Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RLoeJX2qkGJ0k6BAgvUN_f4-iIU.roa
File: RLoeJX2qkGJ0k6BAgvUN_f4-iIU.roa (raw, json)
Hash identifier: 4HUEokNcAQBLO2RcHjoNiIySL5zsnwxvxdxlwDzHl20=
Subject key identifier: 44:BA:1E:25:7D:AA:90:62:74:93:A0:40:82:F5:0D:FD:FE:3E:88:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D51EAF91DA57BC9BE85D0A8746DF73F0C
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RLoeJX2qkGJ0k6BAgvUN_f4-iIU.roa
Signing time: Fri 03 Apr 2026 05:57:26 +0000
ROA not before: Fri 03 Apr 2026 05:57:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139057
IP address blocks: 151.240.9.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.20.0/22 maxlen: 22
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.119.0/24 maxlen: 24
151.240.124.0/24 maxlen: 24
151.242.210.0/24 maxlen: 24
151.242.211.0/24 maxlen: 24
151.242.212.0/24 maxlen: 24
151.242.213.0/24 maxlen: 24
151.242.214.0/24 maxlen: 24
151.242.215.0/24 maxlen: 24
151.242.216.0/24 maxlen: 24
151.242.217.0/24 maxlen: 24
151.242.218.0/24 maxlen: 24
151.242.219.0/24 maxlen: 24
151.242.220.0/24 maxlen: 24
151.242.221.0/24 maxlen: 24
151.242.222.0/24 maxlen: 24
151.242.223.0/24 maxlen: 24
151.242.228.0/24 maxlen: 24
151.242.229.0/24 maxlen: 24
151.242.230.0/24 maxlen: 24
151.242.231.0/24 maxlen: 24
151.242.232.0/24 maxlen: 24
151.242.233.0/24 maxlen: 24
151.242.234.0/24 maxlen: 24
151.242.235.0/24 maxlen: 24
151.242.240.0/24 maxlen: 24
151.242.241.0/24 maxlen: 24
151.242.243.0/24 maxlen: 24
151.242.244.0/24 maxlen: 24
151.243.53.0/24 maxlen: 24
151.243.58.0/24 maxlen: 24
151.243.59.0/24 maxlen: 24
151.243.80.0/24 maxlen: 24
151.243.81.0/24 maxlen: 24
151.243.85.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.90.0/24 maxlen: 24
151.243.91.0/24 maxlen: 24
151.243.92.0/24 maxlen: 24
151.243.94.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:51:ea:f9:1d:a5:7b:c9:be:85:d0:a8:74:6d:f7:3f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 3 05:57:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=44ba1e257daa90627493a04082f50dfdfe3e8885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:ed:93:5d:be:13:02:97:e7:df:3e:c3:a3:
91:84:39:08:de:09:6b:a8:58:15:a1:d6:01:26:7e:
0b:8e:94:80:dc:1a:88:95:53:e0:fc:63:47:7a:cf:
5b:2d:9d:2d:6f:da:fb:3e:2f:b1:3f:3b:93:5f:cb:
16:aa:0c:21:a2:7d:d4:be:d5:cc:1b:4e:ec:1a:ff:
3e:e5:93:fe:49:ec:f8:c7:63:01:18:5f:9c:05:65:
41:58:5b:a4:a2:7e:12:85:49:d3:61:25:9a:fe:a8:
31:2c:34:82:da:40:90:ff:f4:f6:12:c1:a1:83:07:
8a:e9:14:e8:17:09:32:79:9b:2c:ec:56:40:c9:47:
08:f7:56:5a:3c:c0:72:9b:fb:00:35:30:b5:17:1d:
40:6e:6e:84:a9:89:11:fb:0d:4d:bc:0e:c4:5f:b0:
a9:28:3d:40:c2:e2:8f:7b:b3:af:70:e5:07:43:36:
56:98:8b:ad:d0:40:3b:fc:d9:b0:34:f8:fb:74:48:
44:43:fd:20:b6:f5:53:8a:b2:a0:50:20:99:ec:82:
ea:29:1f:d5:40:24:11:43:30:6c:35:23:bb:10:d0:
d7:f0:1a:64:ec:9a:7c:56:27:c9:32:30:dc:84:85:
a0:a7:43:8b:5f:62:d5:5f:5a:4a:45:b3:60:9b:8e:
45:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BA:1E:25:7D:AA:90:62:74:93:A0:40:82:F5:0D:FD:FE:3E:88:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RLoeJX2qkGJ0k6BAgvUN_f4-iIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.9.0/24
151.240.14.0/24
151.240.17.0/24
151.240.20.0/22
151.240.29.0/24
151.240.31.0/24
151.240.68.0-151.240.72.255
151.240.74.0/23
151.240.78.0-151.240.82.255
151.240.84.0-151.240.86.255
151.240.96.0/24
151.240.99.0/24
151.240.119.0/24
151.240.124.0/24
151.242.210.0-151.242.223.255
151.242.228.0-151.242.235.255
151.242.240.0/23
151.242.243.0-151.242.244.255
151.243.53.0/24
151.243.58.0/23
151.243.80.0/23
151.243.85.0/24
151.243.89.0-151.243.92.255
151.243.94.0/24
151.243.96.0/24
151.243.99.0/24
151.243.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ad:b5:ba:40:25:2a:c1:3d:1b:0d:3d:3d:d8:01:41:a2:f4:
66:e7:ff:63:67:65:2e:96:f4:6e:b4:ed:b7:23:d7:3d:c8:2f:
f1:c9:c5:08:25:00:5f:20:be:88:6c:c5:51:2f:95:c3:d3:15:
4e:0a:59:03:73:c9:15:25:26:9a:3d:b2:8e:e7:27:a6:f7:9c:
ba:d2:03:b7:76:bc:34:93:cb:6d:37:ef:64:bf:1a:13:8d:cd:
ba:64:3e:2f:75:cc:35:d9:fc:58:76:74:4e:55:c2:54:62:13:
2a:bb:6f:a1:89:48:0e:74:60:70:f2:40:de:35:78:f4:2f:7e:
06:47:c8:32:c3:d3:e0:f3:a3:b8:5a:e0:cf:59:1c:4e:53:45:
43:5c:3f:b8:97:60:c7:9b:b1:26:39:51:24:07:f1:0b:67:ac:
f8:58:88:5a:b4:50:a8:7f:2e:c8:04:02:31:50:f9:f9:11:76:
a7:14:76:c0:d6:f8:4b:ad:2d:77:10:6e:47:8b:c5:cc:4a:da:
51:9a:2b:8e:d1:be:bf:f6:55:23:2d:62:b3:8d:89:bc:7c:7e:
03:f6:b8:04:37:35:db:76:64:92:50:e3:58:ee:91:2c:16:97:
b1:99:26:b4:92:d6:23:83:3d:ee:f3:7f:0c:b4:14:44:3d:93:
d6:49:75:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:27 2026 by rpki-client