Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w6X3MwPKbg-CNXr1L2ArUrJ8ogI.roa
File: w6X3MwPKbg-CNXr1L2ArUrJ8ogI.roa (raw, json)
Hash identifier: rSW12XFxcyzF0R2tjyJH/f1Yf86J2xQCXw6TF5f8ZvM=
Subject key identifier: C3:A5:F7:33:03:CA:6E:0F:82:35:7A:F5:2F:60:2B:52:B2:7C:A2:02
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6ACFBCC92089B756994C662305E3FBDE
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w6X3MwPKbg-CNXr1L2ArUrJ8ogI.roa
Signing time: Thu 16 Jul 2026 12:03:46 +0000
ROA not before: Thu 16 Jul 2026 12:03:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 393406
IP address blocks: 151.240.160.0/24 maxlen: 24
151.241.19.0/24 maxlen: 24
151.241.45.0/24 maxlen: 24
151.241.110.0/24 maxlen: 24
151.241.141.0/24 maxlen: 24
151.241.231.0/24 maxlen: 24
151.244.89.0/24 maxlen: 24
151.245.74.0/24 maxlen: 24
151.245.87.0/24 maxlen: 24
151.245.198.0/24 maxlen: 24
151.245.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6a:cf:bc:c9:20:89:b7:56:99:4c:66:23:05:e3:fb:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 16 12:03:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c3a5f73303ca6e0f82357af52f602b52b27ca202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a7:0e:73:2b:71:ac:d4:20:27:06:3c:a2:76:
92:fe:47:e8:25:2e:12:0a:87:05:83:95:53:85:48:
c7:9e:9d:90:d5:35:15:b2:5e:d7:de:2d:3d:54:2a:
ef:3c:d1:b5:d4:18:e1:bc:04:d7:73:83:40:e0:9e:
6e:41:03:cc:03:70:7a:4f:76:6e:ee:28:af:56:de:
99:e2:c9:eb:58:70:92:7f:3b:3b:24:cc:38:3d:70:
7f:e1:0b:0b:22:19:8b:68:b0:9a:e7:87:bc:fb:4c:
b9:5f:dd:c8:a4:8f:54:6b:aa:62:dc:8f:49:ba:b8:
21:6e:fe:f7:56:2d:b0:e8:4c:e4:2b:54:9b:8b:a6:
1e:57:a3:87:cb:7e:2a:6e:5f:0e:e3:60:3c:61:f5:
33:38:ad:72:ee:68:d8:f1:51:6f:a4:94:a5:31:5b:
5a:f6:3f:66:d3:73:1e:5e:e3:d3:33:4d:a8:84:ac:
71:80:75:4e:c6:aa:a8:75:e0:7c:19:8c:cc:80:ee:
9c:2c:4f:01:4a:16:04:8b:c5:a8:e6:d8:2d:9b:ef:
a7:81:a0:d8:15:8b:8d:a2:33:34:6f:d6:6c:0f:a2:
3a:70:d1:31:65:ce:e8:74:4c:c2:c5:a2:bb:37:c3:
01:22:0a:de:ce:be:6e:88:47:9e:20:5f:32:06:c1:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A5:F7:33:03:CA:6E:0F:82:35:7A:F5:2F:60:2B:52:B2:7C:A2:02
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/w6X3MwPKbg-CNXr1L2ArUrJ8ogI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.160.0/24
151.241.19.0/24
151.241.45.0/24
151.241.110.0/24
151.241.141.0/24
