Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S6R07jYxMeY-ED7va1-0UcRNypo.roa
File: S6R07jYxMeY-ED7va1-0UcRNypo.roa (raw, json)
Hash identifier: xCVGYB2N+AzbpTEZOnADnM+ldGJ3qybf5yiRMGI9wlI=
Subject key identifier: 4B:A4:74:EE:36:31:31:E6:3E:10:3E:EF:6B:5F:B4:51:C4:4D:CA:9A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C48E8229D5F7199F0F01CC0F07351EC0
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S6R07jYxMeY-ED7va1-0UcRNypo.roa
Signing time: Mon 21 Sep 2026 15:21:08 +0000
ROA not before: Mon 21 Sep 2026 15:21:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 151.240.0.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.241.1.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.148.0/24 maxlen: 24
151.241.150.0/24 maxlen: 24
151.241.157.0/24 maxlen: 24
151.241.220.0/24 maxlen: 24
151.242.1.0/24 maxlen: 24
151.242.7.0/24 maxlen: 24
151.242.12.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.242.59.0/24 maxlen: 24
151.242.77.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.157.0/24 maxlen: 24
151.243.21.0/24 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.49.0/24 maxlen: 24
151.243.51.0/24 maxlen: 24
151.243.57.0/24 maxlen: 24
151.243.60.0/24 maxlen: 24
151.243.61.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.114.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.244.105.0/24 maxlen: 24
151.244.142.0/24 maxlen: 24
151.244.162.0/24 maxlen: 24
151.244.178.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.245.29.0/24 maxlen: 24
151.245.38.0/24 maxlen: 24
151.245.40.0/24 maxlen: 24
151.245.48.0/24 maxlen: 24
151.245.52.0/24 maxlen: 24
151.245.61.0/24 maxlen: 24
151.245.63.0/24 maxlen: 24
151.245.65.0/24 maxlen: 24
151.245.68.0/24 maxlen: 24
151.245.91.0/24 maxlen: 24
151.245.102.0/24 maxlen: 24
151.245.109.0/24 maxlen: 24
151.245.120.0/24 maxlen: 24
151.245.138.0/24 maxlen: 24
151.245.141.0/24 maxlen: 24
151.245.148.0/24 maxlen: 24
151.245.162.0/24 maxlen: 24
151.245.226.0/24 maxlen: 24
151.245.241.0/24 maxlen: 24
151.246.179.0/24 maxlen: 24
151.246.180.0/24 maxlen: 24
151.246.222.0/24 maxlen: 24
151.246.248.0/24 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:8e:82:29:d5:f7:19:9f:0f:01:cc:0f:07:35:1e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 15:21:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ba474ee363131e63e103eef6b5fb451c44dca9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8e:89:4e:6f:b8:05:77:19:50:26:cd:bd:61:
c3:84:22:5b:7a:36:da:9b:4b:cd:e2:56:01:85:52:
f6:cd:a2:66:ac:80:66:17:28:fb:db:5d:7a:a9:7f:
e7:52:5e:33:7f:43:9e:89:82:b2:a8:ca:4b:55:7a:
1e:55:8e:d7:4d:92:e7:17:94:36:87:cb:28:73:bf:
