Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yTlGc9uf2ShAKtIa8AneAQNdU4U.roa
File: yTlGc9uf2ShAKtIa8AneAQNdU4U.roa (raw, json)
Hash identifier: xygR7k3hwBd1qZgAcOkPqioOc453UK7GTvEp7SK6r84=
Subject key identifier: C9:39:46:73:DB:9F:D9:28:40:2A:D2:1A:F0:09:DE:01:03:5D:53:85
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E97BF866BA86F0814C439026102775BB6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yTlGc9uf2ShAKtIa8AneAQNdU4U.roa
Signing time: Fri 05 Jun 2026 12:26:11 +0000
ROA not before: Fri 05 Jun 2026 12:26:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 151.241.109.0/24 maxlen: 24
151.241.155.0/24 maxlen: 24
151.241.215.0/24 maxlen: 24
151.241.216.0/24 maxlen: 24
151.241.217.0/24 maxlen: 24
151.241.221.0/24 maxlen: 24
151.241.226.0/24 maxlen: 24
151.241.227.0/24 maxlen: 24
151.241.228.0/24 maxlen: 24
151.241.229.0/24 maxlen: 24
151.241.234.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.243.3.0/24 maxlen: 24
151.243.145.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.176.0/24 maxlen: 24
151.243.177.0/24 maxlen: 24
151.243.180.0/24 maxlen: 24
151.243.181.0/24 maxlen: 24
151.243.182.0/24 maxlen: 24
151.243.190.0/24 maxlen: 24
151.243.191.0/24 maxlen: 24
151.243.196.0/24 maxlen: 24
151.243.198.0/23 maxlen: 24
151.243.198.0/24 maxlen: 24
151.243.199.0/24 maxlen: 24
151.243.208.0/24 maxlen: 24
151.243.209.0/24 maxlen: 24
151.243.212.0/24 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.224.0/24 maxlen: 24
151.243.225.0/24 maxlen: 24
151.243.232.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.244.243.0/24 maxlen: 24
151.244.246.0/24 maxlen: 24
151.244.251.0/24 maxlen: 24
151.244.253.0/24 maxlen: 24
151.244.254.0/24 maxlen: 24
151.245.92.0/24 maxlen: 24
151.245.136.0/24 maxlen: 24
151.245.137.0/24 maxlen: 24
151.245.139.0/24 maxlen: 24
151.245.140.0/24 maxlen: 24
151.245.216.0/24 maxlen: 24
151.245.217.0/24 maxlen: 24
151.245.218.0/23 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.208.0/24 maxlen: 24
151.247.209.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:bf:86:6b:a8:6f:08:14:c4:39:02:61:02:77:5b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 5 12:26:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c9394673db9fd928402ad21af009de01035d5385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:a6:00:4f:60:6a:b5:ec:8a:9d:f5:9d:46:
15:a0:fc:97:65:da:71:4e:51:21:39:74:eb:2e:1f:
b7:95:3a:79:89:57:f2:9f:96:25:84:8c:54:ea:5a:
36:f6:b9:38:3b:b9:5f:90:99:96:a9:18:c0:69:e7:
35:c7:e5:61:b0:47:cb:13:f5:e5:50:3d:4f:9a:29:
f4:5e:f1:69:de:03:28:0f:f2:9e:43:93:dc:73:4a:
7e:31:e8:ea:1d:6d:96:7f:a4:17:b7:66:bc:4f:f6:
98:0c:ef:ab:0b:e0:32:0d:d4:cd:de:4e:44:33:ac:
d5:6b:a9:6b:72:5f:66:76:de:7f:2f:29:b0:62:c9:
cb:89:e7:19:38:f1:11:af:26:ba:fc:8d:00:cf:ea:
71:f5:cb:24:a8:71:cf:bb:21:38:30:fe:33:1b:93:
a5:52:3a:c0:e1:9a:ea:5b:74:71:b3:fc:4d:10:9d:
fb:0d:32:c6:4a:02:ad:c2:ef:3c:d2:16:62:9a:48:
3c:fa:52:01:e8:e2:24:e6:b1:7d:56:a2:3a:c7:c9:
a0:16:7c:e1:df:d6:b5:73:f8:7e:5f:f3:70:6b:09:
fe:3c:dc:8a:22:df:21:4d:1f:88:ea:c1:e2:cf:b5:
21:d2:06:70:aa:ff:22:40:a0:f3:ce:ed:8d:c1:b6:
d9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:46:73:DB:9F:D9:28:40:2A:D2:1A:F0:09:DE:01:03:5D:53:85
