Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XTm0ZyqhZI5VLlC9kW_deTUg1DQ.roa
File: XTm0ZyqhZI5VLlC9kW_deTUg1DQ.roa (raw, json)
Hash identifier: bMVXpWjGI0K82l28oKAAyn7j9hkBtiOt8laxPq0rnMg=
Subject key identifier: 5D:39:B4:67:2A:A1:64:8E:55:2E:50:BD:91:6F:DD:79:35:20:D4:34
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A02E7538E72D3703E11FA1FFDA711A6D85
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XTm0ZyqhZI5VLlC9kW_deTUg1DQ.roa
Signing time: Sun 23 Aug 2026 11:50:29 +0000
ROA not before: Sun 23 Aug 2026 11:50:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 151.240.160.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.141.0/24 maxlen: 24
151.241.231.0/24 maxlen: 24
151.244.89.0/24 maxlen: 24
151.245.74.0/24 maxlen: 24
151.245.87.0/24 maxlen: 24
151.245.151.0/24 maxlen: 24
151.245.198.0/24 maxlen: 24
151.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2e:75:38:e7:2d:37:03:e1:1f:a1:ff:da:71:1a:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 23 11:50:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5d39b4672aa1648e552e50bd916fdd793520d434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:5b:ba:3e:d0:64:72:24:b0:47:ba:90:e2:d0:
d4:e4:3b:e1:9b:5a:f2:dc:1c:48:29:8f:33:70:7d:
1b:34:3c:d7:f9:04:c1:54:83:1e:27:cc:b2:5d:15:
20:99:85:13:fb:bf:b1:2d:c3:24:5e:5c:31:e7:f1:
16:ae:61:84:3a:a2:7c:c7:5d:f9:73:4e:2d:09:e2:
05:8a:06:36:eb:43:09:e2:ae:71:80:e5:da:b4:b5:
63:20:c8:c5:b6:07:7d:03:09:98:35:7c:60:9c:ae:
2d:ca:0b:11:44:ec:78:9d:75:f5:47:bc:28:fa:0d:
e1:5e:58:8a:57:25:1c:a6:ab:b5:1f:b4:53:24:b8:
2e:46:db:f1:0e:5c:15:0f:eb:c9:f8:4f:35:80:79:
ae:e8:b1:18:49:e6:6b:46:fb:32:7f:59:07:3c:67:
ed:95:39:8a:c6:12:83:92:90:3a:22:46:c8:58:79:
d3:cb:98:21:01:a5:4c:99:00:bc:7c:cb:40:19:e2:
79:ec:3d:bd:70:25:ec:1e:96:f5:60:33:41:d0:06:
0e:22:eb:6b:2d:fd:d4:e7:a8:5c:1f:a1:92:e5:0d:
53:ff:15:81:79:cd:c5:b9:8d:da:78:9c:2e:40:00:
89:5f:67:c5:59:30:f7:32:3f:68:ea:48:87:e4:28:
dd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:39:B4:67:2A:A1:64:8E:55:2E:50:BD:91:6F:DD:79:35:20:D4:34
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/XTm0ZyqhZI5VLlC9kW_deTUg1DQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.160.0/24
151.241.19.0/24
151.241.45.0/24
151.241.110.0/24
151.241.141.0/24
151.241.231.0/24
151.244.89.0/24
151.245.74.0/24
151.245.87.0/24
151.245.151.0/24
151.245.198.0/24
151.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1f:f5:f4:30:91:97:ab:dd:48:90:d3:3e:70:75:e8:9f:57:
2f:3c:8d:66:a5:1e:17:c3:c5:95:0f:a1:85:cb:6b:56:54:b6:
9b:df:0c:4b:4a:43:3a:b5:fb:6f:7f:e3:00:63:02:70:fa:89:
e8:e8:ff:37:82:8c:e5:76:80:ee:a0:91:20:03:36:8f:91:a9:
77:0b:04:42:30:c8:c8:f2:cf:6f:41:16:ba:c6:1f:47:8b:8f:
95:6f:5f:1b:9b:fc:8d:58:86:68:ef:ca:38:a2:ff:4e:c0:1b:
a4:d3:ff:72:71:4f:66:2c:68:e5:7c:80:8d:df:d9:16:48:3d:
df:c7:74:be:5f:a5:8f:a9:cb:a9:b5:4e:5d:a5:e0:f5:6c:f2:
5e:3e:91:ad:dc:fb:e7:ea:1e:a7:3a:d0:d2:ac:03:8c:ee:03:
c5:5f:d0:bb:f4:72:9b:1b:86:4e:87:d5:6e:1b:29:8a:3e:78:
30:c4:b0:b7:a3:60:df:7d:4b:6d:39:df:ea:21:c7:10:0a:a3:
4a:1d:ea:51:09:04:58:4e:ef:1c:c4:8b:7a:28:32:83:10:2e:
8d:cc:c3:ca:d6:93:5d:7c:f7:8c:84:83:fb:00:0b:aa:09:38:
0f:d1:bd:64:8f:f9:54:08:0b:7c:a2:c4:d9:4f:70:bb:04:07:
55:af:80:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:24 2026 by rpki-client