Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PTTH3RkR53kP7E2Fytk_ydPlvn0.roa
File: PTTH3RkR53kP7E2Fytk_ydPlvn0.roa (raw, json)
Hash identifier: d5CzYWy5eAFhEmkJEbs+dcrjKIqnq9Nzl6zd1ih09hQ=
Subject key identifier: 3D:34:C7:DD:19:11:E7:79:0F:EC:4D:85:CA:D9:3F:C9:D3:E5:BE:7D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D639699B31F4A60F742153955AC2F4B29
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PTTH3RkR53kP7E2Fytk_ydPlvn0.roa
Signing time: Mon 06 Apr 2026 16:18:27 +0000
ROA not before: Mon 06 Apr 2026 16:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:63:96:99:b3:1f:4a:60:f7:42:15:39:55:ac:2f:4b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 6 16:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d34c7dd1911e7790fec4d85cad93fc9d3e5be7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:6e:79:8f:dd:a5:46:c3:01:9a:67:a8:04:
44:13:00:c2:a2:3e:58:e0:c4:12:27:3a:b2:ef:06:
80:74:bb:2d:64:ac:1c:f7:c3:61:45:36:be:76:83:
af:9e:7e:dd:24:b4:7c:fc:4b:0a:e9:20:cc:41:01:
ed:9f:c8:80:c1:ea:c8:73:56:cb:f9:d7:a9:af:fd:
cf:96:16:71:c5:70:ef:1e:97:21:08:91:85:b7:88:
5a:1f:a6:06:ff:4f:14:93:35:73:65:ee:20:e6:e6:
57:5f:3e:95:b4:80:35:9f:9b:4f:46:7d:85:d9:47:
6a:de:ff:6e:eb:c7:17:2d:72:86:93:74:af:0b:8f:
10:e8:44:fd:50:17:7d:77:75:8a:c2:9f:cc:93:b0:
a8:30:a8:fc:ca:32:ad:69:aa:6e:22:46:fb:f8:48:
5c:b5:b3:df:eb:8c:48:ef:08:b5:32:7a:f6:8d:19:
86:da:ad:c0:b2:5a:c0:b1:1c:f3:9e:71:ab:87:f7:
61:27:ce:ba:23:08:c3:92:0c:ba:a1:1f:37:8d:ac:
e3:bc:f0:e0:6f:db:b2:7d:de:3c:20:95:ce:a4:3d:
ae:49:d2:26:a1:07:bd:f4:96:a2:5a:e0:ef:f2:a2:
95:30:85:39:66:b0:8a:6c:f2:13:10:aa:77:19:45:
b7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:34:C7:DD:19:11:E7:79:0F:EC:4D:85:CA:D9:3F:C9:D3:E5:BE:7D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/PTTH3RkR53kP7E2Fytk_ydPlvn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.240.24.0/24
151.241.68.0/24
151.242.59.0/24
151.242.103.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.15.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
13:14:5d:80:14:ac:02:ee:03:62:ec:67:a9:fc:81:90:fa:4f:
00:be:c5:99:27:e9:6b:d6:66:53:fd:08:3e:ba:a4:97:c4:c1:
ea:48:aa:6f:5c:50:30:6a:50:c1:6d:f7:45:bc:94:1b:e6:94:
e5:8b:3e:fa:90:48:f8:12:32:d9:56:8c:d3:d4:c0:70:ae:61:
fc:21:7b:9c:46:bb:be:17:2f:03:73:cf:ac:dd:ea:21:5c:49:
7c:ee:22:21:45:82:fa:b2:c8:0c:51:81:7e:45:40:60:be:44:
9b:01:c1:f0:49:5c:80:ec:67:dd:fb:3f:73:cf:56:0a:6f:9f:
fb:0d:1f:ad:8e:c6:3c:95:9e:5c:17:2e:d5:98:58:c4:14:25:
29:e9:81:29:12:01:28:ef:3e:ca:2b:42:0b:fc:33:34:86:c6:
9c:e4:db:7e:74:61:d8:f4:2e:a6:6d:9d:c9:ab:dc:e2:ca:e2:
ae:3e:d0:f0:4f:ea:96:42:91:3f:3d:ec:04:ab:cd:2d:18:58:
03:4e:22:60:98:39:ed:07:bb:f7:a0:ab:62:0a:b1:76:6c:85:
b9:9f:b3:6b:dc:ca:04:07:9c:d0:de:00:8e:f5:0e:80:95:99:
c6:b2:86:67:3f:8a:4b:d5:55:30:10:c3:42:dd:eb:ec:ce:07:
b5:da:e7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:31 2026 by rpki-client