Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YF7G-7kVMdiLzt5DIt2-vHc0AwM.roa
File: YF7G-7kVMdiLzt5DIt2-vHc0AwM.roa (raw, json)
Hash identifier: 2jy+8o4a0bUj/8YSq1/F/+EljFPp6FSxsWv4mtkn+s0=
Subject key identifier: 60:5E:C6:FB:B9:15:31:D8:8B:CE:DE:43:22:DD:BE:BC:77:34:03:03
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D1018C1AF1A6900EDE43CA3E823CFB405
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YF7G-7kVMdiLzt5DIt2-vHc0AwM.roa
Signing time: Sat 21 Mar 2026 11:12:30 +0000
ROA not before: Sat 21 Mar 2026 11:12:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 151.240.1.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.241.68.0/24 maxlen: 24
151.242.103.0/24 maxlen: 24
151.243.6.0/24 maxlen: 24
151.243.120.0/24 maxlen: 24
151.243.160.0/22 maxlen: 22
151.243.236.0/24 maxlen: 24
151.244.78.0/24 maxlen: 24
151.245.54.0/24 maxlen: 24
151.245.111.0/24 maxlen: 24
151.245.127.0/24 maxlen: 24
151.245.238.0/24 maxlen: 24
151.246.177.0/24 maxlen: 24
151.246.190.0/24 maxlen: 24
151.247.15.0/24 maxlen: 24
151.247.37.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.192.0/24 maxlen: 24
151.247.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:10:18:c1:af:1a:69:00:ed:e4:3c:a3:e8:23:cf:b4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 21 11:12:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=605ec6fbb91531d88bcede4322ddbebc77340303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:6d:84:91:a2:50:e4:8f:64:9d:64:6e:1f:
08:d9:5e:69:f0:50:be:00:ae:c6:1f:c3:41:17:3e:
fd:08:81:16:63:5c:35:d6:c9:8d:7f:bd:15:b5:53:
52:06:8f:e9:f5:c3:97:e4:53:34:cb:b7:27:a4:24:
0e:d5:fa:fc:72:80:c0:a8:2d:5a:73:9b:7f:7f:76:
9f:9a:e2:74:98:03:df:0e:50:d9:58:09:bc:46:32:
22:57:9c:3e:8a:34:93:75:08:90:b2:38:d7:07:7d:
99:4c:bb:6a:3d:63:8d:11:6b:89:0a:21:a3:8b:85:
95:06:f4:03:3a:d7:98:7f:b2:20:35:e6:ca:5f:a2:
fe:50:54:cd:85:d4:7a:ff:bd:cd:3a:1f:1c:d5:38:
81:61:a6:59:80:84:4a:04:7b:cd:2a:ee:f0:e9:a6:
d6:7b:70:e6:00:5b:a6:c8:9b:3c:12:9c:b1:e0:6c:
b4:6f:b9:cb:e0:e3:29:36:b5:d0:29:21:22:06:1a:
a2:5c:65:ed:35:10:b4:90:ae:db:e0:61:ee:1d:ee:
e2:ee:16:5b:e0:4e:15:b9:e2:5f:50:26:3c:9c:e6:
81:2e:64:54:1a:d3:8a:e7:c9:d9:24:56:ca:d2:e3:
23:13:b4:74:b5:18:88:a3:34:1a:16:ff:cc:b5:9b:
29:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5E:C6:FB:B9:15:31:D8:8B:CE:DE:43:22:DD:BE:BC:77:34:03:03
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/YF7G-7kVMdiLzt5DIt2-vHc0AwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.1.0/24
151.240.24.0/24
151.241.68.0/24
151.242.103.0/24
151.243.6.0/24
151.243.120.0/24
151.243.160.0/22
151.243.236.0/24
151.244.78.0/24
151.245.54.0/24
151.245.111.0/24
151.245.127.0/24
151.245.238.0/24
151.246.177.0/24
151.246.190.0/24
151.247.15.0/24
151.247.37.0/24
151.247.76.0/24
151.247.192.0/24
151.247.217.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c5:a6:bc:52:c4:05:90:d0:cd:f3:d6:d1:db:f5:18:81:42:
fb:bb:3a:b1:c9:ab:bb:97:18:4c:8a:8b:f1:34:e5:ae:7e:c1:
c8:32:69:52:ac:12:d1:99:22:ef:33:56:84:1a:0d:d8:ff:9f:
36:63:7b:28:e0:25:85:84:aa:f7:f3:2d:fb:aa:e9:d0:5a:56:
29:ec:a1:c1:a6:cd:e2:59:9e:f8:1f:8e:04:e5:83:fc:95:02:
f7:62:36:24:95:e9:b5:b8:b1:da:83:79:fc:f1:61:7c:82:f4:
e8:26:87:37:22:e1:9b:d2:db:81:b3:1d:41:d6:ef:09:26:64:
a4:2f:33:d3:3e:7a:55:8b:86:8b:51:9d:39:e0:40:37:a0:08:
af:19:19:d8:d0:e5:d3:b2:18:a6:53:48:2e:d8:4d:58:99:6e:
03:6a:a7:73:f5:a1:9b:0d:c9:38:17:8a:c5:33:72:9a:ef:9c:
e3:02:f1:e9:d1:d4:f0:29:77:1d:5c:e3:c2:06:2d:6d:3a:c4:
e3:98:72:e9:e0:bd:bb:5d:0a:03:b3:60:39:5b:d0:9b:19:4c:
50:cc:c8:a5:4e:85:a7:69:c6:42:88:64:cc:b6:93:14:17:31:
0c:1d:9d:3b:ac:1a:0f:e4:25:dc:98:05:d6:60:6f:be:7d:1b:
3b:95:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:36:51 2026 by rpki-client