Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/80t52su81hHkT6NJkMIq_oPO4xQ.roa
File: 80t52su81hHkT6NJkMIq_oPO4xQ.roa (raw, json)
Hash identifier: IEyMpo4OoFv9kG1aeC2WbGuPWOpcpM/DW0FeMcwudYk=
Subject key identifier: F3:4B:79:DA:CB:BC:D6:11:E4:4F:A3:49:90:C2:2A:FE:83:CE:E3:14
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D0B3451B49350C3C0D1AA8FE2520C3A02
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/80t52su81hHkT6NJkMIq_oPO4xQ.roa
Signing time: Fri 20 Mar 2026 12:24:31 +0000
ROA not before: Fri 20 Mar 2026 12:24:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 37.202.208.0/24 maxlen: 24
37.202.220.0/24 maxlen: 24
151.241.51.0/24 maxlen: 24
151.241.205.0/24 maxlen: 24
151.243.87.0/24 maxlen: 24
151.243.174.0/24 maxlen: 24
151.244.129.0/24 maxlen: 24
151.245.126.0/24 maxlen: 24
151.247.50.0/23 maxlen: 24
151.247.52.0/23 maxlen: 24
151.247.184.0/23 maxlen: 24
151.247.186.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0b:34:51:b4:93:50:c3:c0:d1:aa:8f:e2:52:0c:3a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 20 12:24:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f34b79dacbbcd611e44fa34990c22afe83cee314
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:c6:1f:f6:4a:5c:62:6d:f4:0e:d6:8a:b9:
27:f2:cd:cd:83:bc:65:bc:4e:d8:90:d6:64:4c:ab:
91:75:bb:d2:aa:7c:99:6b:c2:9a:ca:e8:75:60:dc:
a9:df:82:ab:af:db:7a:6d:f1:b4:d5:59:d4:94:3e:
66:e6:31:36:d2:2f:18:c3:b6:b7:9d:a7:3d:51:3d:
76:31:00:8b:b4:91:fb:25:14:23:38:9a:4a:1f:21:
69:84:a4:ec:bf:3b:13:8d:18:f5:42:5c:1c:f9:53:
ba:3d:27:53:ac:63:e2:5e:de:a7:49:8e:58:bc:58:
f8:99:7e:f8:94:f4:a3:52:15:1c:f0:14:24:e9:db:
38:c4:f4:74:51:27:f5:5d:52:84:44:ef:b7:5b:14:
4d:96:94:0b:ad:a4:a0:25:85:14:96:1f:32:9e:ea:
fd:0e:e5:71:ab:69:70:6e:2e:32:eb:3d:a8:d7:66:
9c:2b:fe:0f:12:d8:f6:c9:09:6b:91:45:ec:05:08:
a7:e3:1b:03:90:44:ae:7e:64:dc:7f:5c:d2:4d:93:
7a:bb:42:f1:f5:cb:ac:1c:6f:d0:2a:13:8c:86:9b:
23:a9:b3:ad:52:bb:fd:f8:e1:f2:58:ca:3e:6d:0e:
bf:9d:c2:a1:03:e0:77:20:e2:c2:80:a3:33:d0:02:
32:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4B:79:DA:CB:BC:D6:11:E4:4F:A3:49:90:C2:2A:FE:83:CE:E3:14
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/80t52su81hHkT6NJkMIq_oPO4xQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.208.0/24
37.202.220.0/24
151.241.51.0/24
151.241.205.0/24
151.243.87.0/24
151.243.174.0/24
151.244.129.0/24
151.245.126.0/24
151.247.50.0-151.247.53.255
151.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:29:48:6c:a6:51:97:c2:f6:d9:cc:ab:7c:00:f5:8b:94:93:
5d:bf:a4:59:c3:42:31:2a:f0:10:32:b0:57:42:4b:52:57:86:
e9:32:dd:62:d0:6e:e4:4a:43:63:d3:2b:f4:db:38:a2:f7:4a:
b2:4d:31:3e:a9:11:cd:b2:72:e7:c8:f5:87:60:9c:54:74:1a:
0b:89:70:cf:40:a1:5d:e7:df:85:d6:16:f7:a8:84:ba:77:aa:
16:b8:1c:53:c2:34:df:2a:ba:a3:10:a3:56:ba:8c:29:f9:9f:
6e:5e:9d:a0:51:da:a0:42:e8:eb:75:e0:0f:e1:36:af:8e:aa:
52:66:45:84:ed:c1:2b:fd:0a:01:71:9f:33:5e:4e:f4:9d:40:
68:16:de:44:72:2d:16:e7:6c:62:d5:2c:c8:65:76:24:a5:3d:
d3:89:6a:92:11:e1:07:7e:10:18:41:a9:d2:28:79:7c:23:b4:
d9:24:92:e6:07:1d:28:60:bf:4f:cf:cc:bd:57:05:0f:00:6a:
14:cd:66:c2:6e:dc:36:de:1b:bb:56:44:5c:5c:93:4b:18:c3:
3c:a2:0c:76:9f:57:58:c5:42:85:bb:de:a0:41:34:42:6f:7f:
f6:c6:a5:8c:10:29:a5:4e:4f:53:f5:c1:b1:b3:a4:95:d2:3c:
78:c1:92:76
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:15 2026 by rpki-client