db:c0:a0:60:42:e9:ee:36:17:c0:c8:37:c8:18:43:
b0:8e:da:c7:f5:c8:0e:3b:41:28:8f:a8:0b:60:72:
81:63:ef:c0:36:78:ce:53:0b:3a:4b:11:85:91:b8:
ba:2e:01:e4:d6:5b:e2:96:2a:51:ce:ee:a0:12:10:
66:f8:d9:ec:91:8c:ee:81:c6:ae:27:bf:84:37:01:
c4:c7:05:07:35:7c:6d:d3:e1:7e:6d:22:72:d9:20:
a7:01:2b:aa:15:d2:cb:6b:73:88:c8:a9:fb:3f:21:
f9:3d:39:84:d4:62:68:99:22:a0:fb:18:ef:6d:12:
cb:2a:57:a8:1e:8e:30:45:db:8f:30:2f:e6:da:47:
68:3e:9f:10:bc:7c:73:0e:ce:f9:c9:b9:a2:5c:17:
57:39:2c:8f:54:50:c8:20:5d:c7:a5:6a:bf:36:49:
e9:65:44:f6:b3:aa:47:f8:1f:03:a1:4e:ac:a9:b2:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:74:EE:36:31:31:E6:3E:10:3E:EF:6B:5F:B4:51:C4:4D:CA:9A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/S6R07jYxMeY-ED7va1-0UcRNypo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.0.0/24
151.240.5.0/24
151.240.133.0/24
151.241.1.0/24
151.241.25.0/24
151.241.148.0/24
151.241.150.0/24
151.241.157.0/24
151.241.220.0/24
151.242.1.0/24
151.242.7.0/24
151.242.12.0/24
151.242.14.0/24
151.242.59.0/24
151.242.77.0/24
151.242.119.0/24
151.242.157.0/24
151.243.21.0/24
151.243.47.0/24
151.243.49.0/24
151.243.51.0/24
151.243.57.0/24
151.243.60.0/23
151.243.88.0/24
151.243.114.0/24
151.243.120.0/24
151.244.105.0/24
151.244.142.0/24
151.244.162.0/24
151.244.178.0/24
151.244.236.0/24
151.245.29.0/24
151.245.38.0/24
151.245.40.0/24
151.245.48.0/24
151.245.52.0/24
151.245.61.0/24
151.245.63.0/24
151.245.65.0/24
151.245.68.0/24
151.245.91.0/24
151.245.102.0/24
151.245.109.0/24
151.245.120.0/24
151.245.138.0/24
151.245.141.0/24
151.245.148.0/24
151.245.162.0/24
151.245.226.0/24
151.245.241.0/24
151.246.179.0-151.246.180.255
151.246.222.0/24
151.246.248.0/24
151.247.45.0/24
151.247.89.0/24
151.247.108.0/24
151.247.137.0/24
Signature Algorithm: sha256WithRSAEncryption
80:d7:8f:b6:81:fb:df:d9:c9:49:a2:78:60:8a:2e:72:ee:c2:
76:4d:77:ff:e7:99:a4:2e:67:fd:85:23:4d:5d:a3:29:61:d9:
d2:a8:d0:8c:13:ed:5f:9e:e8:c9:d3:92:80:c6:6a:ce:4a:53:
60:a5:4e:b6:b3:18:8b:d5:a8:2a:e1:25:a3:cf:68:76:96:21:
9a:62:32:98:3b:72:c9:82:1a:20:b9:29:d5:7b:d8:08:f5:b1:
fb:be:f1:70:39:fc:eb:ba:11:81:0f:a4:69:c2:6f:91:f4:5b:
fa:6f:f3:ef:3e:1e:7b:2a:da:25:19:ac:f8:e4:1f:c2:43:9f:
b0:78:bc:57:69:e2:ea:35:4b:ec:9c:6c:55:3a:81:dc:d5:a5:
c9:61:9a:14:c3:93:27:22:97:dc:55:92:8a:00:35:ff:17:56:
c6:19:0a:b9:8d:88:90:50:16:bd:1c:52:ea:33:63:0b:9f:47:
1f:5b:c6:b1:9c:e1:54:a8:82:10:38:9d:3e:c8:7f:42:ef:18:
99:67:10:e9:7b:f1:f0:b3:de:9a:0a:c7:64:eb:b9:14:dc:c5:
02:5d:90:11:2e:f2:4e:fb:08:29:86:40:fa:82:cb:0d:d1:af:
ff:40:03:5b:97:76:56:a0:53:d9:df:f8:15:8a:a7:90:32:ca:
f4:1e:8b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:02:52 2026 by rpki-client