
Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BanmzOInDhwC3N2XoNgchj_7Oig.roa
File: BanmzOInDhwC3N2XoNgchj_7Oig.roa (raw, json)
Hash identifier: e9lIdzQ+6XDcV9rRnr2F3iD5AObwjnrmjmH2Ey4rHrM=
Subject key identifier: 05:A9:E6:CC:E2:27:0E:1C:02:DC:DD:97:A0:D8:1C:86:3F:FB:3A:28
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0199FADFDD7478E7743A2F119189BA1A16BB
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BanmzOInDhwC3N2XoNgchj_7Oig.roa
Signing time: Sun 19 Oct 2025 05:09:59 +0000
ROA not before: Sun 19 Oct 2025 05:09:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.196.0/23 maxlen: 24
37.202.209.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.122.0/23 maxlen: 23
151.240.124.0/23 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.35.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.74.0/23 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.96.0/20 maxlen: 24
151.241.103.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.136.0/21 maxlen: 24
151.241.152.0/21 maxlen: 24
151.241.171.0/24 maxlen: 24
151.241.174.0/24 maxlen: 24
151.241.208.0/21 maxlen: 24
151.241.216.0/21 maxlen: 24
151.241.224.0/19 maxlen: 24
151.242.24.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.68.0/24 maxlen: 24
151.242.78.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.88.0/24 maxlen: 24
151.242.126.0/24 maxlen: 24
151.242.136.0/23 maxlen: 24
151.242.140.0/22 maxlen: 24
151.242.144.0/23 maxlen: 24
151.242.168.0/23 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.28.0/22 maxlen: 24
151.243.36.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.47.0/24 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.108.0/23 maxlen: 24
151.243.109.0/24 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.150.0/24 maxlen: 24
151.243.156.0/24 maxlen: 24
151.243.169.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.176.0/21 maxlen: 24
151.243.192.0/21 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.206.0/23 maxlen: 24
151.243.207.0/24 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.217.0/24 maxlen: 24
151.243.224.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.230.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.243.252.0/23 maxlen: 24
151.244.40.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.190.0/24 maxlen: 24
151.244.196.0/24 maxlen: 24
151.244.216.0/22 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.232.0/22 maxlen: 24
151.244.236.0/23 maxlen: 24
151.244.236.0/24 maxlen: 24
151.244.238.0/23 maxlen: 24
151.244.242.0/23 maxlen: 24
151.244.244.0/23 maxlen: 24
151.244.246.0/23 maxlen: 24
151.244.246.0/24 maxlen: 24
151.244.248.0/23 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.250.0/24 maxlen: 24
151.244.252.0/22 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.24.0/23 maxlen: 24
151.245.28.0/23 maxlen: 24
151.245.60.0/22 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.86.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.92.0/24 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.245.136.0/21 maxlen: 24
151.245.144.0/21 maxlen: 24
151.245.160.0/21 maxlen: 24
151.245.176.0/21 maxlen: 24
151.245.194.0/24 maxlen: 24
151.245.216.0/21 maxlen: 24
151.245.220.0/24 maxlen: 24
151.245.224.0/21 maxlen: 24
151.245.232.0/21 maxlen: 24
151.245.239.0/24 maxlen: 24
151.245.248.0/21 maxlen: 24
151.246.9.0/24 maxlen: 24
151.246.104.0/21 maxlen: 24
151.246.127.0/24 maxlen: 24
151.246.128.0/17 maxlen: 24
151.246.191.0/24 maxlen: 24
151.246.218.0/24 maxlen: 24
151.246.249.0/24 maxlen: 24
151.246.255.0/24 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.195.0/24 maxlen: 24
151.247.196.0/24 maxlen: 24
151.247.197.0/24 maxlen: 24
151.247.198.0/24 maxlen: 24
151.247.199.0/24 maxlen: 24
151.247.200.0/24 maxlen: 24
151.247.210.0/24 maxlen: 24
151.247.213.0/24 maxlen: 24
151.247.216.0/24 maxlen: 24
151.247.219.0/24 maxlen: 24
151.247.220.0/24 maxlen: 24
151.247.223.0/24 maxlen: 24
151.247.225.0/24 maxlen: 24
151.247.229.0/24 maxlen: 24
151.247.231.0/24 maxlen: 24
151.247.234.0/24 maxlen: 24
151.247.236.0/24 maxlen: 24
