Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j2vnd6bVWj87feQXHMzO9LHkWIg.roa
File: j2vnd6bVWj87feQXHMzO9LHkWIg.roa (raw, json)
Hash identifier: FLsA0dJZk4ufgsjgZDX6iKA2t85liSyO4AoQpZyf8fY=
Subject key identifier: 8F:6B:E7:77:A6:D5:5A:3F:3B:7D:E4:17:1C:CC:CE:F4:B1:E4:58:88
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F602688BF1393FC84BD5517A7001E8D72
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j2vnd6bVWj87feQXHMzO9LHkWIg.roa
Signing time: Tue 14 Jul 2026 10:22:45 +0000
ROA not before: Tue 14 Jul 2026 10:22:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.198.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.156.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.149.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:26:88:bf:13:93:fc:84:bd:55:17:a7:00:1e:8d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 10:22:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8f6be777a6d55a3f3b7de4171ccccef4b1e45888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0f:7c:57:f8:a9:8e:21:27:ac:d9:6a:89:41:
0d:35:9f:14:44:3f:eb:f4:48:1c:d3:cc:36:06:9b:
a8:1b:aa:d2:e9:bf:3d:a2:c4:e5:e6:32:3a:b2:17:
79:36:d6:f0:37:81:c6:1b:44:56:db:10:f1:4a:d1:
93:ff:89:61:ae:13:ac:0c:91:7d:87:6d:88:09:0e:
30:14:4f:a3:80:9d:ef:0c:c5:7c:3c:26:28:88:78:
00:0b:fd:f3:b0:c0:73:57:e4:0f:22:d8:be:7f:34:
38:ef:d6:ed:85:ec:94:40:31:b1:7f:63:87:87:c7:
a0:e0:7d:37:67:b0:59:08:a8:3b:75:a4:4e:e5:7c:
82:80:6c:de:d9:46:e9:e3:7e:2e:ce:8e:fd:7f:13:
f8:7b:91:7a:c9:69:93:c9:eb:77:3e:e7:06:9b:b3:
46:29:7a:67:4e:79:6e:00:4b:23:d5:33:d2:a7:8e:
59:cd:30:ee:35:b5:ed:e1:4e:8e:7e:ce:28:fb:d3:
85:c0:f1:83:cb:14:22:2e:1a:33:8d:82:14:58:60:
c4:f6:4a:64:7d:f1:43:70:a1:5b:dd:05:ea:09:bc:
76:6f:e7:ab:c9:99:71:5a:c6:08:9f:f8:22:5a:3a:
07:5c:1e:cb:a6:77:4e:b1:59:15:0d:f4:4a:58:31:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6B:E7:77:A6:D5:5A:3F:3B:7D:E4:17:1C:CC:CE:F4:B1:E4:58:88
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/j2vnd6bVWj87feQXHMzO9LHkWIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
151.240.45.0/24
151.241.30.0/24
151.241.36.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.156.0/24
151.241.160.0/23
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.134.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.244.5.0-151.244.6.255
151.244.14.0/24
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0/24
151.244.193.0/24
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.142.0/24
151.245.149.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
37:ce:af:87:11:a1:e1:27:78:bf:6f:ff:8b:54:85:0a:9d:2f:
e8:2e:18:4a:e9:f7:4b:b4:0e:18:40:99:36:2f:89:e1:07:02:
d3:e3:5e:ec:e8:e1:8f:fc:cf:e6:40:47:28:6f:31:6d:da:fc:
89:77:c3:5d:3f:c7:59:3a:61:f4:59:a8:e6:af:be:91:3d:af:
05:df:d5:81:75:91:68:05:6f:d3:0e:cf:11:ef:13:e6:29:33:
e5:d3:55:30:b1:ff:cb:f3:bd:96:54:50:a1:f9:11:f7:13:8d:
0e:51:2a:67:59:49:64:4c:1a:90:b7:a2:5a:27:85:59:de:8e:
b6:dc:29:63:2b:b1:30:24:ae:87:03:b0:d6:a6:00:6d:9d:b5:
ce:88:e3:8b:94:71:92:9b:28:16:13:5a:82:1f:af:8f:e3:1c:
d8:dd:ab:8f:b5:4f:0e:03:8e:8c:7f:ce:2f:a0:05:e0:89:0e:
c0:2d:df:0d:a1:20:09:6c:cd:04:73:86:cf:a1:5e:ac:37:82:
8f:45:26:ae:1d:7d:c4:00:68:e3:9f:a3:0a:6d:c4:5f:ed:2b:
e4:f2:14:f8:bf:9a:dd:d1:90:92:ed:37:2a:79:04:3d:7a:d4:
fa:18:bf:93:df:9e:ad:17:b8:98:0e:e3:7e:05:6d:a4:7b:c2:
f6:59:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:41 2026 by rpki-client