151.247.147.0/24
Signature Algorithm: sha256WithRSAEncryption
48:ae:d2:90:1a:7f:4d:aa:fa:e2:f3:57:8d:26:56:fc:2d:ff:
8e:2e:f2:6a:33:83:d6:89:a7:1f:54:06:41:17:cd:e7:bb:f1:
1b:c5:ca:86:a3:ad:27:82:cd:ec:be:4c:fc:19:81:f7:fd:e6:
3f:dd:35:dc:25:9e:f2:54:bf:78:85:17:b2:68:c1:43:8e:6f:
ed:bf:c1:9c:45:c4:50:b2:6b:91:7a:53:9d:26:1b:87:2d:53:
e8:22:62:ad:b1:42:17:3e:a0:72:ae:6b:13:44:8e:c9:59:c0:
66:e9:9c:b5:36:e1:c0:6b:96:da:d0:66:02:91:57:5e:1f:55:
1c:42:3a:3e:bf:1c:ad:09:6f:83:2f:8c:ae:26:1b:00:b1:d9:
63:f3:a6:fb:45:a9:a4:5d:97:a5:9d:59:07:7e:7d:fb:48:d1:
8c:d0:f1:60:c1:c3:2c:16:dc:ba:74:17:5f:83:ce:f9:f7:17:
7a:a2:9d:70:7c:65:0d:4c:70:62:7c:c3:a0:09:93:9b:e9:10:
f0:1b:eb:6f:08:77:b0:4c:b9:dc:52:82:71:ec:59:ab:7f:45:
ab:1a:71:e0:3b:d9:dc:e3:cb:ac:34:fc:ec:8a:37:f1:3f:77:
76:0b:49:42:25:43:7f:1d:9c:05:78:13:58:f6:e5:f5:77:80:
e8:e2:8b:b2
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZ6wcFlMV+apFsZa6Q2KrkWdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjEwMDczMDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTc1ZDkzYWMxMzlhYWEzOGI2MDE3ZWZiMDk0MzAyMTJjMjNiZjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZDneIEEmwwaV6GEdaHAx1zuM7tr
MffKcWhlMf8HfTFj7qrzEjhosLtErx+HU4j2QbC4x3WbOHF4I6rOvEJ7hLpHK878
ECCG6kIckvCwAhdhMJujrx0fYtmLdq9qV28AriGfzpbBGib/2+qquTT4ettTvaRf
bENC13Dr+qkUUGnEl29dz/B6D2LASkzHRla4BsF2bIIvqvAc0v+4KSgUzqFDVgBC
cn41o+KPICNYyLfUiB2MJzoZAlFsYC+kOtA1K4ZvnN53KDDJMNKeMVM/+JUlilAz
on2nRO0hWboW7y28iWXXNu1PQHwxjy+cxOzyBvA1GoHv44p6tp8Mm3fZQQIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFPF12TrBOaqji2AX77CUMCEsI7+FMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvOFhYWk9zRTVxcU9MWUJmdnNKUXdJU3dqdjRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQAl/BuAwQA
l/BzAwQAl/B6AwQAl/GMAwQAl/OLAwQAl/aQAwQAl/d1AwQAl/eTMA0GCSqGSIb3
DQEBCwUAA4IBAQBIrtKQGn9Nqvri81eNJlb8Lf+OLvJqM4PWiacfVAZBF83nu/Eb
xcqGo60ngs3svkz8GYH3/eY/3TXcJZ7yVL94hReyaMFDjm/tv8GcRcRQsmuRelOd
JhuHLVPoImKtsUIXPqByrmsTRI7JWcBm6Zy1NuHAa5ba0GYCkVdeH1UcQjo+vxyt
CW+DL4yuJhsAsdlj86b7RamkXZelnVkHfn37SNGM0PFgwcMsFty6dBdfg8759xd6
op1wfGUNTHBifMOgCZOb6RDwG+tvCHewTLncUoJx7Fmrf0WrGnHgO9nc48usNPzs
ijfxP3d2C0lCJUN/HZwFeBNY9uX1d4Do4ouy
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:34:52 2026 by rpki-client