Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KPcYf31inXSuNnPQiF9qSNfqQTg.roa
File: KPcYf31inXSuNnPQiF9qSNfqQTg.roa (raw, json)
Hash identifier: QyknB/Uu3iXoEp7VNSkFMyyIBXg7VOpmlyObSi2HVlM=
Subject key identifier: 28:F7:18:7F:7D:62:9D:74:AE:36:73:D0:88:5F:6A:48:D7:EA:41:38
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0435BE5E3DDFAFE20A15B17BB3DEF0874
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KPcYf31inXSuNnPQiF9qSNfqQTg.roa
Signing time: Thu 27 Aug 2026 13:14:51 +0000
ROA not before: Thu 27 Aug 2026 13:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.24.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:5b:e5:e3:dd:fa:fe:20:a1:5b:17:bb:3d:ef:08:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 13:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=28f7187f7d629d74ae3673d0885f6a48d7ea4138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e3:3c:9b:19:79:cf:d1:9d:8b:80:2b:94:1b:
a8:ec:13:03:cf:f5:5c:a8:f6:2d:5c:14:b2:5f:7d:
5f:8f:13:fd:06:b2:8c:c2:e8:2c:96:ec:39:2d:b1:
39:df:cf:6f:5b:29:eb:dc:5f:be:00:a5:bd:7e:9b:
0c:b4:0d:b6:30:f3:63:9b:ec:b3:37:91:31:70:43:
cd:78:ac:04:a3:5e:5e:c8:e6:e0:21:b5:c6:80:6f:
d4:65:6c:54:fc:08:be:13:93:af:68:ee:10:ff:71:
f6:6d:56:80:6a:ba:01:37:8c:23:2a:9f:3c:f5:b5:
db:d7:59:ce:23:19:af:24:56:2c:2b:6c:b4:f7:39:
85:5c:fa:19:6b:fc:fd:e5:35:d8:61:9b:79:a9:22:
5c:c9:8e:a3:af:fa:00:0c:11:66:5c:73:ad:2c:65:
28:d2:01:eb:cb:0a:91:dc:b6:40:54:8b:f5:b5:42:
8b:d3:75:33:bf:08:b5:7f:6c:68:43:48:ee:46:18:
b3:74:5e:98:d9:dc:3b:e1:3c:be:e4:0c:92:68:06:
76:3f:75:78:ae:7c:c7:cc:a9:a4:42:8d:a4:2f:e4:
f1:32:13:7e:96:fb:44:23:ba:29:8c:3f:e0:ae:cc:
c5:ba:14:21:25:81:e4:5c:80:ed:cc:ec:55:bb:54:
97:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F7:18:7F:7D:62:9D:74:AE:36:73:D0:88:5F:6A:48:D7:EA:41:38
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/KPcYf31inXSuNnPQiF9qSNfqQTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.123.0/24
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.24.0/24
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:3b:c8:08:77:fb:de:88:b7:af:3a:0c:40:a4:22:ab:81:db:
aa:1a:d9:7f:bc:76:0b:eb:69:23:c8:be:1c:c4:98:03:ca:8f:
9f:8d:60:da:ab:2f:6a:57:7a:99:5b:66:7f:09:ee:64:9d:5d:
8c:bc:0e:71:bf:27:12:6d:97:3a:f9:6a:f5:db:35:8f:19:f7:
c0:f2:49:d2:00:b6:1e:6d:97:2f:54:b4:71:47:e8:8c:8d:89:
f6:63:9a:13:ad:cd:42:05:57:7f:8b:11:ec:68:d7:69:5f:09:
12:b5:df:37:dd:21:a3:85:9c:71:1f:d1:69:44:40:c1:ba:69:
ab:85:ec:51:9b:62:a8:cd:0b:13:44:95:0d:80:90:ce:f0:c2:
92:1d:f4:06:ef:1f:72:b4:b2:b9:62:3d:3c:2f:d3:47:cc:c8:
4b:11:65:5d:04:3d:7f:ca:f2:ec:44:a1:db:17:68:3d:3e:b8:
f1:9f:03:60:3c:43:97:9b:93:b3:a9:bc:3b:17:f2:1a:b6:1b:
d8:d8:c0:6d:d6:18:f6:6a:1c:03:2a:12:d0:12:63:78:54:f9:
50:b9:ae:ff:96:64:3f:38:a4:dc:42:b4:04:db:ee:d9:aa:d0:
8c:d5:b9:24:1b:18:16:c0:f6:4c:5b:b5:b0:30:3e:ce:d0:a1:
64:3d:d4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:46:32 2026 by rpki-client