Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/ESYHurJGoiLuJIeyLZ0fOG5k0-g.roa
File: ESYHurJGoiLuJIeyLZ0fOG5k0-g.roa (raw, json)
Hash identifier: gM0/PKwNF+FozCcDzsFmRxZ8V01LgYteKyayqgbw9LY=
Subject key identifier: 11:26:07:BA:B2:46:A2:22:EE:24:87:B2:2D:9D:1F:38:6E:64:D3:E8
Certificate issuer: /CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Certificate serial: 01A162DFA955CC70BF9D2507B881D755A5BD
Authority key identifier: 6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/ESYHurJGoiLuJIeyLZ0fOG5k0-g.roa
Signing time: Thu 22 Oct 2026 09:09:47 +0000
ROA not before: Thu 22 Oct 2026 09:09:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.186.48.0/20 maxlen: 24
151.186.48.0/24 maxlen: 24
151.186.49.0/24 maxlen: 24
151.186.50.0/24 maxlen: 24
151.186.51.0/24 maxlen: 24
151.186.52.0/24 maxlen: 24
151.186.53.0/24 maxlen: 24
151.186.54.0/24 maxlen: 24
151.186.55.0/24 maxlen: 24
151.186.56.0/24 maxlen: 24
151.186.57.0/24 maxlen: 24
151.186.58.0/24 maxlen: 24
151.186.59.0/24 maxlen: 24
151.186.60.0/24 maxlen: 24
151.186.61.0/24 maxlen: 24
151.186.62.0/24 maxlen: 24
151.186.63.0/24 maxlen: 24
151.186.144.0/20 maxlen: 24
151.186.144.0/24 maxlen: 24
151.186.145.0/24 maxlen: 24
151.186.146.0/24 maxlen: 24
151.186.147.0/24 maxlen: 24
151.186.148.0/24 maxlen: 24
151.186.149.0/24 maxlen: 24
151.186.150.0/24 maxlen: 24
151.186.151.0/24 maxlen: 24
151.186.152.0/24 maxlen: 24
151.186.153.0/24 maxlen: 24
151.186.154.0/24 maxlen: 24
151.186.155.0/24 maxlen: 24
151.186.156.0/24 maxlen: 24
151.186.157.0/24 maxlen: 24
151.186.158.0/24 maxlen: 24
151.186.159.0/24 maxlen: 24
151.186.160.0/21 maxlen: 24
151.186.160.0/24 maxlen: 24
151.186.161.0/24 maxlen: 24
151.186.162.0/24 maxlen: 24
151.186.163.0/24 maxlen: 24
151.186.164.0/24 maxlen: 24
151.186.165.0/24 maxlen: 24
151.186.166.0/24 maxlen: 24
151.186.167.0/24 maxlen: 24
151.186.168.0/22 maxlen: 24
151.186.168.0/24 maxlen: 24
151.186.169.0/24 maxlen: 24
151.186.170.0/24 maxlen: 24
151.186.171.0/24 maxlen: 24
151.186.172.0/22 maxlen: 24
151.186.172.0/24 maxlen: 24
151.186.173.0/24 maxlen: 24
151.186.174.0/24 maxlen: 24
151.186.175.0/24 maxlen: 24
151.186.176.0/20 maxlen: 24
151.186.176.0/24 maxlen: 24
151.186.177.0/24 maxlen: 24
151.186.178.0/24 maxlen: 24
151.186.179.0/24 maxlen: 24
151.186.180.0/24 maxlen: 24
151.186.181.0/24 maxlen: 24
151.186.182.0/24 maxlen: 24
151.186.183.0/24 maxlen: 24
151.186.184.0/24 maxlen: 24
151.186.185.0/24 maxlen: 24
151.186.186.0/24 maxlen: 24
