Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SE-7-ucCgU52vLYPeqjNAzBNr78.roa
File: SE-7-ucCgU52vLYPeqjNAzBNr78.roa (raw, json)
Hash identifier: 3jDKZVZ7IID0+g0RO04s6Oqlq/GfDpi80Eb3nQY3QC8=
Subject key identifier: 48:4F:BB:FA:E7:02:81:4E:76:BC:B6:0F:7A:A8:CD:03:30:4D:AF:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6536E99F79102C56DAAD5B7F1A37B3E8
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SE-7-ucCgU52vLYPeqjNAzBNr78.roa
Signing time: Wed 15 Jul 2026 09:58:45 +0000
ROA not before: Wed 15 Jul 2026 09:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.244.227.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:36:e9:9f:79:10:2c:56:da:ad:5b:7f:1a:37:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 15 09:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=484fbbfae702814e76bcb60f7aa8cd03304dafbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:29:71:3b:6f:58:50:f2:6a:8b:31:7a:15:dd:
a2:24:70:6e:41:b9:f5:f2:a4:3e:24:73:2f:fc:97:
f1:2d:c0:49:d4:03:5c:b3:5b:fe:fe:57:0a:51:e8:
27:87:b0:76:49:fa:af:68:f6:70:bf:b6:30:6e:9f:
09:a1:af:55:77:4e:9f:ed:57:5d:f2:f4:7a:29:e2:
86:33:c3:07:a8:a9:ae:20:f9:25:c1:8a:06:5f:15:
a1:55:1c:1b:64:48:f6:f7:32:32:a5:7b:09:11:8a:
40:ce:92:8e:6f:15:84:f7:cc:0b:bc:7e:7f:e2:b0:
a9:6a:e2:1e:94:fd:21:49:0c:6d:a1:ec:2e:64:78:
74:7c:f0:e7:b6:6e:8d:2e:79:e8:a4:4f:d7:a4:09:
6b:82:34:7b:0d:de:3c:8b:5d:14:7b:e2:4b:b6:72:
23:2f:e2:4b:8e:ba:52:3d:f0:5c:f3:f8:d8:4d:d9:
4c:4c:33:7b:5e:b9:77:76:02:36:40:a0:95:9f:a7:
a6:c9:87:26:c3:0e:05:77:c8:cb:8e:49:db:34:87:
9e:ad:b0:d4:05:bd:c0:2b:99:40:95:4e:c7:7e:17:
5b:e0:a4:86:0a:c6:a1:4f:1d:3a:3e:b9:43:a4:c2:
a8:59:0a:c8:49:a0:ee:5b:a9:94:0a:83:c6:aa:25:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4F:BB:FA:E7:02:81:4E:76:BC:B6:0F:7A:A8:CD:03:30:4D:AF:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SE-7-ucCgU52vLYPeqjNAzBNr78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.244.227.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
51:af:20:54:73:ae:a0:4a:bd:4a:09:e8:4a:23:c7:9b:29:14:
99:6d:e8:77:60:cc:b1:5b:9b:3e:e2:8b:e6:b3:5d:c2:17:90:
07:17:e8:dc:fd:d5:6d:df:bf:e0:8b:c2:38:6b:b8:a1:b8:2c:
9d:14:16:5f:c3:fa:26:e6:99:a2:aa:f3:27:d6:ec:2d:01:b9:
75:41:ab:b8:b9:9e:5e:de:41:83:4e:0a:42:c1:ce:69:ba:18:
61:5e:7c:6d:b6:e8:1d:82:dd:64:d1:56:76:82:a5:5d:89:1a:
39:2a:d0:7f:ac:04:7f:4b:0c:5b:f8:38:33:66:fb:83:2d:07:
53:3c:f1:1e:9f:92:bd:d5:22:3e:7c:8d:b5:bb:67:17:88:8c:
3f:2f:f8:80:4d:2c:a0:62:b8:d7:e7:f7:c1:25:53:5c:bd:67:
e2:3f:ce:f0:86:ee:04:27:e5:b3:28:7a:db:7d:4b:ff:6c:60:
72:7b:0f:fd:e2:26:fd:ac:98:4d:d1:40:9d:63:91:44:37:28:
4f:4b:ed:b5:76:95:c8:85:70:9d:59:15:0d:74:41:68:36:2c:
48:86:7c:d4:b1:34:f3:2a:21:f6:13:f0:8c:e0:4d:eb:e5:f9:
d6:d9:2e:a9:94:90:8c:83:70:df:0d:3b:a7:de:b5:3c:3c:30:
aa:ca:f8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:26:01 2026 by rpki-client