Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gEVExsiRzLcepZfr5CIhZIbR1p8.roa
File: gEVExsiRzLcepZfr5CIhZIbR1p8.roa (raw, json)
Hash identifier: fvp5mjoGZlnjgBaBFtJnPw5kQD8/8bY1xq8VshWeoVw=
Subject key identifier: 80:45:44:C6:C8:91:CC:B7:1E:A5:97:EB:E4:22:21:64:86:D1:D6:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB198FB58BE8AD05219373B6234241122
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gEVExsiRzLcepZfr5CIhZIbR1p8.roa
Signing time: Wed 10 Jun 2026 12:54:13 +0000
ROA not before: Wed 10 Jun 2026 12:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 151.240.156.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.241.34.0/24 maxlen: 24
151.241.38.0/24 maxlen: 24
151.241.42.0/24 maxlen: 24
151.241.44.0/24 maxlen: 24
151.241.46.0/24 maxlen: 24
151.241.49.0/24 maxlen: 24
151.241.114.0/24 maxlen: 24
151.241.118.0/24 maxlen: 24
151.241.120.0/24 maxlen: 24
151.241.121.0/24 maxlen: 24
151.241.124.0/24 maxlen: 24
151.241.126.0/24 maxlen: 24
151.242.141.0/24 maxlen: 24
151.244.7.0/24 maxlen: 24
151.244.9.0/24 maxlen: 24
151.244.10.0/24 maxlen: 24
151.244.13.0/24 maxlen: 24
151.244.15.0/24 maxlen: 24
151.244.25.0/24 maxlen: 24
151.244.27.0/24 maxlen: 24
151.244.29.0/24 maxlen: 24
151.244.31.0/24 maxlen: 24
151.244.33.0/24 maxlen: 24
151.244.35.0/24 maxlen: 24
151.244.37.0/24 maxlen: 24
151.244.39.0/24 maxlen: 24
151.244.41.0/24 maxlen: 24
151.244.43.0/24 maxlen: 24
151.244.45.0/24 maxlen: 24
151.244.47.0/24 maxlen: 24
151.244.49.0/24 maxlen: 24
151.244.51.0/24 maxlen: 24
151.244.53.0/24 maxlen: 24
151.244.71.0/24 maxlen: 24
151.244.74.0/24 maxlen: 24
151.244.94.0/24 maxlen: 24
151.244.96.0/24 maxlen: 24
151.244.98.0/24 maxlen: 24
151.244.100.0/24 maxlen: 24
151.244.104.0/24 maxlen: 24
151.244.165.0/24 maxlen: 24
151.244.197.0/24 maxlen: 24
151.244.200.0/24 maxlen: 24
151.244.202.0/24 maxlen: 24
151.245.7.0/24 maxlen: 24
151.245.17.0/24 maxlen: 24
151.245.19.0/24 maxlen: 24
151.245.21.0/24 maxlen: 24
151.245.23.0/24 maxlen: 24
151.245.27.0/24 maxlen: 24
151.245.31.0/24 maxlen: 24
151.245.33.0/24 maxlen: 24
151.245.35.0/24 maxlen: 24
151.245.37.0/24 maxlen: 24
151.245.39.0/24 maxlen: 24
151.245.41.0/24 maxlen: 24
151.245.43.0/24 maxlen: 24
151.245.45.0/24 maxlen: 24
151.245.47.0/24 maxlen: 24
151.245.49.0/24 maxlen: 24
151.245.51.0/24 maxlen: 24
151.245.53.0/24 maxlen: 24
151.245.55.0/24 maxlen: 24
151.245.71.0/24 maxlen: 24
151.245.73.0/24 maxlen: 24
151.245.75.0/24 maxlen: 24
151.245.93.0/24 maxlen: 24
151.245.95.0/24 maxlen: 24
151.245.97.0/24 maxlen: 24
151.245.99.0/24 maxlen: 24
151.245.101.0/24 maxlen: 24
151.245.103.0/24 maxlen: 24
151.245.105.0/24 maxlen: 24
151.245.107.0/24 maxlen: 24
151.245.135.0/24 maxlen: 24
151.245.197.0/24 maxlen: 24
151.245.200.0/24 maxlen: 24
151.245.202.0/24 maxlen: 24
151.247.189.0/24 maxlen: 24
151.247.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:98:fb:58:be:8a:d0:52:19:37:3b:62:34:24:11:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 10 12:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=804544c6c891ccb71ea597ebe422216486d1d69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:f7:51:38:c5:67:1b:1f:e3:d9:c6:86:3c:
b5:06:e3:97:f9:89:08:c8:03:b7:a5:b6:68:c6:e6:
08:83:4a:be:19:86:5d:46:95:3b:68:15:da:39:f9:
0c:5c:ac:69:b8:0c:88:db:85:1b:f1:96:45:fe:2b:
