Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JdGvoLMgmHdBM35rr5bZVdnVoCU.roa
File: JdGvoLMgmHdBM35rr5bZVdnVoCU.roa (raw, json)
Hash identifier: jx/w9zbawgaNKZrbsscQu/wWzH3ZE+TJ+qrK/CM/rfE=
Subject key identifier: 25:D1:AF:A0:B3:20:98:77:41:33:7E:6B:AF:96:D9:55:D9:D5:A0:25
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D7D50D09ECF5D7B54D24E261F715461BD
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JdGvoLMgmHdBM35rr5bZVdnVoCU.roa
Signing time: Sat 11 Apr 2026 16:12:21 +0000
ROA not before: Sat 11 Apr 2026 16:12:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.246.144.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:7d:50:d0:9e:cf:5d:7b:54:d2:4e:26:1f:71:54:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 11 16:12:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25d1afa0b320987741337e6baf96d955d9d5a025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a6:ef:0f:ef:d1:cf:3f:4a:f5:74:72:39:33:
be:a0:1c:02:c1:fd:82:7d:97:74:d3:18:3b:47:ca:
d2:e6:f0:13:13:6d:82:84:e6:42:9d:dc:3f:7b:8b:
6f:2d:82:4b:b2:e9:d0:c4:c3:28:b7:cf:17:80:7e:
9e:56:0b:71:c6:ee:38:a5:75:f3:ae:83:df:85:2f:
6d:62:17:dc:65:d8:36:d8:70:cc:cd:63:98:eb:d4:
4e:72:f8:02:c5:e3:c2:a2:0a:39:ec:99:31:fd:12:
ee:4c:e8:aa:84:c4:3c:b7:3d:c9:38:d3:55:7b:5e:
38:71:fd:5d:b8:ca:cb:d7:8c:dc:f9:76:5a:d4:7f:
d4:c5:d4:67:5a:61:c5:be:80:c9:45:2f:57:dd:2f:
35:ca:34:17:8c:2d:73:f8:88:43:1c:28:01:c9:cd:
fc:23:bf:3a:7c:74:70:77:79:f6:d9:5d:a4:58:8d:
77:0a:00:50:be:3c:b3:14:2b:af:dd:78:1c:44:81:
5f:fb:73:64:00:49:57:f9:e2:c8:f8:a1:4c:5b:11:
6c:8c:88:31:1c:9b:90:fd:20:42:12:c8:48:af:ab:
0e:00:14:7a:89:45:fb:bb:93:90:f7:e5:24:aa:6c:
72:a3:e9:cf:25:4b:60:29:d2:c0:e5:77:60:90:db:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D1:AF:A0:B3:20:98:77:41:33:7E:6B:AF:96:D9:55:D9:D5:A0:25
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JdGvoLMgmHdBM35rr5bZVdnVoCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.246.144.0/24
151.247.48.0/24
151.247.76.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
80:2e:53:92:74:19:19:fa:04:11:94:7c:bd:ee:8d:49:3e:4e:
87:09:9d:ac:df:09:de:35:15:a2:90:c6:b4:9b:f6:4c:84:b1:
58:1e:9a:c6:19:76:4d:42:f9:be:2a:4a:5e:44:7c:f8:26:25:
fd:60:65:5f:69:d0:94:b6:06:c1:6b:8a:a3:a7:ae:38:14:15:
ca:4f:9e:70:7d:65:ee:70:7d:a0:8f:ef:72:e5:50:85:57:15:
d9:d2:aa:31:3b:2c:a0:92:a5:43:d6:63:b6:96:2f:15:7c:ca:
f8:9c:75:ab:f3:40:7e:03:46:0c:04:55:fd:75:03:91:8f:52:
3f:b3:67:09:86:da:ba:d7:dc:00:8f:57:59:21:8e:27:56:99:
36:31:18:99:c0:20:d3:3b:29:f5:3e:e8:21:74:17:b3:22:67:
b5:f3:6a:23:03:a4:3a:ed:21:bf:5c:49:5c:12:b8:cf:8f:3d:
8e:b0:8b:80:41:bb:d7:92:79:90:7c:b3:7e:a7:3f:68:3f:c0:
52:ce:3c:46:fd:f4:01:9c:35:52:76:77:8a:91:c7:3c:de:34:
be:7c:ba:57:8b:05:ea:74:6a:8e:2c:1f:d0:eb:db:8e:2c:de:
1b:c1:32:61:fa:0b:a3:1d:5a:e9:b1:66:80:d7:08:38:93:cc:
bc:87:82:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:06:26 2026 by rpki-client