Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W36FcvW_fEdz2NPHEArDst6b3sY.roa
File: W36FcvW_fEdz2NPHEArDst6b3sY.roa (raw, json)
Hash identifier: fNHjYb0V6WgP7lX748nLJRU0SBev9t8nKZh8n0MJPU0=
Subject key identifier: 5B:7E:85:72:F5:BF:7C:47:73:D8:D3:C7:10:0A:C3:B2:DE:9B:DE:C6
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A09F9AAC50C4E79FBE28CFA0E7B07ED623
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W36FcvW_fEdz2NPHEArDst6b3sY.roa
Signing time: Mon 14 Sep 2026 11:08:28 +0000
ROA not before: Mon 14 Sep 2026 11:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 151.241.146.0/24 maxlen: 24
151.242.152.0/24 maxlen: 24
151.242.153.0/24 maxlen: 24
151.243.130.0/24 maxlen: 24
151.245.147.0/24 maxlen: 24
151.247.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:9a:ac:50:c4:e7:9f:be:28:cf:a0:e7:b0:7e:d6:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 14 11:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5b7e8572f5bf7c4773d8d3c7100ac3b2de9bdec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:62:5f:02:dc:00:3f:6d:4b:d1:b9:d1:87:0a:
2e:29:8c:db:41:51:70:7d:18:44:22:e1:3f:e8:fc:
95:a7:65:01:96:20:25:96:3f:4c:3e:e4:59:77:14:
7b:ac:36:c1:86:b5:c8:c6:77:65:82:f9:5e:d8:3d:
54:1b:5c:40:cd:0f:38:43:ff:df:bd:20:e7:dd:a4:
e4:7f:4e:86:49:de:a7:2b:e1:de:a5:b5:39:29:a1:
2e:f6:41:bb:13:b1:52:5f:5e:de:4c:a7:7b:bd:4f:
92:a0:33:a9:3b:ef:48:9a:cf:4c:ab:10:cf:29:04:
ae:fd:9d:2f:25:75:fb:c8:39:3d:5a:fe:0c:bd:19:
6b:8b:13:04:8a:7d:b5:cf:66:00:74:8c:f2:e0:ca:
2c:97:f9:69:0e:fb:2b:35:a0:78:af:fa:d9:44:92:
2a:b4:82:ec:dd:5a:32:22:c1:e7:b5:02:9d:1f:b0:
4c:d1:09:eb:4b:df:00:b7:83:1a:11:0a:c1:19:b2:
a2:a5:ff:f9:f7:24:cd:5e:fa:9c:3f:1c:58:e0:6c:
7f:e7:bc:07:92:95:49:da:75:95:81:40:4d:9b:b1:
0e:28:43:48:06:e1:81:40:85:f9:88:e7:78:49:ff:
80:3e:d4:ab:37:50:d7:3e:55:20:1b:03:30:6a:bc:
ee:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7E:85:72:F5:BF:7C:47:73:D8:D3:C7:10:0A:C3:B2:DE:9B:DE:C6
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/W36FcvW_fEdz2NPHEArDst6b3sY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.146.0/24
151.242.152.0/23
151.243.130.0/24
151.245.147.0/24
151.247.0.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2d:e6:d3:15:5f:ab:1f:52:5e:65:d2:90:8e:6f:7b:e2:5e:
90:69:f1:73:df:3f:bf:85:10:e5:0e:f1:17:95:ca:58:13:95:
f7:45:50:f6:6f:92:46:b3:b2:03:e1:04:4c:e3:18:5e:18:dd:
16:0e:41:95:b1:b1:15:a8:8f:70:f4:41:8c:e1:35:81:17:d0:
fa:ff:32:e6:4f:b6:1a:ed:e0:12:e4:76:b0:40:4d:b0:74:5c:
7d:7e:61:fc:08:6e:00:50:d2:be:ba:35:18:25:75:17:13:79:
b2:d2:f8:cc:d1:8b:bc:ae:2c:5c:6a:59:80:7e:8a:a8:b9:cb:
a1:9d:ab:84:17:9d:3c:91:da:e6:26:45:83:82:99:04:f0:cd:
9e:45:68:82:1b:77:ac:15:f7:b6:a6:74:07:af:b9:02:37:0d:
d6:1e:4f:99:dc:ae:99:6b:9f:4e:74:04:24:8a:9e:62:6d:20:
d0:61:3d:dc:bf:8e:27:a2:84:62:95:a9:f1:76:cb:b6:fa:7f:
9b:8f:81:63:07:0e:80:a4:26:8b:17:05:16:d2:69:f6:23:dd:
74:de:4a:59:de:70:22:c2:21:55:16:12:57:3d:17:fc:da:3e:
40:36:9a:ff:04:10:6a:c9:c6:31:a8:74:9f:19:bc:6a:a3:47:
46:fa:b8:b5
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAaCfmqxQxOefvijPoOewftYjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE0MTEwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjdlODU3MmY1YmY3YzQ3NzNkOGQzYzcxMDBhYzNiMmRlOWJkZWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGJfAtwAP21L0bnRhwouKYzbQVFw
fRhEIuE/6PyVp2UBliAllj9MPuRZdxR7rDbBhrXIxndlgvle2D1UG1xAzQ84Q//f
vSDn3aTkf06GSd6nK+HepbU5KaEu9kG7E7FSX17eTKd7vU+SoDOpO+9Ims9MqxDP
KQSu/Z0vJXX7yDk9Wv4MvRlrixMEin21z2YAdIzy4Mosl/lpDvsrNaB4r/rZRJIq
tILs3VoyIsHntQKdH7BM0QnrS98At4MaEQrBGbKipf/59yTNXvqcPxxY4Gx/57wH
kpVJ2nWVgUBNm7EOKENIBuGBQIX5iOd4Sf+APtSrN1DXPlUgGwMwarzuxwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFFt+hXL1v3xHc9jTxxAKw7Lem97GMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvVzM2RmN2V19mRWR6Mk5QSEVBckRzdDZiM3NZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAl/GSAwQB
l/KYAwQAl/OCAwQAl/WTAwQAl/cAMA0GCSqGSIb3DQEBCwUAA4IBAQBZLebTFV+r
H1JeZdKQjm974l6QafFz3z+/hRDlDvEXlcpYE5X3RVD2b5JGs7ID4QRM4xheGN0W
DkGVsbEVqI9w9EGM4TWBF9D6/zLmT7Ya7eAS5HawQE2wdFx9fmH8CG4AUNK+ujUY
JXUXE3my0vjM0Yu8rixcalmAfoqoucuhnauEF508kdrmJkWDgpkE8M2eRWiCG3es
Ffe2pnQHr7kCNw3WHk+Z3K6Za59OdAQkip5ibSDQYT3cv44nooRilanxdsu2+n+b
j4FjBw6ApCaLFwUW0mn2I9103kpZ3nAiwiFVFhJXPRf82j5ANpr/BBBqycYxqHSf
Gbxqo0dG+ri1
-----END CERTIFICATE-----
Generated at Sun Sep 20 14:45:09 2026 by rpki-client