151.241.231.0/24
151.244.89.0/24
151.245.74.0/24
151.245.87.0/24
151.245.198.0/24
151.245.213.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:2e:83:27:23:18:bc:6f:ad:9b:f8:e7:1b:58:a4:63:98:97:
65:20:6d:8d:04:f5:7e:88:94:fe:96:24:af:4d:34:e0:b8:87:
e2:31:71:56:8c:a8:c6:cb:5a:1c:73:4d:e5:57:75:7e:f8:26:
41:9d:0a:f6:31:e0:50:be:8e:fe:20:c6:fc:67:26:94:be:62:
72:8b:0c:04:e8:84:0e:30:74:ed:27:ec:2a:2d:cf:b8:d2:3b:
b3:74:9b:40:bf:ae:dc:a4:9c:f7:e6:c1:a8:b0:36:79:32:b4:
12:dc:e3:49:0e:e2:d5:a0:4c:23:17:d2:18:66:fa:b5:bc:86:
f0:18:c0:4c:4f:ec:3e:97:3b:f6:cc:5e:d9:ca:73:5b:3c:ca:
47:55:21:ac:f4:f2:b4:c5:c6:b3:17:41:06:8b:5e:cc:b4:cd:
9f:d1:41:96:27:42:43:b4:dd:0f:68:54:bf:0a:34:30:4c:12:
c9:ed:31:8d:e6:28:9a:1d:c1:f6:b7:ba:e3:43:04:d6:77:53:
8a:ae:2e:9c:90:41:ba:45:d2:0b:07:c1:37:b7:62:5d:c0:26:
84:11:e4:da:27:15:f0:32:98:3c:0c:42:c3:a3:6f:a2:61:d4:
b7:c4:03:b8:87:18:b6:80:74:f0:b9:8a:8e:bf:17:24:ad:49:
37:f7:8d:7d
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgISAZ9qz7zJIIm3VplMZiMF4/veMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzE2MTIwMzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjM2E1ZjczMzAzY2E2ZTBmODIzNTdhZjUyZjYwMmI1MmIyN2NhMjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4KcOcytxrNQgJwY8onaS/kfoJS4S
CocFg5VThUjHnp2Q1TUVsl7X3i09VCrvPNG11BjhvATXc4NA4J5uQQPMA3B6T3Zu
7iivVt6Z4snrWHCSfzs7JMw4PXB/4QsLIhmLaLCa54e8+0y5X93IpI9Ua6pi3I9J
urghbv73Vi2w6EzkK1Sbi6YeV6OHy34qbl8O42A8YfUzOK1y7mjY8VFvpJSlMVta
9j9m03MeXuPTM02ohKxxgHVOxqqodeB8GYzMgO6cLE8BShYEi8Wo5tgtm++ngaDY
FYuNojM0b9ZsD6I6cNExZc7odEzCxaK7N8MBIgrezr5uiEeeIF8yBsHtwQIDAQAB
o4ICRTCCAkEwHQYDVR0OBBYEFMOl9zMDym4PgjV69S9gK1KyfKICMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdzZYM013UEtiZy1DTlhyMUwyQXJVcko4b2dJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAl/CgAwQA
l/ETAwQAl/EtAwQAl/FuAwQAl/GNAwQAl/HnAwQAl/RZAwQAl/VKAwQAl/VXAwQA
l/XGAwQAl/XVMA0GCSqGSIb3DQEBCwUAA4IBAQCMLoMnIxi8b62b+OcbWKRjmJdl
IG2NBPV+iJT+liSvTTTguIfiMXFWjKjGy1occ03lV3V++CZBnQr2MeBQvo7+IMb8
ZyaUvmJyiwwE6IQOMHTtJ+wqLc+40juzdJtAv67cpJz35sGosDZ5MrQS3ONJDuLV
oEwjF9IYZvq1vIbwGMBMT+w+lzv2zF7ZynNbPMpHVSGs9PK0xcazF0EGi17MtM2f
0UGWJ0JDtN0PaFS/CjQwTBLJ7TGN5iiaHcH2t7rjQwTWd1OKri6ckEG6RdILB8E3
t2JdwCaEEeTaJxXwMpg8DELDo2+iYdS3xAO4hxi2gHTwuYqOvxckrUk39419
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:32 2026 by rpki-client