Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-JhFPI7usp9j-QUV5QJRd__OvHU.roa
File: 1-JhFPI7usp9j-QUV5QJRd__OvHU.roa (raw, json)
Hash identifier: MyrO0AQYNv3o3cDbuZ+Efu+D1C9PuP/QU7PGNbK6ack=
Subject key identifier: F8:98:45:3C:8E:EE:B2:9F:63:F9:05:15:E5:02:51:77:FF:CE:BC:75
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1A09AA768E7ED4E0D48FBE9D4C27880BF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-JhFPI7usp9j-QUV5QJRd__OvHU.roa
Signing time: Tue 03 Nov 2026 08:50:52 +0000
ROA not before: Tue 03 Nov 2026 08:50:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.243.234.0/24 maxlen: 24
151.244.162.0/24 maxlen: 24
151.244.172.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.244.198.0/24 maxlen: 24
151.244.236.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.164.0/24 maxlen: 24
151.245.170.0/24 maxlen: 24
151.245.172.0/24 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.182.0/24 maxlen: 24
151.245.191.0/24 maxlen: 24
151.245.226.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.218.0/24 maxlen: 24
151.246.223.0/24 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.229.0/24 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.246.251.0/24 maxlen: 24
151.246.252.0/23 maxlen: 24
151.247.0.0/24 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.7.0/24 maxlen: 24
151.247.13.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.45.0/24 maxlen: 24
151.247.46.0/23 maxlen: 24
151.247.49.0/24 maxlen: 24
151.247.55.0/24 maxlen: 24
151.247.75.0/24 maxlen: 24
151.247.80.0/23 maxlen: 24
151.247.89.0/24 maxlen: 24
151.247.102.0/23 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.142.0/23 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.152.0/23 maxlen: 24
151.247.176.0/23 maxlen: 24
151.247.198.0/23 maxlen: 24
151.247.212.0/23 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:9a:a7:68:e7:ed:4e:0d:48:fb:e9:d4:c2:78:80:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 3 08:50:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f898453c8eeeb29f63f90515e5025177ffcebc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:76:9a:08:60:3f:e1:6f:2a:68:36:1f:61:
19:62:64:4f:14:70:9d:1f:8c:81:c6:f6:f4:59:ab:
5a:47:88:66:cb:a7:b2:0d:48:d1:b4:dc:1c:93:a9:
0d:29:6a:91:8d:42:83:96:c2:de:69:a5:8f:30:3b:
a3:2a:05:c9:cd:c8:7a:43:cb:34:4f:15:42:81:4e:
c0:74:21:e1:7f:75:ea:b0:80:8b:e6:d0:11:72:65:
ad:f5:fa:a0:28:32:28:06:6a:fc:37:0d:7c:5e:25:
99:c8:c6:f2:30:ff:fd:6c:e1:05:e8:82:5d:81:9a:
c8:fb:cb:c6:fa:c0:10:6a:a7:a6:64:98:b8:c4:9c:
a7:96:09:71:55:b7:39:a1:d0:63:3c:d7:b5:d9:a4:
51:e4:4e:7f:60:7a:34:be:fe:0a:9f:28:2b:11:83:
c6:1d:dd:4e:49:b1:cf:39:1f:81:73:1c:a6:fb:96:
fb:ca:62:db:7b:57:cd:9b:c3:ee:b8:ee:f3:23:0a:
60:da:7a:d9:78:fc:5f:5a:f9:88:ac:d0:37:96:fe:
0f:65:6d:53:57:a3:5d:ff:15:91:52:52:2d:32:a7:
2f:fb:90:fa:bb:a0:9a:74:6a:87:90:ce:7d:9f:95:
