Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JcVPx7we13e9NVHBUUoXZpM4asc.roa
File: JcVPx7we13e9NVHBUUoXZpM4asc.roa (raw, json)
Hash identifier: 5/sDPpGoHzbVS6ZEmFUo/YMSfAJ7IbYhx9WVNe1ihu8=
Subject key identifier: 25:C5:4F:C7:BC:1E:D7:77:BD:35:51:C1:51:4A:17:66:93:38:6A:C7
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019DFDD84C607946F66125CFCC94990552E8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JcVPx7we13e9NVHBUUoXZpM4asc.roa
Signing time: Wed 06 May 2026 15:11:44 +0000
ROA not before: Wed 06 May 2026 15:11:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.166.0/24 maxlen: 24
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.205.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fd:d8:4c:60:79:46:f6:61:25:cf:cc:94:99:05:52:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 6 15:11:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=25c54fc7bc1ed777bd3551c1514a176693386ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:a4:e6:a3:13:12:83:06:28:9e:e6:79:04:
7d:7d:da:27:52:20:f0:b7:dd:92:44:15:1e:ad:65:
ee:87:4d:69:fb:2d:bd:88:6d:41:aa:f4:ff:07:a0:
2d:91:bb:d7:27:0b:86:90:f4:22:27:89:01:ed:6a:
91:11:65:26:0e:d4:98:9f:e9:66:b2:ac:38:2d:61:
fa:71:56:24:22:00:62:c1:76:c7:bc:dd:d4:aa:dc:
02:5c:47:8e:9d:01:3d:89:03:be:d4:de:03:b7:3a:
1e:b7:79:3d:da:a2:b7:d1:3c:ae:67:39:49:2c:fa:
f6:24:bc:d0:f9:18:30:b1:69:67:8f:24:8e:31:23:
1b:1e:83:cb:34:db:29:8b:d2:34:fa:39:6f:1c:9a:
35:3e:fe:8e:7f:f9:1a:30:b5:c0:cb:98:95:0a:16:
7c:0a:0f:eb:c8:a0:7d:a3:68:0e:a7:43:e5:0a:e7:
7a:9b:2c:91:7e:ac:ff:38:c7:0b:3e:d8:6e:e7:bc:
8a:41:5a:d2:af:24:51:7c:f0:20:27:a7:ee:79:02:
ba:8e:f5:f3:b3:30:79:24:ce:11:2c:08:ca:69:88:
cf:c7:eb:a9:2e:bd:f9:ca:dc:21:39:e1:68:e1:74:
68:b1:71:10:61:7c:1b:28:e4:6a:67:c1:a6:03:b5:
a8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C5:4F:C7:BC:1E:D7:77:BD:35:51:C1:51:4A:17:66:93:38:6A:C7
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JcVPx7we13e9NVHBUUoXZpM4asc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.241.68.0/24
151.242.103.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.243.166.0/24
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.15.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.205.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
45:e7:b4:89:cc:6d:c5:3e:7f:c8:dd:51:0f:41:8e:36:77:85:
e9:00:42:55:d7:ae:d1:5a:4d:a1:b3:f7:81:cb:3e:b5:be:a2:
06:0c:be:25:1e:49:5a:49:3b:c9:2d:e3:de:fc:e8:65:d2:50:
68:19:6a:3e:10:2c:7f:84:6a:29:06:e9:e1:c9:29:96:c6:5b:
9e:11:eb:e6:23:67:af:9a:16:ac:89:63:dd:49:2b:d4:ef:71:
69:12:ca:cc:d8:90:bf:60:6c:34:18:2f:1e:28:dc:8f:46:2f:
a4:5a:fc:6d:b9:d8:a8:f5:cf:3c:84:07:f9:63:b7:12:cb:01:
22:0f:9e:4d:e2:ba:75:68:69:20:aa:7d:3e:33:62:b3:0d:ab:
6d:61:32:7d:43:55:b0:71:b5:46:cc:c4:54:d5:4e:56:22:34:
10:b2:4a:f2:4f:88:97:ee:4a:36:f7:46:8f:b8:53:47:52:1f:
9b:88:04:a3:c5:43:22:45:ca:e6:ea:cc:4f:a7:1b:8a:6c:31:
54:40:1d:d3:0e:21:58:ec:12:e8:99:8e:9d:6f:3a:90:d7:54:
2e:2f:2c:e8:09:51:2f:68:3e:c6:8b:ec:f7:25:63:e4:48:39:
1e:7c:45:2b:43:ab:50:22:bd:4a:2d:e8:e4:cf:18:80:c3:3b:
13:42:31:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:55 2026 by rpki-client