Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1iMdK9d_-urbMeUI232A6l62z1E.roa
File: 1iMdK9d_-urbMeUI232A6l62z1E.roa (raw, json)
Hash identifier: TK2eX57r4ryofT+teWzFwGeLIBElGBBtUjEpeJpIktI=
Subject key identifier: D6:23:1D:2B:D7:7F:FA:EA:DB:31:E5:08:DB:7D:80:EA:5E:B6:CF:51
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6536E930067682CD7BA6735A7ED6E10A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1iMdK9d_-urbMeUI232A6l62z1E.roa
Signing time: Wed 15 Jul 2026 09:58:45 +0000
ROA not before: Wed 15 Jul 2026 09:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.244.227.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:36:e9:30:06:76:82:cd:7b:a6:73:5a:7e:d6:e1:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 15 09:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d6231d2bd77ffaeadb31e508db7d80ea5eb6cf51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b5:8d:1f:3c:09:04:5f:ef:2f:2c:d4:ec:6c:
20:a9:11:d0:9f:98:8e:de:b3:bf:bd:8f:02:96:b8:
b7:06:a7:eb:c0:27:a3:c0:e1:22:87:9c:e9:e3:ef:
ca:96:56:7e:1d:61:52:af:34:d2:b5:34:d9:86:78:
2a:2b:f8:69:29:92:57:a4:a1:7f:54:51:4f:3f:47:
a7:f3:27:33:bf:03:9f:a5:92:87:6a:dd:e3:09:1d:
0b:c8:b4:e8:7d:9b:aa:48:34:2c:c4:bf:75:34:53:
7c:ff:5d:a8:f1:47:d3:2a:f6:4a:f0:2c:1e:c5:06:
37:16:be:39:57:2f:71:f2:b9:8c:8d:15:ec:82:18:
22:14:d4:ab:63:3f:37:9a:fa:2d:03:14:28:04:a9:
fe:03:f3:7b:68:de:95:b7:27:2a:fb:da:96:65:ed:
df:3b:cd:24:da:94:5f:e6:d5:03:3b:ac:83:b8:c5:
38:e3:f6:c5:fe:47:84:5b:93:52:83:b7:bc:fd:3b:
64:d7:72:b7:5e:b8:08:d8:ca:e4:0c:98:9c:bf:c7:
db:07:91:56:c0:c7:87:f2:49:35:92:e3:4d:b1:68:
c4:9c:03:e9:cd:c5:73:7d:dc:3e:67:cb:12:c8:09:
6e:e5:71:9b:37:57:74:6e:ae:4b:cb:92:58:68:14:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:1D:2B:D7:7F:FA:EA:DB:31:E5:08:DB:7D:80:EA:5E:B6:CF:51
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1iMdK9d_-urbMeUI232A6l62z1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.244.227.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
96:c2:c5:63:90:bf:21:0b:3d:85:72:9d:47:c0:6a:66:1f:1d:
a8:0e:ab:cc:83:2a:6d:18:02:16:34:12:86:f4:08:7b:9a:18:
40:13:2c:9c:3f:47:d6:bf:3a:1a:2b:0d:bc:ab:64:cf:29:43:
bb:1f:08:ab:fe:17:c4:a5:0d:8a:a9:b7:7f:44:5a:43:e4:21:
18:12:27:7f:a6:5e:25:fa:aa:2c:f5:0d:89:19:b5:f8:d1:cb:
6b:13:ba:b3:7d:47:61:8a:4a:ed:05:d7:e3:da:0e:e7:bd:74:
77:75:25:2f:0e:5e:25:ed:41:e0:e7:d4:34:66:07:f8:fc:25:
32:47:2b:88:b6:28:aa:98:94:19:a7:86:0d:43:8c:9d:49:64:
ed:2d:8f:4f:92:66:13:48:fa:f9:e3:eb:43:96:97:fc:13:62:
1c:46:fb:74:1a:6d:01:6e:9e:7f:c4:38:4a:7d:8d:86:21:7e:
11:3b:75:bb:aa:9a:af:08:a4:f0:64:fe:e2:0c:af:5a:29:73:
ef:4e:c7:e1:de:5f:b2:74:90:8d:a9:c6:38:0c:00:da:04:c4:
8e:32:63:dc:ca:85:3b:09:f4:19:db:91:e9:77:fd:4b:a2:65:
d8:69:ed:66:27:22:7f:fb:6d:3c:04:7c:26:b8:ce:ed:83:b9:
e0:76:e0:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:12 2026 by rpki-client