151.186.187.0/24 maxlen: 24
151.186.188.0/24 maxlen: 24
151.186.189.0/24 maxlen: 24
151.186.190.0/24 maxlen: 24
151.186.191.0/24 maxlen: 24
151.186.192.0/20 maxlen: 24
151.186.192.0/24 maxlen: 24
151.186.193.0/24 maxlen: 24
151.186.194.0/24 maxlen: 24
151.186.195.0/24 maxlen: 24
151.186.196.0/24 maxlen: 24
151.186.197.0/24 maxlen: 24
151.186.198.0/24 maxlen: 24
151.186.199.0/24 maxlen: 24
151.186.200.0/24 maxlen: 24
151.186.201.0/24 maxlen: 24
151.186.202.0/24 maxlen: 24
151.186.203.0/24 maxlen: 24
151.186.204.0/24 maxlen: 24
151.186.205.0/24 maxlen: 24
151.186.206.0/24 maxlen: 24
151.186.207.0/24 maxlen: 24
2a04:e4c4:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:df:a9:55:cc:70:bf:9d:25:07:b8:81:d7:55:a5:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbefbbc474d428359a3f7f75f814f5679b0f182
Validity
Not Before: Oct 22 09:09:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=112607bab246a222ee2487b22d9d1f386e64d3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:70:25:70:e8:18:86:84:13:91:dd:18:72:
36:86:33:b3:fc:63:ee:e8:ee:20:8f:97:7a:00:3e:
57:c4:19:97:7b:e1:80:b8:49:ce:e5:a4:75:ac:71:
0f:d7:8a:45:bf:98:e1:1f:3c:20:1c:72:61:2e:c8:
7d:ec:c8:15:69:a2:8c:4d:14:fd:f8:42:83:1d:26:
9a:86:3a:bf:64:b4:d3:9c:64:bc:e2:39:db:5a:74:
c6:62:4e:90:1d:44:5b:57:3e:69:3b:2a:20:76:7f:
fc:e3:30:03:c9:cb:80:d2:4d:af:3b:12:19:37:07:
54:a8:60:4b:b8:c1:92:bf:0c:6f:78:17:c7:85:40:
a8:0e:a0:fe:cd:00:89:65:1a:3e:49:55:e2:63:bd:
2e:fb:50:93:0f:b5:d4:e3:6b:12:7b:f7:69:99:59:
16:be:48:2c:65:7c:1a:7f:f3:0d:83:d4:dc:84:5c:
45:c3:51:92:5c:c0:da:0e:5e:0d:44:93:a7:4c:a8:
4a:fd:e9:b8:11:61:80:84:95:5f:29:ae:e1:84:6f:
6a:33:3d:3f:1b:47:1a:53:4d:32:d1:2e:f1:f6:ce:
4b:a5:64:22:37:78:7b:a6:f5:9d:b1:81:32:96:55:
f9:66:9b:d2:3f:3c:5d:f1:70:ca:b3:df:17:d3:ae:
fd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:26:07:BA:B2:46:A2:22:EE:24:87:B2:2D:9D:1F:38:6E:64:D3:E8
X509v3 Authority Key Identifier:
keyid:6D:BE:FB:BC:47:4D:42:83:59:A3:F7:F7:5F:81:4F:56:79:B0:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb77vEdNQoNZo_f3X4FPVnmw8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/ESYHurJGoiLuJIeyLZ0fOG5k0-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/17dec5-8e95-48c4-bcac-ce1821686f07/1/bb77vEdNQoNZo_f3X4FPVnmw8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.186.48.0/20
151.186.144.0-151.186.207.255
IPv6:
2a04:e4c4:5::/48
Signature Algorithm: sha256WithRSAEncryption
5b:91:35:42:ab:c1:6d:39:05:f9:f9:e0:7f:5f:f9:2e:84:8a:
