Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sIafVqEu5BkMPGBOwAJ3YG818Ls.roa
File: sIafVqEu5BkMPGBOwAJ3YG818Ls.roa (raw, json)
Hash identifier: AhVnEPI6MGJLSaOz2dqvzfMeLrDT7qK184kDnNcnKuY=
Subject key identifier: B0:86:9F:56:A1:2E:E4:19:0C:3C:60:4E:C0:02:77:60:6F:35:F0:BB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019F6022DED6BD2FCEE22B229DD02718E233
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sIafVqEu5BkMPGBOwAJ3YG818Ls.roa
Signing time: Tue 14 Jul 2026 10:18:45 +0000
ROA not before: Tue 14 Jul 2026 10:18:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40244
IP address blocks: 37.202.207.0/24 maxlen: 24
37.202.217.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.241.149.0/24 maxlen: 24
151.245.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:60:22:de:d6:bd:2f:ce:e2:2b:22:9d:d0:27:18:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 14 10:18:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0869f56a12ee4190c3c604ec00277606f35f0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:56:94:7d:37:01:20:72:4b:97:81:28:40:a0:
33:7f:4e:c1:de:6f:39:69:b7:a8:f9:74:32:84:9c:
0f:0e:1f:c6:24:5a:43:2e:91:11:60:24:2e:07:03:
6e:f2:ad:3a:37:4e:39:2b:4c:2d:80:be:b7:4f:86:
b5:fb:32:5c:90:d7:90:da:e3:e6:e5:4a:15:d6:80:
95:ee:4a:8a:05:29:0e:ff:b3:a3:87:52:e9:9a:8b:
22:54:c1:49:66:97:27:44:4a:39:17:ea:7b:c0:54:
51:00:dd:8c:85:1a:aa:78:87:0c:31:51:e0:60:c6:
a3:89:c8:42:08:d6:5e:e7:22:3b:79:4d:2e:c9:18:
b4:7c:d6:f1:23:32:ba:9b:e1:76:d5:b8:5c:c2:dc:
3a:8a:19:5d:91:6e:d2:cf:6d:35:59:a1:48:75:6c:
d6:66:88:df:0b:26:ba:fe:01:0e:04:3a:7d:ac:38:
98:68:45:d5:a4:e3:6e:1d:fe:98:a6:67:7d:8d:f2:
5f:f6:39:bf:67:5c:ac:7b:12:0f:69:61:90:7a:dd:
97:a5:e5:ea:6b:5e:8a:66:24:bb:22:a1:73:64:91:
76:46:5c:54:88:2e:93:b1:6c:45:d8:76:3d:1d:72:
b6:0e:55:34:d1:37:59:ce:63:76:1e:84:8d:2a:1d:
a5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:86:9F:56:A1:2E:E4:19:0C:3C:60:4E:C0:02:77:60:6F:35:F0:BB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/sIafVqEu5BkMPGBOwAJ3YG818Ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.207.0/24
37.202.217.0/24
151.240.250.0/24
151.241.149.0/24
151.245.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:db:e8:16:57:aa:ed:79:e6:0e:e5:e0:36:78:3b:29:78:72:
03:75:08:a2:5a:7c:5a:06:f5:9f:1a:41:9d:b1:6e:83:e0:21:
bb:ff:0a:96:5b:6f:7e:9d:9e:c5:01:c9:0c:86:00:4d:06:9f:
e0:9d:49:5e:06:dc:33:64:7f:b1:9d:b6:3c:eb:65:21:8e:0f:
b7:fd:c5:2e:bd:d2:18:87:2b:9b:28:5c:c6:59:7c:b0:3c:9f:
8c:c2:c2:7f:21:66:37:7c:fb:d1:e6:c3:45:c6:70:3d:5a:5d:
7b:97:f7:18:b2:d0:55:3b:ef:e5:cd:cc:f1:eb:5a:91:69:db:
cd:62:d5:be:cd:a0:98:ad:ec:f2:80:b2:23:5b:47:8b:3f:3d:
d0:57:03:82:06:16:44:41:dd:40:33:c9:30:31:ae:24:a2:73:
92:09:ab:43:d8:07:d4:af:40:3a:20:83:a6:52:93:3e:74:bc:
75:b3:d4:85:5f:86:49:1a:5e:a9:eb:a4:c5:c1:4d:9d:44:7f:
22:55:a1:9a:fa:18:9e:95:f1:67:05:05:e4:b3:69:ff:2b:42:
4b:0b:2f:bd:12:a1:b8:37:31:f3:36:3f:4f:ea:73:c7:3e:a6:
87:7e:cf:81:d0:70:61:d8:13:94:74:df:f1:0c:fd:e0:50:6f:
9a:71:75:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:09:25 2026 by rpki-client