33:ae:b0:86:a9:6d:5f:6f:90:6c:0c:be:34:1a:62:
aa:cd:1d:8d:c2:77:a2:64:4e:97:56:75:85:17:4b:
dd:c2:92:9c:89:8c:66:e2:01:30:74:bf:84:ee:35:
67:27:f3:24:68:db:b5:06:29:44:f1:65:2b:38:6d:
4c:05:78:28:f3:46:b4:d1:76:28:17:7d:12:f6:12:
8c:64:c8:ef:45:8e:10:6b:67:56:2d:7a:6c:51:8a:
0f:95:94:19:98:1e:fe:c2:87:9b:c0:9c:0b:ad:13:
f3:2e:70:60:4d:b1:e1:6e:7c:c7:8d:3d:a6:c3:4e:
a4:29:72:08:81:92:aa:f6:7b:86:38:28:e7:08:05:
24:0b:78:72:6b:73:f9:5f:ad:94:21:32:ac:77:c2:
f5:28:9b:6a:24:6f:00:41:c5:6a:16:48:e7:65:3f:
65:9a:43:50:99:60:2f:82:ad:ec:2b:52:92:f3:42:
08:3c:b4:d6:b3:df:1c:2a:99:a7:9c:3e:a4:13:ec:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:45:44:C6:C8:91:CC:B7:1E:A5:97:EB:E4:22:21:64:86:D1:D6:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/gEVExsiRzLcepZfr5CIhZIbR1p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.156.0/24
151.240.159.0/24
151.240.162.0/24
151.240.164.0/24
151.240.166.0/24
151.240.168.0/24
151.240.170.0/24
151.240.172.0/24
151.240.174.0/24
151.240.176.0/24
151.240.178.0/24
151.240.219.0/24
151.240.221.0/24
151.240.223.0/24
151.240.225.0/24
151.241.34.0/24
151.241.38.0/24
151.241.42.0/24
151.241.44.0/24
151.241.46.0/24
151.241.49.0/24
151.241.114.0/24
151.241.118.0/24
151.241.120.0/23
151.241.124.0/24
151.241.126.0/24
151.242.141.0/24
151.244.7.0/24
151.244.9.0-151.244.10.255
151.244.13.0/24
151.244.15.0/24
151.244.25.0/24
151.244.27.0/24
151.244.29.0/24
151.244.31.0/24
151.244.33.0/24
151.244.35.0/24
151.244.37.0/24
151.244.39.0/24
151.244.41.0/24
151.244.43.0/24
151.244.45.0/24
151.244.47.0/24
151.244.49.0/24
151.244.51.0/24
151.244.53.0/24
151.244.71.0/24
151.244.74.0/24
151.244.94.0/24
151.244.96.0/24
151.244.98.0/24
151.244.100.0/24
151.244.104.0/24
151.244.165.0/24
151.244.197.0/24
151.244.200.0/24
151.244.202.0/24
151.245.7.0/24
151.245.17.0/24
151.245.19.0/24
151.245.21.0/24
151.245.23.0/24
151.245.27.0/24
151.245.31.0/24
151.245.33.0/24
151.245.35.0/24
151.245.37.0/24
151.245.39.0/24
151.245.41.0/24
151.245.43.0/24
151.245.45.0/24
151.245.47.0/24
151.245.49.0/24
151.245.51.0/24
151.245.53.0/24
151.245.55.0/24
151.245.71.0/24
151.245.73.0/24
151.245.75.0/24
151.245.93.0/24
151.245.95.0/24
151.245.97.0/24
151.245.99.0/24
151.245.101.0/24
151.245.103.0/24
151.245.105.0/24
151.245.107.0/24
151.245.135.0/24
151.245.197.0/24
151.245.200.0/24
151.245.202.0/24
151.247.189.0-151.247.190.255
Signature Algorithm: sha256WithRSAEncryption
87:ca:28:89:0a:02:ca:03:84:61:ed:bc:4b:4d:bd:bd:41:67:
1d:fc:9d:24:f7:17:0a:cf:5c:1c:20:f3:10:03:c7:1a:37:00:
d3:9a:5e:d5:a2:0e:89:2f:c3:a7:2c:91:3f:8d:6f:e8:2d:38:
bc:c5:87:b4:cc:8d:69:84:62:e0:7c:29:f2:37:97:4a:ef:9e:
c3:51:f9:62:9d:24:03:22:99:71:ad:3b:d9:e7:6f:9b:83:69:
22:12:50:b4:45:1e:4b:b6:b1:ab:ad:e5:64:ee:3f:e1:da:04:
9f:01:5f:f9:6f:1b:42:d4:1f:38:86:af:0c:32:96:2b:62:dc:
fa:0d:b5:7f:bb:40:d4:b3:d7:0c:6c:13:04:7f:a0:4b:34:6e:
73:3b:bf:a6:3c:97:4f:7c:e9:dd:ba:7e:88:db:64:83:ca:97:
99:b4:6a:71:45:bd:cf:1a:6c:c8:89:0a:e5:91:f4:e0:f1:e3:
30:63:a0:bb:9c:fe:da:f3:e1:30:0d:6b:3b:83:31:3d:a9:47:
fc:b9:84:da:80:81:d9:bc:d5:d3:24:32:a3:12:cd:9f:a9:64:
be:0e:ba:12:7f:a7:e2:4d:5c:6f:42:77:53:fe:53:25:4b:98:
52:b1:0c:32:df:d3:0a:17:7f:71:c5:d9:31:86:c7:b1:61:08:
3c:72:2b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:18:49 2026 by rpki-client