Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vmSMVu2eQu7Hat4L1OG6F_3K8i8.roa
File: vmSMVu2eQu7Hat4L1OG6F_3K8i8.roa (raw, json)
Hash identifier: FpDiPSHqQOsg8q5/n105RJyVX+0gbMCW7sLr1SP6y14=
Subject key identifier: BE:64:8C:56:ED:9E:42:EE:C7:6A:DE:0B:D4:E1:BA:17:FD:CA:F2:2F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C8EB6C4C6566BD442B4838D327F25E478
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vmSMVu2eQu7Hat4L1OG6F_3K8i8.roa
Signing time: Tue 24 Feb 2026 08:14:28 +0000
ROA not before: Tue 24 Feb 2026 08:14:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 151.240.31.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.245.138.0/24 maxlen: 24
151.245.254.0/24 maxlen: 24
151.247.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8e:b6:c4:c6:56:6b:d4:42:b4:83:8d:32:7f:25:e4:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 24 08:14:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=be648c56ed9e42eec76ade0bd4e1ba17fdcaf22f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:80:7d:f5:4e:50:3d:52:ae:03:a5:3b:30:
68:68:e2:2b:dd:cc:6e:05:b6:a6:42:1b:4a:50:5e:
a6:b0:ed:c2:83:55:d8:0e:a7:87:90:a8:a7:f2:12:
c9:0a:33:ed:61:00:78:08:48:cf:34:7a:65:4a:53:
2f:86:91:e6:3e:0c:2d:5c:18:d0:e7:7d:0c:56:4b:
04:6b:73:53:93:a0:63:ff:c9:c7:42:05:df:b6:32:
f7:05:41:a6:17:7d:9a:1f:a9:1a:27:6d:fb:6b:d2:
90:63:70:04:d9:0d:27:78:45:5c:4a:ec:89:96:ee:
06:e1:5c:9c:39:2a:fc:89:82:02:c9:3e:1b:6c:82:
a0:b1:f2:e6:65:3f:ff:e1:46:c9:36:5d:49:12:b7:
3b:0e:a9:39:b3:50:60:4f:ed:17:d9:cd:a2:b8:00:
e3:a0:d8:88:43:68:4d:25:74:9e:fb:9c:15:e5:b0:
fb:1b:e4:f3:23:37:64:77:ce:5d:fc:79:e9:f3:57:
63:7c:9a:cd:2f:d7:d2:b7:e1:55:be:99:63:a5:33:
bd:03:96:5f:f3:30:94:ec:5f:32:7a:2b:ef:7e:a9:
df:7d:a9:12:81:64:a6:a1:de:54:84:01:eb:43:31:
3f:4e:10:60:f7:3d:cd:48:2c:bc:f9:7c:1b:ee:af:
ea:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:64:8C:56:ED:9E:42:EE:C7:6A:DE:0B:D4:E1:BA:17:FD:CA:F2:2F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/vmSMVu2eQu7Hat4L1OG6F_3K8i8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.31.0/24
151.240.72.0/24
151.242.77.0/24
151.245.138.0/24
151.245.254.0/24
151.247.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e3:8e:52:78:88:b3:de:c7:05:0d:10:d0:93:e1:f6:1f:2e:
8e:ce:24:11:ea:e0:49:a9:c4:76:7d:89:fa:64:4f:72:47:c1:
3b:3c:78:9a:f2:a7:41:0a:86:5e:e9:bc:5d:3d:92:9d:ad:1f:
e2:69:29:da:48:23:76:74:85:cc:3c:b6:93:f7:0f:c4:22:ae:
9e:73:25:a8:38:f3:ee:dc:37:74:76:c8:b6:71:8a:16:65:da:
f1:6c:5c:8b:ec:40:c9:35:05:d7:db:89:27:e3:e0:b4:2d:50:
49:14:af:52:bb:65:39:aa:97:5f:58:7b:3a:e6:1b:85:20:3c:
83:15:77:d4:9e:6f:07:19:50:39:6f:a2:27:63:58:64:21:b5:
6c:74:5d:e1:e9:d8:6c:e2:9d:bd:dd:9e:7e:a9:a5:8b:56:59:
15:cf:2a:39:88:95:a3:28:a7:9c:36:65:28:f7:ca:cc:d9:36:
54:90:d5:a0:ed:a1:c0:66:7e:34:65:a4:18:bf:f7:bf:61:69:
e0:d0:42:75:e2:f4:47:e2:cb:df:ca:c0:a8:14:2d:b6:09:63:
9d:b8:a3:32:b7:c2:5d:f3:46:f0:23:d2:5f:63:ad:a6:d6:f2:
79:19:9b:46:78:46:ee:9f:d1:47:a0:63:ea:4c:be:05:25:f8:
6d:16:ca:70
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZyOtsTGVmvUQrSDjTJ/JeR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjI0MDgxNDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZTY0OGM1NmVkOWU0MmVlYzc2YWRlMGJkNGUxYmExN2ZkY2FmMjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSKAffVOUD1SrgOlOzBoaOIr3cxu
BbamQhtKUF6msO3Cg1XYDqeHkKin8hLJCjPtYQB4CEjPNHplSlMvhpHmPgwtXBjQ
530MVksEa3NTk6Bj/8nHQgXftjL3BUGmF32aH6kaJ237a9KQY3AE2Q0neEVcSuyJ
lu4G4VycOSr8iYICyT4bbIKgsfLmZT//4UbJNl1JErc7Dqk5s1BgT+0X2c2iuADj
oNiIQ2hNJXSe+5wV5bD7G+TzIzdkd85d/Hnp81djfJrNL9fSt+FVvpljpTO9A5Zf
8zCU7F8yeivvfqnffakSgWSmod5UhAHrQzE/ThBg9z3NSCy8+Xwb7q/qNwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFL5kjFbtnkLux2reC9Thuhf9yvIvMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdm1TTVZ1MmVRdTdIYXQ0TDFPRzZGXzNLOGk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAl/AfAwQA
l/BIAwQAl/JNAwQAl/WKAwQAl/X+AwQAl/cuMA0GCSqGSIb3DQEBCwUAA4IBAQBO
445SeIiz3scFDRDQk+H2Hy6OziQR6uBJqcR2fYn6ZE9yR8E7PHia8qdBCoZe6bxd
PZKdrR/iaSnaSCN2dIXMPLaT9w/EIq6ecyWoOPPu3Dd0dsi2cYoWZdrxbFyL7EDJ
NQXX24kn4+C0LVBJFK9Su2U5qpdfWHs65huFIDyDFXfUnm8HGVA5b6InY1hkIbVs
dF3h6dhs4p293Z5+qaWLVlkVzyo5iJWjKKecNmUo98rM2TZUkNWg7aHAZn40ZaQY
v/e/YWng0EJ14vRH4svfysCoFC22CWOduKMyt8Jd80bwI9JfY62m1vJ5GZtGeEbu
n9FHoGPqTL4FJfhtFspw
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:18 2026 by rpki-client