Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X-ErDzmuOFn_10JPHrzjrDbcYgs.roa
File: X-ErDzmuOFn_10JPHrzjrDbcYgs.roa (raw, json)
Hash identifier: XXbplVC46vVUcUBYk5ka18qlF32dMmcO3lrZjaVpVYM=
Subject key identifier: 5F:E1:2B:0F:39:AE:38:59:FF:D7:42:4F:1E:BC:E3:AC:36:DC:62:0B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E17C1349B547467D52E791C88EE98F39E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X-ErDzmuOFn_10JPHrzjrDbcYgs.roa
Signing time: Mon 11 May 2026 15:56:38 +0000
ROA not before: Mon 11 May 2026 15:56:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.128.0/21 maxlen: 24
151.240.136.0/21 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.8.0/23 maxlen: 23
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.143.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:c1:34:9b:54:74:67:d5:2e:79:1c:88:ee:98:f3:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 11 15:56:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5fe12b0f39ae3859ffd7424f1ebce3ac36dc620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e2:e9:bb:dc:69:ff:5d:b1:c8:83:41:5d:a2:
fa:d7:7b:d3:08:38:21:6f:5e:df:04:84:8c:92:43:
0b:13:36:3e:eb:a3:20:a4:3d:f8:72:96:1c:ca:8a:
08:27:12:f0:5d:7e:8f:fa:86:bc:29:57:1a:26:39:
30:df:83:10:e9:8b:3d:b7:6a:76:1b:f2:81:b6:e9:
44:41:56:4a:bc:5f:d4:ca:32:2a:0f:c9:a6:2a:d0:
b7:4d:5e:6e:6b:c2:ca:45:a4:eb:82:d7:72:73:bc:
a0:71:2f:ce:70:c5:a0:51:29:0a:ab:42:8a:02:2d:
a2:ce:8c:25:19:29:73:7f:b1:ac:82:ba:d5:5c:3d:
a6:fd:88:73:80:cf:4b:5e:b6:10:a3:1c:ca:9a:42:
bf:57:8d:91:fa:dd:b5:51:61:df:51:c0:96:bd:8f:
57:1c:82:9a:fd:f7:8c:c8:42:9f:27:71:ed:f9:a0:
31:9d:88:d6:a2:61:ec:83:aa:c4:ae:7a:03:00:ed:
78:30:af:72:09:7d:9b:b1:09:4c:66:b3:dd:74:97:
1a:04:bb:60:18:a3:80:31:7f:90:b2:fa:e6:eb:d6:
2f:fb:e7:87:d3:37:9b:f6:9b:85:4d:19:83:33:44:
2a:0e:df:7b:15:26:56:a0:61:34:6c:12:d1:c7:13:
5f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:E1:2B:0F:39:AE:38:59:FF:D7:42:4F:1E:BC:E3:AC:36:DC:62:0B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/X-ErDzmuOFn_10JPHrzjrDbcYgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.128.0/20
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.135.0/24
151.243.8.0/23
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.143.0/24
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:52:d3:b3:63:5c:8d:b2:3d:f6:7d:58:56:29:14:70:c2:c9:
81:7b:a9:11:2e:b4:88:6f:b2:58:8b:fd:da:9d:b7:b6:29:1d:
7e:f6:98:0a:5a:60:15:41:a3:44:04:2e:7d:f7:57:a3:0c:c7:
1f:b9:8a:0c:9a:c9:cc:dd:e9:62:b6:d4:52:dc:e0:fa:22:d4:
85:b5:6b:7a:77:f7:fb:83:dc:d1:e0:3a:d7:49:d6:28:d0:10:
d7:c6:00:b6:17:b1:21:fa:d6:44:50:3b:e4:49:c1:51:22:29:
8d:60:41:bd:ac:57:99:00:87:36:bc:ff:4e:e1:8f:ca:11:d8:
ce:04:1c:10:0a:d1:7c:a2:8e:ea:c6:7e:fb:24:f1:d4:37:35:
4c:71:89:d1:df:5e:db:b8:59:0e:c4:69:68:f0:64:6c:32:a2:
9b:b0:40:8d:5e:8b:78:ab:1f:61:8f:24:ea:8d:3a:b3:b2:47:
37:95:38:4b:75:1a:fe:7b:66:73:2a:11:19:00:49:f3:20:d2:
b4:4c:60:ca:db:1e:c2:f7:75:ce:3d:d9:4b:13:ea:54:b9:5f:
f7:47:e7:5c:38:05:db:16:bd:bd:30:9f:05:5f:b4:e8:a8:8e:
c1:6b:65:8a:63:b6:82:dc:bb:0a:70:2e:58:5f:be:49:fe:c7:
79:ef:ab:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:06 2026 by rpki-client