Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YH1MO4SpshPsgxYxj3bj_eALobQ.roa
File: YH1MO4SpshPsgxYxj3bj_eALobQ.roa (raw, json)
Hash identifier: soV5Cj6U4HYEsYTD3GB1GtIsnpFXYOLQh7+VNJjY4Nw=
Subject key identifier: 60:7D:4C:3B:84:A9:B2:13:EC:83:16:31:8F:76:E3:FD:E0:0B:A1:B4
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0A93C2FD9159B97D78460B4479B8A7122
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YH1MO4SpshPsgxYxj3bj_eALobQ.roa
Signing time: Wed 16 Sep 2026 08:01:28 +0000
ROA not before: Wed 16 Sep 2026 08:01:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139057
IP address blocks: 151.240.9.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.20.0/22 maxlen: 22
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.29.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.75.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.119.0/24 maxlen: 24
151.240.124.0/24 maxlen: 24
151.242.210.0/24 maxlen: 24
151.242.211.0/24 maxlen: 24
151.242.212.0/24 maxlen: 24
151.242.213.0/24 maxlen: 24
151.242.214.0/24 maxlen: 24
151.242.215.0/24 maxlen: 24
151.242.216.0/24 maxlen: 24
151.242.217.0/24 maxlen: 24
151.242.218.0/24 maxlen: 24
151.242.219.0/24 maxlen: 24
151.242.220.0/24 maxlen: 24
151.242.221.0/24 maxlen: 24
151.242.222.0/24 maxlen: 24
151.242.223.0/24 maxlen: 24
151.242.228.0/24 maxlen: 24
151.242.229.0/24 maxlen: 24
151.242.230.0/24 maxlen: 24
151.242.231.0/24 maxlen: 24
151.242.232.0/24 maxlen: 24
151.242.233.0/24 maxlen: 24
151.242.234.0/24 maxlen: 24
151.242.235.0/24 maxlen: 24
151.242.240.0/24 maxlen: 24
151.242.241.0/24 maxlen: 24
151.242.243.0/24 maxlen: 24
151.242.244.0/24 maxlen: 24
151.243.85.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.90.0/24 maxlen: 24
151.243.91.0/24 maxlen: 24
151.243.92.0/24 maxlen: 24
151.243.94.0/24 maxlen: 24
151.243.96.0/24 maxlen: 24
151.243.99.0/24 maxlen: 24
151.243.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a9:3c:2f:d9:15:9b:97:d7:84:60:b4:47:9b:8a:71:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 16 08:01:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=607d4c3b84a9b213ec8316318f76e3fde00ba1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:88:2c:b7:0f:71:2d:1a:11:a2:50:e6:7f:
29:7f:82:c0:3d:69:6f:e3:77:73:22:a6:cc:35:5b:
a6:80:9e:55:39:76:1c:a4:59:7e:0f:d4:05:08:b8:
b8:0f:c5:16:57:5b:cf:54:37:a6:7b:3a:56:cf:36:
3a:92:a7:64:ec:3f:7f:97:fb:55:71:92:aa:fc:a5:
22:da:13:bd:30:4f:85:5f:21:58:8c:5d:ad:49:5e:
77:ac:81:1d:27:37:53:c2:0c:82:33:65:58:13:1d:
d0:b7:8c:b8:38:d4:ca:fe:b5:50:5b:e5:b0:6f:22:
ea:1f:8c:ab:b5:5f:d9:84:95:02:cd:9c:d4:4a:3e:
d4:b4:08:79:22:34:cb:38:17:f9:64:e5:25:96:16:
a5:16:f4:08:2a:dc:01:12:40:48:00:9b:c0:31:8e:
cf:a3:df:d7:9f:44:bd:8d:06:93:8a:39:8a:01:e8:
50:05:2e:10:4b:32:4b:aa:3f:8e:ba:af:e9:8b:90:
04:1f:c4:ac:ed:03:f6:39:3a:ad:70:84:ae:33:13:
22:33:81:08:7a:7d:81:1f:52:53:89:0b:35:97:66:
9b:e6:d6:02:c9:e8:91:64:04:37:13:77:ad:4a:aa:
5f:26:64:a2:63:71:88:b1:3b:66:56:b9:0d:d8:b9:
ee:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7D:4C:3B:84:A9:B2:13:EC:83:16:31:8F:76:E3:FD:E0:0B:A1:B4
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YH1MO4SpshPsgxYxj3bj_eALobQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.9.0/24
151.240.14.0/24
151.240.17.0/24
151.240.20.0/22
151.240.29.0/24
151.240.31.0/24
151.240.68.0-151.240.72.255
151.240.74.0/23
151.240.78.0-151.240.82.255
151.240.84.0-151.240.86.255
151.240.96.0/24
151.240.99.0/24
151.240.119.0/24
151.240.124.0/24
151.242.210.0-151.242.223.255
151.242.228.0-151.242.235.255
151.242.240.0/23
151.242.243.0-151.242.244.255
151.243.85.0/24
151.243.89.0-151.243.92.255
151.243.94.0/24
151.243.96.0/24
151.243.99.0/24
151.243.110.0/24
Signature Algorithm: sha256WithRSAEncryption
21:8e:c7:83:d3:74:33:9c:aa:82:8f:cf:59:96:e7:1b:cb:a2:
6c:17:22:9e:16:88:58:9a:e9:25:06:2c:b5:d8:b8:b1:0c:f1:
62:15:46:18:eb:43:b4:95:cc:12:25:dc:91:df:4d:e5:69:0e:
d5:99:2f:9f:4a:31:ba:4a:cf:06:de:1e:e2:74:4c:bd:39:f7:
e2:1b:82:31:53:a1:f0:28:46:78:aa:67:76:5e:07:96:70:13:
76:1f:64:d9:04:3a:e8:ba:21:53:64:a0:db:07:21:b3:cc:54:
07:7e:02:f1:a4:05:8d:db:5e:f4:7a:01:1c:77:d0:19:21:23:
6a:65:cf:1b:69:28:45:4b:82:0a:04:6e:0e:0d:f9:21:d2:a5:
83:69:c2:7c:69:67:21:66:82:ca:03:4b:76:9c:b2:86:52:d3:
87:9a:56:7c:5e:c5:36:ee:5a:4c:e1:a9:21:7c:5b:da:21:d8:
5e:82:1c:7d:61:30:31:6c:d9:68:20:e4:8d:30:99:f2:e6:c5:
7d:a4:95:e2:e1:8c:dd:a8:82:32:61:c4:a7:aa:d4:7b:3a:5c:
5a:8b:20:5f:f5:f5:9a:12:cf:17:99:31:d4:92:b3:35:33:ab:
eb:96:3f:3d:e6:eb:c9:48:1b:d1:39:48:ac:80:33:a2:eb:03:
c5:14:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:14:43 2026 by rpki-client