Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhevA-tslKHSEpcrL3FaLsVCv4o.roa
File: DhevA-tslKHSEpcrL3FaLsVCv4o.roa (raw, json)
Hash identifier: fXtTZqndQanUTPGzTxzW9V5Mg7KK4N2RwVsDQzUm2EY=
Subject key identifier: 0E:17:AF:03:EB:6C:94:A1:D2:12:97:2B:2F:71:5A:2E:C5:42:BF:8A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C5FD22C2FD31364C0DC9285D5BD5D0917
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhevA-tslKHSEpcrL3FaLsVCv4o.roa
Signing time: Sun 15 Feb 2026 05:42:15 +0000
ROA not before: Sun 15 Feb 2026 05:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.247.38.0/24 maxlen: 24
151.247.39.0/24 maxlen: 24
151.247.42.0/24 maxlen: 24
151.247.43.0/24 maxlen: 24
151.247.49.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
151.247.93.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:d2:2c:2f:d3:13:64:c0:dc:92:85:d5:bd:5d:09:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 15 05:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0e17af03eb6c94a1d212972b2f715a2ec542bf8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:76:b7:f6:e8:92:d8:70:cf:05:98:15:1b:ee:
8e:cd:aa:ce:82:6c:65:13:93:14:f1:98:63:3f:78:
20:65:5e:38:6a:0c:16:6c:ee:47:e4:e0:04:bb:78:
08:f6:74:0a:e8:2f:45:19:1d:82:cc:e9:46:62:12:
66:ac:4b:de:0b:8e:59:6e:b4:40:bb:02:dc:50:c9:
08:28:c7:ef:d0:04:68:fe:c1:e4:9d:a7:17:9f:bf:
46:ee:96:19:b5:0a:7c:ac:db:23:a2:6f:fc:0e:0a:
61:81:ad:e8:16:9f:6e:fc:c2:ea:b2:ff:6b:76:89:
1b:99:70:18:af:d2:0b:e8:04:25:0d:36:3a:ca:64:
82:34:dd:b0:39:b9:1c:87:09:a2:26:b7:26:e9:de:
66:90:a5:22:50:d6:49:c0:ba:6e:8c:c0:6e:0f:ec:
e9:a1:41:31:55:b6:a5:f5:8f:fb:ec:09:fa:a1:cf:
27:ab:53:53:75:db:66:cd:bb:9a:75:77:df:6e:4b:
e7:b3:7a:3c:34:ec:d3:08:6e:17:8e:56:dc:24:02:
00:8c:c3:2c:13:89:a5:5c:62:cf:bc:67:83:34:17:
b0:f5:48:f8:42:46:96:78:d7:68:61:60:8d:97:b7:
52:74:90:34:5c:8f:22:a0:0a:04:1c:d4:de:45:6e:
03:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:AF:03:EB:6C:94:A1:D2:12:97:2B:2F:71:5A:2E:C5:42:BF:8A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/DhevA-tslKHSEpcrL3FaLsVCv4o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.245.69.0/24
151.245.166.0/24
151.245.177.0/24
151.247.38.0/23
151.247.42.0/23
151.247.49.0/24
151.247.54.0/24
151.247.93.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fd:5b:f3:c8:a5:95:48:17:f0:85:88:09:34:86:7b:94:d7:
4b:9f:9b:e6:30:67:59:34:e7:bb:ec:64:3c:a1:82:c7:d0:f8:
a7:3d:3e:1d:2c:72:da:64:7e:9d:ef:6d:78:0e:b3:27:c4:6e:
7b:8c:2a:92:84:39:37:a8:74:6f:64:68:e7:83:0f:b2:f5:ec:
a2:ca:59:9b:c3:9b:2a:4b:a4:f0:93:e7:28:53:8c:b6:81:c9:
d8:4c:d6:cf:a7:ae:f9:13:7d:6a:b6:55:78:70:2d:39:a8:c2:
86:3e:60:21:fe:14:e7:78:a1:b6:40:20:b0:06:54:9e:eb:f0:
09:92:b0:65:b7:0f:a8:73:9f:bf:3c:2f:c9:76:8b:71:3d:ec:
7b:4b:32:1c:6e:ab:99:b9:75:c5:10:d9:7a:e2:f2:d8:0e:c9:
fd:ab:bf:53:ff:e8:a4:7b:a5:61:a2:f0:6b:4d:17:4a:1d:0d:
c2:e6:8a:24:6a:67:f7:6f:69:8c:66:f0:0f:5e:43:84:3b:b0:
dd:e8:ac:7b:34:44:91:cb:7d:68:c9:bc:78:b6:c0:48:f6:52:
e6:6f:1c:aa:6c:d1:13:04:5b:66:bd:67:0e:a9:a6:ad:fa:db:
f4:43:22:23:34:04:a8:b7:62:41:e3:10:e7:2c:93:dc:45:59:
1a:74:00:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:00:29 2026 by rpki-client