ae:ec:21:ea:94:e9:b2:3a:d5:e7:17:a0:57:33:1c:f6:24:04:
a9:b9:c7:51:cc:63:cf:e0:8a:53:7c:4c:bb:dd:a8:06:b9:06:
38:4e:08:c0:e0:74:91:af:bf:78:be:1a:b3:61:d1:59:b2:f9:
be:47:96:28:54:7b:5a:a3:9e:eb:29:40:6f:28:71:7c:fb:0a:
ab:ce:a7:16:a6:b5:f8:d7:83:af:99:5b:11:eb:a6:21:82:11:
9e:78:b5:49:51:3c:29:e3:c8:29:26:07:23:01:56:a2:55:07:
25:3e:f1:81:f7:3a:23:95:f1:9e:25:e8:1e:37:4e:02:3e:35:
05:6b:1d:3f:55:e3:c8:02:12:cf:0d:c2:dc:43:cc:c7:f7:04:
89:f3:39:94:a9:50:5c:99:94:b8:f6:96:79:c6:5b:0b:90:b6:
c7:da:18:43:ea:63:1f:57:c6:78:03:34:e5:14:c2:a9:24:ad:
f5:9c:69:13:9b:bf:ba:88:8e:9b:a9:67:0b:e1:db:9c:45:67:
0c:c3:e3:8b:11:f4:9d:35:25:92:c7:3b:c7:59:06:c2:9b:a4:
c9:12:84:c4:bc:96:b3:d9:62:df:8c:d6:f2:1e:ad:c5:99:df:
18:f1:1e:74
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAaFi36lVzHC/nSUHuIHXVaW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYmVmYmJjNDc0ZDQyODM1OWEzZjdmNzVmODE0ZjU2Nzli
MGYxODIwHhcNMjYxMDIyMDkwOTQ3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTI2MDdiYWIyNDZhMjIyZWUyNDg3YjIyZDlkMWYzODZlNjRkM2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0d1wJXDoGIaEE5HdGHI2hjOz/GPu
6O4gj5d6AD5XxBmXe+GAuEnO5aR1rHEP14pFv5jhHzwgHHJhLsh97MgVaaKMTRT9
+EKDHSaahjq/ZLTTnGS84jnbWnTGYk6QHURbVz5pOyogdn/84zADycuA0k2vOxIZ
NwdUqGBLuMGSvwxveBfHhUCoDqD+zQCJZRo+SVXiY70u+1CTD7XU42sSe/dpmVkW
vkgsZXwaf/MNg9TchFxFw1GSXMDaDl4NRJOnTKhK/em4EWGAhJVfKa7hhG9qMz0/
G0caU00y0S7x9s5LpWQiN3h7pvWdsYEyllX5ZpvSPzxd8XDKs98X0679DwIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFBEmB7qyRqIi7iSHsi2dHzhuZNPoMB8GA1UdIwQY
MBaAFG2++7xHTUKDWaP391+BT1Z5sPGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmI3N3ZFZE5Rb05ab19mM1g0RlBWbm13OFlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8xN2RlYzUtOGU5NS00OGM0LWJjYWMt
Y2UxODIxNjg2ZjA3LzEvRVNZSHVySkdvaUx1SklleUxaMGZPRzVrMC1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8xN2RlYzUtOGU5NS00OGM0LWJjYWMtY2UxODIxNjg2ZjA3
LzEvYmI3N3ZFZE5Rb05ab19mM1g0RlBWbm13OFlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUAwQEl7owMAwD
BASXupADBASXusAwDwQCAAIwCQMHACoE5MQABTANBgkqhkiG9w0BAQsFAAOCAQEA
W5E1QqvBbTkF+fngf1/5LoSKruwh6pTpsjrV5xegVzMc9iQEqbnHUcxjz+CKU3xM
u92oBrkGOE4IwOB0ka+/eL4as2HRWbL5vkeWKFR7WqOe6ylAbyhxfPsKq86nFqa1
+NeDr5lbEeumIYIRnni1SVE8KePIKSYHIwFWolUHJT7xgfc6I5XxniXoHjdOAj41
BWsdP1XjyAISzw3C3EPMx/cEifM5lKlQXJmUuPaWecZbC5C2x9oYQ+pjH1fGeAM0
5RTCqSSt9ZxpE5u/uoiOm6lnC+HbnEVnDMPjixH0nTUlksc7x1kGwpukyRKExLyW
s9li34zW8h6txZnfGPEedA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:48 2026 by rpki-client