151.247.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:09:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:df:dd:74:78:e7:74:3a:2f:11:91:89:ba:1a:16:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 19 05:09:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05a9e6cce2270e1c02dcdd97a0d81c863ffb3a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:56:0b:a7:ae:84:eb:db:a1:fd:c7:a9:5d:
35:6a:43:5e:86:46:84:ad:2b:de:71:24:1c:73:b9:
9c:73:0f:f0:50:6e:61:97:ef:e1:0a:c7:26:d2:e7:
48:a4:9c:64:93:31:20:b7:2b:17:e8:31:3c:58:30:
ef:94:36:7e:1e:e9:79:6e:00:66:3b:df:75:1b:de:
ff:6a:63:56:63:a6:69:14:83:46:c6:eb:83:84:5c:
4e:c7:fb:00:6c:cb:df:56:48:6b:93:e8:06:d0:1e:
26:43:46:25:d5:e3:62:9a:ab:ca:b1:8e:d6:a9:77:
6b:01:e3:65:52:a4:b3:b1:38:96:e7:17:68:f8:30:
9d:af:ad:18:a1:e2:5f:b7:79:9c:70:13:c0:28:46:
9b:0a:b9:80:00:a3:f5:87:ec:4c:9c:1c:8f:2e:49:
b0:aa:32:9c:95:94:67:46:b2:7c:b0:38:46:13:b6:
67:ac:e3:16:0d:d5:80:d2:ac:55:9a:f1:71:38:53:
12:c7:07:0e:11:94:30:9a:4c:98:8c:60:32:18:98:
68:89:cf:0d:67:53:58:af:59:6d:2e:8c:53:f2:08:
d7:a7:c3:38:fa:b3:8b:f7:90:2c:2b:81:62:09:77:
2c:b2:76:f9:99:bc:99:6f:7e:50:08:2e:e2:bb:3a:
79:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A9:E6:CC:E2:27:0E:1C:02:DC:DD:97:A0:D8:1C:86:3F:FB:3A:28
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/BanmzOInDhwC3N2XoNgchj_7Oig.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.196.0/23
37.202.209.0/24
37.202.212.0/23
151.240.16.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0-151.240.125.255
151.240.144.0/24
151.240.147.0/24
151.240.150.0/23
151.240.154.0/24
151.240.158.0/24
151.240.161.0/24
151.240.163.0/24
151.240.173.0/24
151.240.177.0/24
151.240.179.0/24
151.240.242.0/24
151.240.247.0/24
151.240.249.0-151.240.250.255
151.241.4.0/24
151.241.7.0/24
151.241.25.0/24
151.241.27.0/24
151.241.35.0/24
151.241.50.0/24
151.241.74.0/23
151.241.92.0/24
151.241.96.0/20
151.241.128.0/17
151.242.24.0/24
151.242.52.0/22
151.242.68.0/24
151.242.78.0/24
151.242.82.0/24
151.242.88.0/24
151.242.126.0/24
151.242.136.0/23
151.242.140.0-151.242.145.255
151.242.168.0/23
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.36.0/24
151.243.44.0/22
151.243.100.0/22
151.243.108.0/23
151.243.123.0/24
151.243.136.0/22
151.243.150.0/24
151.243.156.0/24
151.243.169.0/24
151.243.171.0/24
151.243.176.0/21
151.243.192.0-151.243.200.255
151.243.204.0/22
151.243.212.0/23
151.243.217.0/24
151.243.224.0/24
151.243.226.0/24
151.243.230.0/23
151.243.239.0/24
151.243.247.0-151.243.253.255
151.244.40.0/24
151.244.44.0/24
151.244.164.0-151.244.171.255
151.244.190.0/24
151.244.196.0/24
151.244.216.0/22
151.244.222.0/24
151.244.232.0/21
151.244.242.0-151.244.255.255
151.245.1.0/24
151.245.24.0/23
151.245.28.0/23
151.245.60.0/22
151.245.72.0/24
151.245.76.0/24
151.245.86.0/24
151.245.88.0-151.245.92.255
151.245.116.0/22
151.245.128.0/17
151.246.9.0/24
151.246.104.0/21
151.246.127.0-151.247.127.255
151.247.195.0-151.247.200.255
151.247.210.0/24
151.247.213.0/24
151.247.216.0/24
151.247.219.0-151.247.220.255
151.247.223.0/24
151.247.225.0/24
151.247.229.0/24
151.247.231.0/24
151.247.234.0/24
151.247.236.0/24
151.247.240.0/24
Signature Algorithm: sha256WithRSAEncryption
41:2b:f6:c1:ee:eb:7d:3f:60:cc:b4:e6:6f:d7:c3:b7:db:c3:
fb:8b:0c:5c:eb:69:fc:22:26:c7:c7:6f:e7:ca:73:55:e3:a2:
0e:2f:15:52:84:29:6c:de:68:d1:9f:c7:83:8d:79:7b:2c:b0:
57:a1:fe:c1:4b:f9:4e:cb:9e:ec:f0:5b:61:eb:71:f0:18:a0:
80:f7:5d:ed:ae:7a:30:46:78:f0:44:bc:e2:11:5c:51:46:d0:
49:e6:44:61:45:30:18:9f:bb:6a:89:64:06:bc:36:2a:90:a5:
f7:bc:73:b8:a5:a6:f5:31:fd:53:f8:4a:33:35:57:a4:27:99:
f2:c8:98:c5:70:74:68:2c:2f:e3:4a:31:e0:81:c5:e9:59:77:
ee:91:56:36:ee:17:a3:00:50:6c:bc:a3:61:0c:9d:21:8a:71:
b9:86:dc:1e:6a:01:a8:1b:53:98:3a:2e:b5:ef:92:25:08:35:
86:30:5f:12:c9:d9:c3:70:a4:d7:3f:69:a9:a2:1e:bb:d7:fc:
fe:cc:0a:ed:d1:3e:d1:d9:34:d8:4f:65:30:1f:18:af:e9:dc:
73:7c:b4:ef:ae:68:d3:ca:40:7d:1f:b4:0a:0c:4c:80:f1:3d:
a5:b9:be:18:47:05:c5:ac:aa:77:da:74:98:60:65:ff:bc:46:
1c:04:b4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:41:40 2025 by rpki-client