Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/57e44t9lsUI0Zojko2Ek0pGJY34.roa
File: 57e44t9lsUI0Zojko2Ek0pGJY34.roa (raw, json)
Hash identifier: 6Fr4x8eZhm/Y3Hkmpe6mUdu9DM6GaBEZrEAUnSkBh5c=
Subject key identifier: E7:B7:B8:E2:DF:65:B1:42:34:66:88:E4:A3:61:24:D2:91:89:63:7E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6536EA80BDA7016E38365C4DF65A0914
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/57e44t9lsUI0Zojko2Ek0pGJY34.roa
Signing time: Wed 15 Jul 2026 09:58:45 +0000
ROA not before: Wed 15 Jul 2026 09:58:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.244.186.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:65:36:ea:80:bd:a7:01:6e:38:36:5c:4d:f6:5a:09:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 15 09:58:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7b7b8e2df65b142346688e4a36124d29189637e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:b4:23:56:95:76:af:1e:6c:04:df:02:39:
cb:5f:4b:db:f8:1b:81:97:12:d9:f8:7c:26:4a:ce:
3d:79:1e:45:dd:34:15:1c:b4:5a:78:17:c9:92:22:
97:3e:08:e2:41:7f:25:07:9d:ed:7f:6c:69:00:d1:
05:d5:88:55:16:32:54:49:ca:ac:91:d3:54:95:1c:
5a:87:08:dc:f2:23:b2:91:9a:d0:3f:da:f8:41:a5:
3f:d1:9d:95:e5:a1:79:90:52:58:4d:b4:69:80:6c:
b4:7e:03:a5:96:8e:54:6a:ec:36:9b:80:64:2a:96:
a0:99:ed:fe:1e:6e:bf:43:22:fc:81:72:54:a3:10:
a2:50:06:04:da:26:c2:c5:83:4c:c2:47:5f:1f:78:
dd:b9:5d:94:31:9a:79:6d:5f:84:a7:12:ef:64:12:
70:5f:b5:18:6b:d8:f8:19:66:6c:98:fb:fa:4e:19:
99:12:7d:18:85:ea:d8:fc:84:2d:2e:27:32:6e:cc:
80:d0:fd:fa:f8:64:cd:86:6d:49:aa:fe:5c:c5:8a:
43:57:8f:75:a0:47:56:af:07:2a:e6:48:cd:1e:50:
90:eb:29:64:00:7e:30:1b:0e:4a:56:38:9a:fa:a3:
ad:c3:d5:0b:b6:8e:32:bd:ca:21:35:e5:28:3b:d7:
f8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B7:B8:E2:DF:65:B1:42:34:66:88:E4:A3:61:24:D2:91:89:63:7E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/57e44t9lsUI0Zojko2Ek0pGJY34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0-151.240.13.255
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0-151.241.32.255
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.145.0/24
151.242.176.0/22
151.242.184.0/22
151.244.186.0/24
151.245.144.0/21
151.245.180.0/22
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.247.4.0/24
151.247.112.0/21
151.247.131.0/24
151.247.144.0/22
151.247.152.0/22
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
18:0b:b3:b0:03:07:63:88:ff:d5:ee:24:4a:d1:3b:9f:a1:58:
25:05:eb:41:84:9b:59:39:ec:80:fb:cb:9b:36:ac:8b:4d:39:
14:99:f7:2a:72:26:f3:70:ed:41:9b:2c:31:00:f3:cc:69:79:
92:a4:20:24:91:1a:8d:06:a4:b5:02:d6:e3:f6:a4:cf:69:dc:
