Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d5Dr9Tuohh0NGsYuwkDitRlR_t4.roa
File: d5Dr9Tuohh0NGsYuwkDitRlR_t4.roa (raw, json)
Hash identifier: YrQ5i6/uhMIJ/669FZcw9wofdVvY4J8+orZm2GQBskU=
Subject key identifier: 77:90:EB:F5:3B:A8:86:1D:0D:1A:C6:2E:C2:40:E2:B5:19:51:FE:DE
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0B5258180A1BF9CA4B7DEA6CC06E5EABC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d5Dr9Tuohh0NGsYuwkDitRlR_t4.roa
Signing time: Fri 18 Sep 2026 15:32:09 +0000
ROA not before: Fri 18 Sep 2026 15:32:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397630
IP address blocks: 151.240.2.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.242.114.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.171.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.38.0/24 maxlen: 24
151.247.39.0/24 maxlen: 24
151.247.42.0/24 maxlen: 24
151.247.43.0/24 maxlen: 24
151.247.93.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:45:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:25:81:80:a1:bf:9c:a4:b7:de:a6:cc:06:e5:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 18 15:32:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7790ebf53ba8861d0d1ac62ec240e2b51951fede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:c8:be:b3:f4:bf:60:47:d4:8f:31:f7:66:
87:68:f7:8b:f4:77:c3:4d:14:c5:6c:90:da:73:f8:
4d:dc:1d:7a:6d:e5:9b:4b:4d:1e:4c:ec:d8:0e:49:
40:ac:46:94:62:cb:17:18:b3:f6:d4:56:49:e1:96:
05:30:4f:c6:9a:ce:3e:e6:64:33:b0:fa:8d:5c:67:
4d:65:61:bb:14:67:fe:2e:33:4a:0c:e4:64:68:9c:
ca:0b:8c:38:b6:95:74:11:47:82:61:96:3b:01:eb:
70:4e:9a:47:6e:75:1c:cf:ed:21:6c:b1:7c:f4:b5:
cb:85:56:c2:1d:45:2b:3a:d6:51:f7:7d:14:61:c1:
0a:0d:67:08:ee:b5:c1:53:b5:ca:33:5c:69:09:2d:
c0:b8:e9:bf:76:ce:75:84:17:03:56:bd:d7:8e:1c:
66:b6:d8:3d:98:89:da:05:40:9e:8b:ef:01:13:4f:
26:0a:78:3d:54:e5:11:25:39:0a:36:ef:19:d1:17:
8d:6d:a9:09:4b:b4:56:3b:a1:f4:73:7f:e8:c5:ae:
f5:14:8d:14:22:6d:c4:8b:ac:f4:ce:7a:5a:fc:68:
20:f3:f3:95:1e:87:20:51:cb:df:af:e3:d2:0c:20:
fd:d5:2e:2a:35:7b:3f:c5:2b:0c:cb:31:73:6d:c3:
02:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:EB:F5:3B:A8:86:1D:0D:1A:C6:2E:C2:40:E2:B5:19:51:FE:DE
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/d5Dr9Tuohh0NGsYuwkDitRlR_t4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.2.0/24
151.240.173.0/24
151.241.15.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.242.114.0/24
151.244.42.0/24
151.245.69.0/24
151.245.171.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.38.0/23
151.247.42.0/23
151.247.93.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
70:16:f8:e2:19:1d:47:c3:fe:12:51:a7:0a:5c:08:d6:49:14:
33:ea:dc:05:13:d5:20:63:eb:9f:b4:00:3c:90:38:82:89:0a:
5e:54:a5:7a:b5:b2:7b:73:b0:56:0e:df:7a:dd:d7:f8:c3:bf:
30:91:22:dc:49:95:b0:2e:da:7e:85:d7:8b:e5:bc:b0:41:6f:
56:52:13:56:72:46:34:c1:be:cf:d1:ec:97:d3:96:7e:99:8c:
70:36:78:44:dc:a9:89:0a:e2:e3:df:e8:92:96:de:28:2c:56:
24:bb:78:d7:64:cd:9b:63:dc:2a:c1:da:9e:bb:57:2c:1f:1e:
a9:5e:a0:94:2c:79:9d:9e:a8:7b:a0:2e:63:9b:0b:22:18:7e:
bd:59:b3:e4:42:ca:9b:ae:d7:ba:72:e5:d0:62:c8:fc:0d:c6:
25:11:0c:4e:a7:40:f6:33:b4:d2:81:6e:dc:f0:2b:6f:9f:e9:
43:e0:b7:a1:f4:61:53:f5:47:81:c7:9a:94:4a:50:87:89:1c:
ab:d7:ae:cf:2a:16:d1:c4:21:c9:ac:00:2d:d6:d9:ef:46:be:
2f:96:b8:bf:1b:2b:aa:e7:d5:06:70:4b:ae:6a:51:4a:c7:d4:
39:0a:43:dc:38:b9:c8:61:c7:61:e5:08:68:da:f6:4c:cd:e7:
ff:52:09:03
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAaC1JYGAob+cpLfepswG5eq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTE4MTUzMjA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzkwZWJmNTNiYTg4NjFkMGQxYWM2MmVjMjQwZTJiNTE5NTFmZWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbbIvrP0v2BH1I8x92aHaPeL9HfD
TRTFbJDac/hN3B16beWbS00eTOzYDklArEaUYssXGLP21FZJ4ZYFME/Gms4+5mQz
sPqNXGdNZWG7FGf+LjNKDORkaJzKC4w4tpV0EUeCYZY7AetwTppHbnUcz+0hbLF8
9LXLhVbCHUUrOtZR930UYcEKDWcI7rXBU7XKM1xpCS3AuOm/ds51hBcDVr3Xjhxm
ttg9mInaBUCei+8BE08mCng9VOURJTkKNu8Z0ReNbakJS7RWO6H0c3/oxa71FI0U
Im3Ei6z0znpa/Ggg8/OVHocgUcvfr+PSDCD91S4qNXs/xSsMyzFzbcMCaQIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFHeQ6/U7qIYdDRrGLsJA4rUZUf7eMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZDVEcjlUdW9oaDBOR3NZdXdrRGl0UmxSX3Q0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEAJfwAgME
AJfwrQMEAJfxDwMEAJfxIQMEAJfxKwMEAJfxMAMEAJfyGgMEAJfycgMEAJf0KgME
AJf1RQMEAJf1qwMEAJf24AMEAJf25gMEAJf26gMEAZf3JgMEAZf3KgMEAJf3XQME
AJf39jANBgkqhkiG9w0BAQsFAAOCAQEAcBb44hkdR8P+ElGnClwI1kkUM+rcBRPV
IGPrn7QAPJA4gokKXlSlerWye3OwVg7fet3X+MO/MJEi3EmVsC7afoXXi+W8sEFv
VlITVnJGNMG+z9Hsl9OWfpmMcDZ4RNypiQri49/okpbeKCxWJLt412TNm2PcKsHa
nrtXLB8eqV6glCx5nZ6oe6AuY5sLIhh+vVmz5ELKm67XunLl0GLI/A3GJREMTqdA
9jO00oFu3PArb5/pQ+C3ofRhU/VHgcealEpQh4kcq9euzyoW0cQhyawALdbZ70a+
L5a4vxsrqufVBnBLrmpRSsfUOQpD3Di5yGHHYeUIaNr2TM3n/1IJAw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:49:13 2026 by rpki-client