Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JhE6pFmidBTRjsu_Z_kySRCgDro.roa
File: JhE6pFmidBTRjsu_Z_kySRCgDro.roa (raw, json)
Hash identifier: G5v5AX45oU5mBe1qaZ/Iz3YNRgxDTtpnVFZicXGrSn0=
Subject key identifier: 26:11:3A:A4:59:A2:74:14:D1:8E:CB:BF:67:F9:32:49:10:A0:0E:BA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6F1979DA681DF7C328A8B338F045EFBB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JhE6pFmidBTRjsu_Z_kySRCgDro.roa
Signing time: Fri 17 Jul 2026 08:02:48 +0000
ROA not before: Fri 17 Jul 2026 08:02:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.76.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.242.139.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6f:19:79:da:68:1d:f7:c3:28:a8:b3:38:f0:45:ef:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 17 08:02:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=26113aa459a27414d18ecbbf67f9324910a00eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:5e:c1:a4:d2:7f:75:9b:f7:6f:c0:ff:f2:
68:f7:49:84:27:bc:48:78:59:ee:d1:4d:cc:e8:3b:
f8:68:b0:9c:85:bd:1f:7c:ce:a4:0d:67:6a:14:0d:
f4:e8:5c:73:7b:f3:69:78:54:2e:7b:ed:9e:c9:66:
c0:96:6e:31:eb:72:80:87:79:b8:aa:7c:76:d0:56:
16:fc:52:d8:9c:38:d9:59:7f:bb:f3:cf:19:c1:a2:
42:cb:6f:8a:0d:44:f0:76:e4:81:b3:b9:2e:ab:82:
d5:d8:5c:72:23:c3:65:eb:d7:c2:33:3e:29:53:60:
e7:13:26:c5:5d:c1:bc:da:2c:81:b1:84:a4:bb:4a:
76:30:09:2e:cf:84:15:b8:d0:b2:3f:60:fa:d3:f2:
fe:e2:dc:91:10:dc:a7:3a:fc:88:c9:81:d5:eb:ee:
10:c1:1b:be:d6:ac:fd:78:dc:a9:6d:4f:ab:42:95:
c7:9c:c4:47:41:50:6c:22:c4:3f:9f:37:18:85:30:
33:3c:d2:61:74:56:da:34:80:83:8b:b4:a0:c0:2f:
68:41:d8:11:93:8d:19:86:1b:a4:60:b3:45:a7:59:
b3:05:79:65:93:46:36:2f:6b:d9:e4:51:ff:98:c2:
dd:3b:f7:d7:f7:0e:3f:9b:9e:7f:4f:aa:33:63:93:
75:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:3A:A4:59:A2:74:14:D1:8E:CB:BF:67:F9:32:49:10:A0:0E:BA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JhE6pFmidBTRjsu_Z_kySRCgDro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.241.68.0/24
151.242.76.0/24
151.242.103.0/24
151.242.139.0/24
151.243.160.0/22
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
70:09:45:d1:69:b8:a6:05:9c:df:9b:f1:ab:35:93:f7:5e:ef:
82:3c:22:36:e2:a0:69:03:09:7d:c3:32:79:43:4c:99:53:b7:
51:78:97:b2:29:54:3d:d8:ad:d6:e8:29:99:73:c8:a5:17:48:
fb:15:7a:54:f5:52:aa:44:fb:04:fb:da:54:f7:0f:6f:ca:d6:
9d:8b:68:30:40:9a:50:51:fc:6e:d7:d9:f1:4a:ce:a8:31:b3:
3c:b1:78:6a:c5:dc:a2:c8:04:e1:f2:c6:db:68:8c:b8:24:25:
68:96:a5:7e:0e:dd:7a:15:d0:53:a6:b7:10:d7:b4:1b:43:51:
ca:1c:3e:93:4a:78:00:1c:b1:c3:e5:41:dc:d1:7e:8c:ba:5a:
0a:98:92:65:21:7a:d5:97:98:4f:1c:02:19:c2:9a:cf:92:f5:
96:bc:ed:80:60:08:f1:38:75:a5:6c:f7:17:15:4a:b0:59:6b:
f6:fb:07:df:c5:f0:c2:6d:3a:32:fd:fa:9d:d6:e1:cb:a2:2f:
5d:d9:d4:a5:dc:45:78:5c:24:99:33:6e:52:f7:c9:85:f4:ff:
e2:ae:c9:2c:6f:ea:9a:2a:9d:c8:13:9d:c9:d3:d1:30:c0:e8:
e2:d6:2f:bf:dc:a4:19:e8:09:df:28:8f:5e:5d:50:60:6a:33:
b5:dd:6e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:43 2026 by rpki-client