Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-IdYE1chDBv5SMJdG0wbgSbHOeI.roa
File: 1-IdYE1chDBv5SMJdG0wbgSbHOeI.roa (raw, json)
Hash identifier: GD9SklPAhOF7tPFkb8W/sYra4mmiu1mnE8Z5gMKkSRs=
Subject key identifier: F8:87:58:13:57:21:0C:1B:F9:48:C2:5D:1B:4C:1B:81:26:C7:39:E2
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F41992EF5C5E565537F8C0D57285A6C1E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-IdYE1chDBv5SMJdG0wbgSbHOeI.roa
Signing time: Wed 08 Jul 2026 11:59:45 +0000
ROA not before: Wed 08 Jul 2026 11:59:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
37.202.217.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.195.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:99:2e:f5:c5:e5:65:53:7f:8c:0d:57:28:5a:6c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 8 11:59:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f887581357210c1bf948c25d1b4c1b8126c739e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:ab:7f:66:bd:44:55:b1:f2:83:43:c5:0e:
f0:f0:8a:48:77:5c:62:ac:cc:6a:32:78:92:7d:23:
48:8b:ab:68:bd:39:36:67:b4:d1:94:2b:5e:50:b4:
d1:9c:d3:f8:d8:6b:50:1f:07:28:bc:de:cb:db:76:
40:1a:b8:24:91:d7:52:c3:93:ff:8c:8e:7d:7a:fe:
df:5a:99:a7:35:aa:38:40:af:84:c9:c3:99:f0:d1:
17:b0:45:d4:7b:7f:9b:3f:f7:e9:45:4a:c0:2b:8b:
04:f4:e0:a9:20:0b:37:f2:86:dc:4a:19:27:2c:a9:
38:dc:53:4e:09:4b:0a:e2:b6:cf:15:70:ab:fb:1e:
79:a4:11:05:74:79:a2:f4:3a:de:39:17:7b:9b:6f:
48:f4:78:73:95:ed:56:d5:bd:28:33:ef:f7:b5:5c:
bc:21:50:6e:e8:cf:ba:b8:a4:08:96:69:fb:25:dd:
17:63:f8:b7:10:1e:c1:6b:79:75:32:ed:ea:09:70:
0c:a8:4d:15:bc:7e:b2:2a:b6:5c:bc:cf:dd:e2:8f:
95:3c:e1:b7:fc:a5:7f:65:63:c7:b9:f7:d4:9e:d8:
c3:42:55:69:95:4a:48:6d:41:3d:9b:20:5c:80:f3:
66:17:2b:52:9c:2a:80:d6:e6:9b:e2:72:75:bc:18:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:58:13:57:21:0C:1B:F9:48:C2:5D:1B:4C:1B:81:26:C7:39:E2
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-IdYE1chDBv5SMJdG0wbgSbHOeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
37.202.217.0/24
151.240.73.0/24
151.240.227.0/24
151.241.207.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.195.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.244.235.0/24
151.246.161.0/24
Signature Algorithm: sha256WithRSAEncryption
82:a3:37:64:6a:e1:19:fd:39:25:e5:ba:e3:18:59:ba:a6:f7:
d1:e2:22:4b:e7:6c:4e:d7:0c:f9:b8:9b:57:a9:90:32:ec:a5:
5a:bc:1a:a6:6a:d1:5b:c8:4d:f8:ad:89:e3:17:3e:14:a3:c6:
97:af:b3:df:96:90:e7:57:01:f3:ec:b1:c7:64:18:08:15:f6:
af:17:15:02:22:ee:70:7f:fd:62:58:38:be:8d:be:8c:ea:3e:
38:86:83:1a:cb:96:16:14:1d:b1:42:14:64:dc:df:c0:df:dc:
a6:8c:b1:6a:4f:8c:b2:d6:39:d5:ef:09:96:64:18:c1:14:6f:
1e:a9:2c:e6:17:93:9e:14:2c:04:05:33:e1:19:d4:00:e1:14:
de:cb:04:fd:11:6b:c1:c3:22:6c:a7:5d:ec:de:b1:0d:69:e0:
9b:8a:0b:a4:31:72:b3:a5:27:26:53:b9:35:15:83:66:6e:11:
c3:0f:db:1a:07:96:0f:71:b7:77:05:22:68:d6:aa:85:38:e1:
a0:6a:b0:1f:63:78:ba:cf:05:86:00:21:33:99:aa:f8:ee:35:
a6:a7:d9:24:e1:7f:6e:63:d0:f3:12:ee:78:de:e0:50:a8:ae:
fb:59:3a:46:c6:61:a5:e2:8d:6e:57:01:a8:a3:34:d2:97:87:
c9:b7:1c:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:32:13 2026 by rpki-client