Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/37Ek-6irT7HMWkkGRGbCDVTbbHs.roa
File: 37Ek-6irT7HMWkkGRGbCDVTbbHs.roa (raw, json)
Hash identifier: qtEYOxq3OVQnk0Zj8QECP8d1C4YThJRsPq5AUSSqHJQ=
Subject key identifier: DF:B1:24:FB:A8:AB:4F:B1:CC:5A:49:06:44:66:C2:0D:54:DB:6C:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0435BE6696563A8ED774003AA6B45EA16
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/37Ek-6irT7HMWkkGRGbCDVTbbHs.roa
Signing time: Thu 27 Aug 2026 13:14:51 +0000
ROA not before: Thu 27 Aug 2026 13:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 151.240.145.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.241.105.0/24 maxlen: 24
151.241.106.0/24 maxlen: 24
151.241.107.0/24 maxlen: 24
151.241.132.0/22 maxlen: 22
151.242.56.0/24 maxlen: 24
151.242.70.0/24 maxlen: 24
151.242.71.0/24 maxlen: 24
151.242.123.0/24 maxlen: 24
151.242.135.0/24 maxlen: 24
151.243.204.0/23 maxlen: 23
151.244.56.0/24 maxlen: 24
151.245.2.0/24 maxlen: 24
151.245.22.0/24 maxlen: 24
151.245.56.0/22 maxlen: 22
151.245.185.0/24 maxlen: 24
151.245.187.0/24 maxlen: 24
151.245.188.0/24 maxlen: 24
151.246.8.0/21 maxlen: 24
151.247.24.0/24 maxlen: 24
151.247.48.0/24 maxlen: 24
151.247.76.0/24 maxlen: 24
151.247.77.0/24 maxlen: 24
151.247.128.0/23 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.133.0/24 maxlen: 24
151.247.134.0/24 maxlen: 24
151.247.135.0/24 maxlen: 24
151.247.242.0/24 maxlen: 24
151.247.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:5b:e6:69:65:63:a8:ed:77:40:03:aa:6b:45:ea:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 27 13:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dfb124fba8ab4fb1cc5a49064466c20d54db6c7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:cc:2d:01:76:ce:50:ab:fa:f4:3b:69:01:
af:a5:1e:64:7d:ec:5b:ed:a3:c7:29:2f:34:6c:64:
1f:88:1b:66:fa:ec:36:6a:fe:51:f7:f8:b0:53:45:
de:43:47:95:e6:15:4c:58:12:f2:8f:76:78:5a:33:
a9:33:a7:ed:b9:3a:f5:34:e1:a6:09:eb:39:01:4d:
06:c5:5f:37:97:88:9b:bd:47:c1:97:94:20:25:0e:
47:0c:fa:23:4a:e2:89:dc:81:49:26:f0:f0:70:da:
10:e7:ad:f4:5f:34:ef:af:1c:1d:b9:c9:2e:c2:db:
50:76:dd:53:4a:17:45:8c:94:20:94:26:0e:3c:4c:
09:61:c3:13:6a:6d:74:b8:ee:f3:18:fd:d8:fa:b8:
09:69:76:92:89:3f:77:47:c5:6c:9c:e4:8a:99:8a:
ce:32:54:32:05:81:90:1d:56:ca:e3:9a:66:a1:ef:
53:4f:c1:d3:20:99:98:ab:83:6e:a2:85:4e:98:5f:
a3:ba:31:52:47:f4:26:ab:96:ac:99:1e:11:41:ba:
df:ea:15:91:b6:2e:bc:9f:39:31:3d:a5:2c:e2:d6:
ce:65:48:2a:02:67:5e:9e:a6:f2:02:2d:2f:59:d7:
f0:5d:0f:40:c1:8a:17:70:ea:d6:ef:63:0a:8b:58:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B1:24:FB:A8:AB:4F:B1:CC:5A:49:06:44:66:C2:0D:54:DB:6C:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/37Ek-6irT7HMWkkGRGbCDVTbbHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.240.145.0/24
151.240.171.0/24
