Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rxnq5ABnQhv7ZbHu4uIieZMCw5U.roa
File: rxnq5ABnQhv7ZbHu4uIieZMCw5U.roa (raw, json)
Hash identifier: cDgjJJeQJntpCiwZ3MxEjBUB3FTp+moglTzQqPAH7ts=
Subject key identifier: AF:19:EA:E4:00:67:42:1B:FB:65:B1:EE:E2:E2:22:79:93:02:C3:95
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A07FEC3902E102AEC279BFA078B79652E9
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rxnq5ABnQhv7ZbHu4uIieZMCw5U.roa
Signing time: Tue 08 Sep 2026 07:29:42 +0000
ROA not before: Tue 08 Sep 2026 07:29:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 151.240.43.0/24 maxlen: 24
151.240.44.0/24 maxlen: 24
151.240.46.0/24 maxlen: 24
151.240.47.0/24 maxlen: 24
151.240.48.0/24 maxlen: 24
151.240.49.0/24 maxlen: 24
151.240.50.0/24 maxlen: 24
151.240.51.0/24 maxlen: 24
151.240.52.0/24 maxlen: 24
151.240.53.0/24 maxlen: 24
151.240.54.0/24 maxlen: 24
151.240.55.0/24 maxlen: 24
151.240.56.0/24 maxlen: 24
151.240.57.0/24 maxlen: 24
151.240.58.0/24 maxlen: 24
151.240.59.0/24 maxlen: 24
151.240.62.0/24 maxlen: 24
151.240.63.0/24 maxlen: 24
151.240.64.0/24 maxlen: 24
151.240.65.0/24 maxlen: 24
151.240.66.0/24 maxlen: 24
151.240.67.0/24 maxlen: 24
151.240.91.0/24 maxlen: 24
151.240.92.0/24 maxlen: 24
151.240.93.0/24 maxlen: 24
151.240.94.0/24 maxlen: 24
151.240.95.0/24 maxlen: 24
151.240.101.0/24 maxlen: 24
151.240.102.0/24 maxlen: 24
151.240.103.0/24 maxlen: 24
151.240.104.0/24 maxlen: 24
151.240.105.0/24 maxlen: 24
151.240.106.0/24 maxlen: 24
151.240.107.0/24 maxlen: 24
151.240.108.0/24 maxlen: 24
151.240.109.0/24 maxlen: 24
151.240.111.0/24 maxlen: 24
151.242.129.0/24 maxlen: 24
151.243.186.0/24 maxlen: 24
151.243.187.0/24 maxlen: 24
151.244.58.0/24 maxlen: 24
151.247.14.0/24 maxlen: 24
151.247.119.0/24 maxlen: 24
151.247.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7f:ec:39:02:e1:02:ae:c2:79:bf:a0:78:b7:96:52:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 8 07:29:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af19eae40067421bfb65b1eee2e222799302c395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:4b:fd:05:72:ba:ca:15:f2:d6:63:b8:cf:
a7:80:71:8f:a8:3b:72:0a:2a:f2:be:02:18:dc:81:
7e:2d:99:b8:91:a8:01:ce:8e:77:e1:70:0c:68:8e:
b7:cf:31:c9:42:9a:6b:4c:9a:6b:c9:e6:c9:4c:4d:
55:1b:f7:21:da:91:1e:33:e6:97:1f:af:f2:25:6c:
1c:1c:08:b7:77:8c:38:71:bf:a6:5f:06:80:5a:16:
52:ca:61:3e:fd:94:6c:f7:5d:3f:8c:97:bb:48:e0:
03:6b:b9:13:24:46:71:c2:81:fa:ff:2a:81:f8:46:
20:6f:2c:5f:16:16:53:cb:88:3c:41:7b:b2:f2:07:
5a:5e:70:a9:c4:15:c3:31:a6:27:63:0c:87:41:91:
4d:2a:c3:65:6d:ae:40:33:57:ef:2f:67:d6:ab:f1:
50:a0:bd:74:b1:53:41:39:82:fb:3a:7b:81:ec:3b:
e5:3d:04:83:05:21:f1:7d:7a:b9:a7:a2:ba:83:b7:
fb:7f:6c:9c:f8:ec:86:6a:08:5d:e8:53:63:c7:38:
c6:d3:f2:cd:db:dd:d7:1b:c2:f6:db:41:1c:40:db:
79:b2:c2:0a:74:95:bd:08:49:e9:ef:a2:bf:f9:81:
1c:37:ea:be:d3:f2:90:05:e4:b4:62:16:70:00:17:
02:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:EA:E4:00:67:42:1B:FB:65:B1:EE:E2:E2:22:79:93:02:C3:95
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/rxnq5ABnQhv7ZbHu4uIieZMCw5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.43.0-151.240.44.255
151.240.46.0-151.240.59.255
151.240.62.0-151.240.67.255
151.240.91.0-151.240.95.255
151.240.101.0-151.240.109.255
151.240.111.0/24
151.242.129.0/24
151.243.186.0/23
151.244.58.0/24
151.247.14.0/24
151.247.119.0/24
151.247.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:cd:bb:ef:a9:23:43:58:1a:42:a8:5e:d7:19:fd:74:fc:68:
64:7a:dc:8d:0d:e2:66:6d:cf:1a:a9:c2:1b:d1:88:9d:fd:64:
ef:46:2f:b4:87:a2:72:7a:ba:8d:66:41:41:df:39:57:f2:81:
b6:d1:92:71:e5:04:74:1c:33:e5:74:32:04:e8:2a:ef:e5:73:
bb:35:c1:79:fc:5f:87:c4:a2:c9:3c:f7:17:9c:08:73:0d:7e:
27:39:e3:6d:86:7c:c8:f4:71:4f:54:d2:19:fe:40:fb:ab:54:
8d:78:63:6f:ea:0b:a2:6b:48:9e:14:3d:38:a5:a6:62:9b:2f:
fe:4b:7f:aa:be:aa:9b:b0:78:8c:96:f5:e5:a6:12:47:61:a8:
92:3d:4d:39:ce:d9:68:ad:66:94:a2:95:24:07:2b:bc:98:83:
a9:fa:a5:a1:64:60:00:9f:d7:39:14:38:6d:f4:ae:24:cb:50:
ed:b3:10:c6:59:d2:4c:fd:7f:2f:f5:23:8c:97:ef:07:c5:cd:
71:59:17:c9:f9:ce:07:71:ae:26:3a:ac:94:f2:b0:f2:c0:74:
c7:00:f3:a9:dc:76:17:5d:9b:f5:38:e0:b1:22:26:12:b2:91:
d6:7c:2b:ed:4f:d4:d6:fe:dd:65:58:f2:33:fc:8e:87:bb:2d:
a6:4f:50:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 23:28:59 2026 by rpki-client