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/yTlGc9uf2ShAKtIa8AneAQNdU4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.241.109.0/24
151.241.155.0/24
151.241.215.0-151.241.217.255
151.241.221.0/24
151.241.226.0-151.241.229.255
151.241.234.0/24
151.242.88.0/24
151.243.3.0/24
151.243.145.0/24
151.243.169.0/24
151.243.171.0/24
151.243.173.0/24
151.243.176.0/23
151.243.180.0-151.243.182.255
151.243.190.0/23
151.243.196.0/24
151.243.198.0/23
151.243.208.0/23
151.243.212.0/24
151.243.217.0/24
151.243.224.0/23
151.243.232.0/24
151.243.245.0/24
151.243.247.0/24
151.244.243.0/24
151.244.246.0/24
151.244.251.0/24
151.244.253.0-151.244.254.255
151.245.92.0/24
151.245.136.0/23
151.245.139.0-151.245.140.255
151.245.216.0/22
151.247.196.0/23
151.247.208.0/23
151.247.219.0/24
Signature Algorithm: sha256WithRSAEncryption
74:cf:ab:76:e7:f8:72:de:e4:f2:c9:51:b8:bd:9f:f2:dc:33:
88:93:8a:04:3b:4b:73:82:ce:4b:a3:69:3e:33:02:ec:16:97:
a3:92:4e:51:f6:cd:c7:57:6e:83:14:e7:7e:41:15:46:21:46:
31:29:84:31:f8:cc:44:a3:71:18:43:8c:f9:4b:03:8a:f3:b9:
52:58:f7:8d:df:b6:30:dc:f0:fb:22:6a:a1:58:79:e8:0c:c5:
77:92:cf:23:e1:fd:22:1f:3b:c0:de:58:61:c9:f0:53:16:e6:
dc:51:a7:ba:8b:fe:ef:4d:33:21:06:4d:28:97:fb:1a:1c:83:
16:2e:e1:ab:c1:ce:8f:94:87:c2:f8:b0:4e:f7:68:60:fc:9f:
d7:ca:94:67:38:b4:ce:56:73:d7:00:f5:18:75:1a:ba:7a:47:
00:f2:35:c6:50:19:5b:bb:09:fb:51:8b:5f:1a:83:a1:ff:ec:
b9:58:7a:4e:d8:42:99:76:6a:56:c4:d4:59:6e:d7:bb:57:5f:
aa:60:ed:2b:89:66:fd:53:36:b9:b2:c8:95:f6:96:75:fe:b6:
a5:0f:69:e5:b9:b9:31:ab:e2:54:20:4c:7e:7c:20:a0:d8:f8:
d6:5f:40:2b:76:81:e8:a9:63:52:c1:38:d6:81:9e:78:13:d3:
45:f3:ca:6c
-----BEGIN CERTIFICATE-----
MIIF+jCCBOKgAwIBAgISAZ6Xv4ZrqG8IFMQ5AmECd1u2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjA1MTIyNjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTM5NDY3M2RiOWZkOTI4NDAyYWQyMWFmMDA5ZGUwMTAzNWQ1Mzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg6mAE9garXsip31nUYVoPyXZdpx
TlEhOXTrLh+3lTp5iVfyn5YlhIxU6lo29rk4O7lfkJmWqRjAaec1x+VhsEfLE/Xl
UD1Pmin0XvFp3gMoD/KeQ5Pcc0p+MejqHW2Wf6QXt2a8T/aYDO+rC+AyDdTN3k5E
M6zVa6lrcl9mdt5/LymwYsnLiecZOPERrya6/I0Az+px9cskqHHPuyE4MP4zG5Ol
UjrA4ZrqW3Rxs/xNEJ37DTLGSgKtwu880hZimkg8+lIB6OIk5rF9VqI6x8mgFnzh
39a1c/h+X/Nwawn+PNyKIt8hTR+I6sHiz7Uh0gZwqv8iQKDzzu2NwbbZnQIDAQAB
o4IDBjCCAwIwHQYDVR0OBBYEFMk5RnPbn9koQCrSGvAJ3gEDXVOFMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEveVRsR2M5dWYyU2hBS3RJYThBbmVBUU5kVTRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBGgYIKwYBBQUHAQcBAf8EggEJMIIBBTCCAQEEAgABMIH6
AwQAl/FtAwQAl/GbMAwDBACX8dcDBAGX8dgDBACX8d0wDAMEAZfx4gMEAZfx5AME
AJfx6gMEAJfyWAMEAJfzAwMEAJfzkQMEAJfzqQMEAJfzqwMEAJfzrQMEAZfzsDAM
AwQCl/O0AwQAl/O2AwQBl/O+AwQAl/PEAwQBl/PGAwQBl/PQAwQAl/PUAwQAl/PZ
AwQBl/PgAwQAl/PoAwQAl/P1AwQAl/P3AwQAl/TzAwQAl/T2AwQAl/T7MAwDBACX
9P0DBACX9P4DBACX9VwDBAGX9YgwDAMEAJf1iwMEAJf1jAMEApf12AMEAZf3xAME
AZf30AMEAJf32zANBgkqhkiG9w0BAQsFAAOCAQEAdM+rduf4ct7k8slRuL2f8twz
iJOKBDtLc4LOS6NpPjMC7BaXo5JOUfbNx1dugxTnfkEVRiFGMSmEMfjMRKNxGEOM
+UsDivO5Ulj3jd+2MNzw+yJqoVh56AzFd5LPI+H9Ih87wN5YYcnwUxbm3FGnuov+
700zIQZNKJf7GhyDFi7hq8HOj5SHwviwTvdoYPyf18qUZzi0zlZz1wD1GHUaunpH
API1xlAZW7sJ+1GLXxqDof/suVh6TthCmXZqVsTUWW7Xu1dfqmDtK4lm/VM2ubLI
lfaWdf62pQ9p5bm5MaviVCBMfnwgoNj41l9AK3aB6KljUsE41oGeeBPTRfPKbA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:05:08 2026 by rpki-client