Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dx28RWKLhdz6LqceoiuqWawMWIA.roa
File: dx28RWKLhdz6LqceoiuqWawMWIA.roa (raw, json)
Hash identifier: Oq9SA7OAeMn/uT9lVS1QTG/oj8C+uR8bkiT4lRMwEQY=
Subject key identifier: 77:1D:BC:45:62:8B:85:DC:FA:2E:A7:1E:A2:2B:AA:59:AC:0C:58:80
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EAAE548A8147D930BE2AEB23A52F76B42
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dx28RWKLhdz6LqceoiuqWawMWIA.roa
Signing time: Tue 09 Jun 2026 05:40:13 +0000
ROA not before: Tue 09 Jun 2026 05:40:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.244.138.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:aa:e5:48:a8:14:7d:93:0b:e2:ae:b2:3a:52:f7:6b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 9 05:40:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=771dbc45628b85dcfa2ea71ea22baa59ac0c5880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:fd:98:88:f8:fc:a7:77:4e:00:21:aa:c7:
42:76:81:d0:90:86:42:50:c9:d0:84:c6:1a:61:93:
9e:4c:af:6f:61:78:ec:ae:65:0e:bc:d7:a8:b4:1d:
fc:6d:bc:00:33:87:c7:fe:70:75:8f:0e:88:ed:73:
b6:51:07:72:96:b8:8c:d2:eb:1a:7d:86:99:ac:91:
43:8e:bf:81:f5:1c:24:53:c0:6f:7f:15:fb:e4:11:
41:a8:7f:20:91:00:7d:e9:93:81:5f:c7:bb:a6:17:
8e:77:b6:64:a0:1f:d6:09:47:35:47:57:6b:b8:df:
3b:4f:39:d6:ae:79:ce:fb:f2:e0:44:03:6f:4c:3f:
c9:77:50:90:5f:ec:a4:9a:71:9c:4e:da:5b:5d:9b:
f5:76:3e:c6:a3:92:6f:54:e0:27:61:9a:dd:9a:61:
3e:1c:64:9f:75:9f:28:66:2b:0b:82:a8:b4:46:9f:
fc:3f:6e:db:37:d3:50:cf:fe:6f:09:43:c2:65:c7:
8d:80:4e:dd:cb:21:a0:8f:b7:e3:1d:59:ac:26:c5:
a9:e2:c9:45:30:08:5a:00:0b:06:bb:7c:f3:b4:51:
2e:40:4a:30:c9:58:64:0b:10:58:7d:88:68:bf:55:
45:76:cc:48:43:2a:8f:dd:75:b6:16:8d:1c:d2:d8:
6a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:1D:BC:45:62:8B:85:DC:FA:2E:A7:1E:A2:2B:AA:59:AC:0C:58:80
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/dx28RWKLhdz6LqceoiuqWawMWIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.244.138.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:94:46:b9:74:df:9d:65:ce:9e:b5:af:8e:c9:84:e3:46:99:
dc:1d:d2:07:e4:48:52:f3:90:c5:70:46:3e:f7:a9:a9:4d:71:
fb:31:16:d4:55:50:7c:08:14:cc:f5:23:3f:49:a2:5f:e5:d4:
15:f7:b4:06:bb:20:7b:5e:9d:73:50:b1:a1:ff:39:85:2a:ef:
f4:76:64:f6:f3:1c:95:d5:d4:9e:1e:58:11:9b:86:d6:5c:46:
c1:fe:0b:7a:e2:23:b8:f3:4c:61:cd:c2:bb:b7:64:af:72:f4:
ad:7e:7f:08:0e:d4:dc:9a:40:b0:6a:e2:8b:61:b1:a9:a7:06:
4f:a4:79:19:43:87:b7:99:da:24:9f:bc:75:87:af:a3:66:a2:
96:e2:a7:0b:0d:69:2a:b2:09:18:22:be:af:4b:d3:35:93:0b:
4a:b9:b0:6c:01:b4:6b:9d:ea:e0:04:ce:ed:fc:ca:31:35:3e:
35:24:7f:05:b3:cb:25:3b:28:f6:cf:81:20:69:91:d2:95:48:
3b:64:f9:cf:d3:aa:fb:43:44:54:60:88:ba:69:f3:a6:81:00:
55:fb:9d:39:fb:3b:a5:4a:74:8e:74:de:71:41:d9:ca:70:81:
bc:34:31:05:7d:b5:bb:cb:96:fe:8f:6a:dc:d4:11:0a:bf:1d:
28:66:98:02
-----BEGIN CERTIFICATE-----
MIIFqjCCBJKgAwIBAgISAZ6q5UioFH2TC+KusjpS92tCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA5MDU0MDEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzFkYmM0NTYyOGI4NWRjZmEyZWE3MWVhMjJiYWE1OWFjMGM1ODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsj9mIj4/Kd3TgAhqsdCdoHQkIZC
UMnQhMYaYZOeTK9vYXjsrmUOvNeotB38bbwAM4fH/nB1jw6I7XO2UQdylriM0usa
fYaZrJFDjr+B9RwkU8BvfxX75BFBqH8gkQB96ZOBX8e7pheOd7ZkoB/WCUc1R1dr
uN87TznWrnnO+/LgRANvTD/Jd1CQX+ykmnGcTtpbXZv1dj7Go5JvVOAnYZrdmmE+
HGSfdZ8oZisLgqi0Rp/8P27bN9NQz/5vCUPCZceNgE7dyyGgj7fjHVmsJsWp4slF
MAhaAAsGu3zztFEuQEowyVhkCxBYfYhov1VFdsxIQyqP3XW2Fo0c0thqawIDAQAB
o4ICtjCCArIwHQYDVR0OBBYEFHcdvEVii4Xc+i6nHqIrqlmsDFiAMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZHgyOFJXS0xoZHo2THFjZW9pdXFXYXdNV0lBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHLBggrBgEFBQcBBwEB/wSBuzCBuDCBtQQCAAEwga4DBASX
8IADBACX8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgME
AJfyhwMEAZfzCAMEAZfzzAMEAJf0OAMEAJf0igMEAJf1AgMEAJf1FgMEApf1OAME
AJf1uTAMAwQAl/W7AwQAl/W8AwQDl/YIAwQAl/cwAwQBl/dMAwQBl/eAAwQAl/eD
MAwDBACX94UDBAOX94ADBACX9/IDBACX9/gwDQYJKoZIhvcNAQELBQADggEBAKmU
Rrl0351lzp61r47JhONGmdwd0gfkSFLzkMVwRj73qalNcfsxFtRVUHwIFMz1Iz9J
ol/l1BX3tAa7IHtenXNQsaH/OYUq7/R2ZPbzHJXV1J4eWBGbhtZcRsH+C3riI7jz
TGHNwru3ZK9y9K1+fwgO1NyaQLBq4othsamnBk+keRlDh7eZ2iSfvHWHr6Nmopbi
pwsNaSqyCRgivq9L0zWTC0q5sGwBtGud6uAEzu38yjE1PjUkfwWzyyU7KPbPgSBp
kdKVSDtk+c/TqvtDRFRgiLpp86aBAFX7nTn7O6VKdI503nFB2cpwgbw0MQV9tbvL
lv6PatzUEQq/HShmmAI=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:22 2026 by rpki-client