2f:24:d3:f5:85:ba:75:7c:f7:fc:38:eb:ba:64:cb:f7:ee:d2:
ba:6f:6b:4c:ac:20:7c:63:4b:4d:3f:05:d7:ea:5f:71:c8:85:
67:e4:10:9d:11:19:c4:d3:f6:5a:33:fb:76:e9:20:a7:c7:d1:
61:e1:1b:fb:27:8a:5c:aa:22:c6:5d:5b:85:9d:bb:f6:34:db:
c0:fb:8b:95:fa:2f:ef:70:9d:0a:fc:57:b6:39:80:87:54:a5:
a9:69:06:b3:9a:88:0c:d6:1b:b9:6f:0f:37:1e:db:83:3d:9d:
9a:0a:3f:fe:be:80:fc:9b:03:4f:50:1f:3d:bb:06:21:99:6d:
8c:4a:c6:c3:fb:b5:fd:4f:c8:db:09:c3:a9:91:66:6e:09:99:
29:a5:6a:53:8e:b3:ad:6e:5c:f7:0f:c7:ff:49:c5:8d:91:a3:
24:5d:10:f6:b6:ec:08:90:89:13:4b:14:aa:db:1f:ab:20:f1:
b2:54:8f:ba
-----BEGIN CERTIFICATE-----
MIIG5TCCBc2gAwIBAgISAZ9lNuqAvacBbjg2XE32WgkUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNzE1MDk1ODQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlN2I3YjhlMmRmNjViMTQyMzQ2Njg4ZTRhMzYxMjRkMjkxODk2MzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhK0I1aVdq8ebATfAjnLX0vb+BuB
lxLZ+HwmSs49eR5F3TQVHLRaeBfJkiKXPgjiQX8lB53tf2xpANEF1YhVFjJUScqs
kdNUlRxahwjc8iOykZrQP9r4QaU/0Z2V5aF5kFJYTbRpgGy0fgOllo5Uauw2m4Bk
Kpagme3+Hm6/QyL8gXJUoxCiUAYE2ibCxYNMwkdfH3jduV2UMZp5bV+EpxLvZBJw
X7UYa9j4GWZsmPv6ThmZEn0YherY/IQtLicybsyA0P36+GTNhm1Jqv5cxYpDV491
oEdWrwcq5kjNHlCQ6ylkAH4wGw5KVjia+qOtw9ULto4yvcohNeUoO9f4IwIDAQAB
o4ID8TCCA+0wHQYDVR0OBBYEFOe3uOLfZbFCNGaI5KNhJNKRiWN+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNTdlNDR0OWxzVUkwWm9qa28yRWswcEdKWTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICBQYIKwYBBQUHAQcBAf8EggH0MIIB8DCCAewEAgABMIIB
5AMEACXK3zAMAwQAl/ALAwQBl/AMAwQAl/APAwQAl/ATAwQAl/AZMAwDBAWX8CAD
BACX8CoDBACX8FMwDAMEA5fwWAMEAJfwWgMEAZfwfgMEAZfwnDAMAwQAl/CfAwQA
l/CgAwQAl/CiAwQAl/CkMAwDBAGX8KYDBACX8KgwDAMEAZfwqgMEAJfwrDAMAwQB
l/CuAwQAl/CwAwQAl/CyMAwDBAKX8LQDBACX8MwwDAMEAZfwzgMEAZfw4AMEAJfw
5TAMAwQAl/DpAwQAl/DuAwQAl/DwAwQAl/D4AwQAl/D+AwQAl/EJMAwDBACX8QsD
BAGX8QwDBACX8Q8DBACX8RIDBACX8RYDBACX8RgDBAGX8RoDBACX8R0wDAMEAJfx
HwMEAJfxIAMEAJfxKAMEAJfxLwMEAJfxQgMEAJfxRQMEAZfxTjAMAwQAl/FZAwQA
l/FaAwQAl/FcAwQAl/FeAwQAl/FoAwQAl/FsMAwDBACX8W8DBACX8XADBACX8pED
BAKX8rADBAKX8rgDBACX9LoDBAOX9ZADBAKX9bQDBACX9csDBAOX9iADBAOX9mgD
BAOX9qgDBAKX9rQDBASX9uADBACX9wQDBAOX93ADBACX94MDBAKX95ADBAKX95gD
BACX998wDQYJKoZIhvcNAQELBQADggEBABgLs7ADB2OI/9XuJErRO5+hWCUF60GE
m1k57ID7y5s2rItNORSZ9ypyJvNw7UGbLDEA88xpeZKkICSRGo0GpLUC1uP2pM9p
3C8k0/WFunV89/w467pky/fu0rpva0ysIHxjS00/BdfqX3HIhWfkEJ0RGcTT9loz
+3bpIKfH0WHhG/snilyqIsZdW4Wdu/Y028D7i5X6L+9wnQr8V7Y5gIdUpalpBrOa
iAzWG7lvDzce24M9nZoKP/6+gPybA09QHz27BiGZbYxKxsP7tf1PyNsJw6mRZm4J
mSmlalOOs61uXPcPx/9JxY2RoyRdEPa27AiQiRNLFKrbH6sg8bJUj7o=
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:31:15 2026 by rpki-client