151.241.105.0-151.241.107.255
151.241.132.0/22
151.242.56.0/24
151.242.70.0/23
151.242.123.0/24
151.242.135.0/24
151.243.204.0/23
151.244.56.0/24
151.245.2.0/24
151.245.22.0/24
151.245.56.0/22
151.245.185.0/24
151.245.187.0-151.245.188.255
151.246.8.0/21
151.247.24.0/24
151.247.48.0/24
151.247.76.0/23
151.247.128.0/23
151.247.131.0/24
151.247.133.0-151.247.135.255
151.247.242.0/24
151.247.248.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:c1:6b:58:46:9c:80:1e:4c:96:bc:8d:e1:01:d4:17:f0:87:
fb:3a:87:41:9d:f4:e5:e2:04:92:76:c5:b0:c0:86:0e:e3:91:
16:f5:0a:9a:86:fe:b1:3f:9d:3e:ac:1c:f5:9d:e9:6d:35:bd:
bb:ee:e6:a1:bd:5f:07:5f:f4:0a:fc:b5:1e:21:fb:1e:42:af:
df:af:2a:8e:22:1a:c6:08:a4:96:66:f3:df:72:6d:58:2e:00:
de:60:38:19:52:1b:9c:5d:d2:ea:56:f1:d1:fc:a0:2f:5d:e3:
12:de:ea:3e:7a:ad:f0:a6:94:9e:e6:18:ea:38:c2:c9:22:88:
06:8f:0b:ba:85:ed:7e:d6:91:25:fa:56:5e:62:1f:e8:5b:b0:
4d:e3:6c:1f:5d:f5:59:24:8d:db:e8:af:b2:52:3f:68:27:f5:
fe:5e:fb:a2:77:a5:b4:1e:28:c0:8a:85:80:ad:19:da:67:a7:
c0:5a:c5:c9:99:d5:ad:60:7c:86:25:f1:a9:3c:1e:94:5f:1d:
ea:c9:eb:93:d6:d2:a5:6e:65:5e:23:f4:91:8b:9a:4c:52:ee:
da:9e:d3:fb:16:02:b7:4a:d8:69:03:7d:7c:5f:d1:4f:73:f7:
2b:4b:b6:fc:0a:bc:11:8b:f7:46:2d:cc:00:91:16:72:e7:15:
d0:1d:43:c4
-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgISAaBDW+ZpZWOo7XdAA6prReoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwODI3MTMxNDUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZmIxMjRmYmE4YWI0ZmIxY2M1YTQ5MDY0NDY2YzIwZDU0ZGI2YzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOzMLQF2zlCr+vQ7aQGvpR5kfexb
7aPHKS80bGQfiBtm+uw2av5R9/iwU0XeQ0eV5hVMWBLyj3Z4WjOpM6ftuTr1NOGm
Ces5AU0GxV83l4ibvUfBl5QgJQ5HDPojSuKJ3IFJJvDwcNoQ5630XzTvrxwducku
wttQdt1TShdFjJQglCYOPEwJYcMTam10uO7zGP3Y+rgJaXaSiT93R8VsnOSKmYrO
MlQyBYGQHVbK45pmoe9TT8HTIJmYq4NuooVOmF+jujFSR/Qmq5asmR4RQbrf6hWR
ti68nzkxPaUs4tbOZUgqAmdenqbyAi0vWdfwXQ9AwYoXcOrW72MKi1gvhwIDAQAB
o4ICsDCCAqwwHQYDVR0OBBYEFN+xJPuoq0+xzFpJBkRmwg1U22x7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMzdFay02aXJUN0hNV2trR1JHYkNEVlRiYkhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHFBggrBgEFBQcBBwEB/wSBtTCBsjCBrwQCAAEwgagDBACX
8JEDBACX8KswDAMEAJfxaQMEApfxaAMEApfxhAMEAJfyOAMEAZfyRgMEAJfyewME
AJfyhwMEAZfzzAMEAJf0OAMEAJf1AgMEAJf1FgMEApf1OAMEAJf1uTAMAwQAl/W7
AwQAl/W8AwQDl/YIAwQAl/cYAwQAl/cwAwQBl/dMAwQBl/eAAwQAl/eDMAwDBACX
94UDBAOX94ADBACX9/IDBACX9/gwDQYJKoZIhvcNAQELBQADggEBAI7Ba1hGnIAe
TJa8jeEB1Bfwh/s6h0Gd9OXiBJJ2xbDAhg7jkRb1CpqG/rE/nT6sHPWd6W01vbvu
5qG9Xwdf9Ar8tR4h+x5Cr9+vKo4iGsYIpJZm899ybVguAN5gOBlSG5xd0upW8dH8
oC9d4xLe6j56rfCmlJ7mGOo4wskiiAaPC7qF7X7WkSX6Vl5iH+hbsE3jbB9d9Vkk
jdvor7JSP2gn9f5e+6J3pbQeKMCKhYCtGdpnp8BaxcmZ1a1gfIYl8ak8HpRfHerJ
65PW0qVuZV4j9JGLmkxS7tqe0/sWArdK2GkDfXxf0U9z9ytLtvwKvBGL90YtzACR
FnLnFdAdQ8Q=
-----END CERTIFICATE-----
Generated at Wed Sep 23 21:47:29 2026 by rpki-client