e9:3b:87:b1:b6:f6:61:96:4e:a9:33:54:91:a2:56:
33:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:98:45:3C:8E:EE:B2:9F:63:F9:05:15:E5:02:51:77:FF:CE:BC:75
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1-JhFPI7usp9j-QUV5QJRd__OvHU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0/24
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0/24
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.176.0/22
151.242.184.0/22
151.243.234.0/24
151.244.162.0/24
151.244.172.0/24
151.244.186.0/24
151.244.198.0/24
151.244.236.0/24
151.245.144.0/21
151.245.164.0/24
151.245.170.0/24
151.245.172.0/24
151.245.180.0/22
151.245.191.0/24
151.245.226.0/24
151.246.32.0/21
151.246.104.0/21
151.246.168.0/21
151.246.180.0/22
151.246.218.0/24
151.246.223.0-151.246.239.255
151.246.251.0-151.246.253.255
151.247.0.0/24
151.247.4.0/24
151.247.7.0/24
151.247.13.0/24
151.247.16.0/23
151.247.45.0-151.247.47.255
151.247.49.0/24
151.247.55.0/24
151.247.75.0/24
151.247.80.0/23
151.247.89.0/24
151.247.102.0/23
151.247.112.0/21
151.247.131.0/24
151.247.142.0-151.247.147.255
151.247.152.0/22
151.247.176.0/23
151.247.198.0/23
151.247.212.0/23
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:64:39:57:31:e4:0e:63:b6:6d:f0:7d:cf:c2:e8:19:30:f3:
40:13:09:18:aa:48:b4:80:c6:f9:31:f5:cf:b9:0f:4f:cd:2c:
23:fb:ae:47:5f:aa:78:b4:72:d1:43:23:de:93:3a:d7:49:9e:
07:b5:46:f7:1c:49:19:f4:19:df:b1:d8:38:6c:6c:ca:50:98:
26:b0:fa:d8:40:7c:d6:de:43:45:2c:00:06:e9:81:95:b3:4c:
06:93:26:0a:87:f3:da:58:a8:fa:e5:29:d9:5f:4e:90:84:cd:
35:63:40:73:19:61:b1:a4:57:51:b2:39:bd:7e:03:09:ad:1e:
72:66:1d:28:6d:19:c1:c2:71:c3:11:95:d8:4a:52:01:58:72:
8b:ce:0f:a8:00:e2:72:15:9c:ce:38:7e:25:fa:50:05:25:61:
6e:02:a4:b2:7e:88:01:7d:33:92:3e:e2:ad:5a:6b:ca:0c:d2:
50:32:e6:66:09:a1:b4:3b:9b:76:e3:41:6a:32:a0:c9:01:ca:
09:31:0b:c4:e8:b1:39:37:44:f5:9d:c5:1a:ec:fe:7d:c1:75:
36:f0:a1:3d:c5:9e:8b:75:ee:66:8b:51:cb:1b:5a:06:b4:e4:
d4:70:56:55:75:11:fb:9f:4c:fb:78:5b:cd:21:84:45:41:44:
62:34:49:23
-----BEGIN CERTIFICATE-----
MIIHhjCCBm6gAwIBAgISAaGgmqdo5+1ODUj76dTCeIC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMTAzMDg1MDUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODk4NDUzYzhlZWViMjlmNjNmOTA1MTVlNTAyNTE3N2ZmY2ViYzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSF2mghgP+FvKmg2H2EZYmRPFHCd
H4yBxvb0WataR4hmy6eyDUjRtNwck6kNKWqRjUKDlsLeaaWPMDujKgXJzch6Q8s0
TxVCgU7AdCHhf3XqsICL5tARcmWt9fqgKDIoBmr8Nw18XiWZyMbyMP/9bOEF6IJd
gZrI+8vG+sAQaqemZJi4xJynlglxVbc5odBjPNe12aRR5E5/YHo0vv4KnygrEYPG
Hd1OSbHPOR+Bcxym+5b7ymLbe1fNm8PuuO7zIwpg2nrZePxfWvmIrNA3lv4PZW1T
V6Nd/xWRUlItMqcv+5D6u6CadGqHkM59n5XpO4extvZhlk6pM1SRolYzUwIDAQAB
o4IEkjCCBI4wHQYDVR0OBBYEFPiYRTyO7rKfY/kFFeUCUXf/zrx1MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvMS1KaEZQSTd1c3A5ai1RVVY1UUpSZF9fT3ZIVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGUvZjQzYjFkLTllNTAtNDU1MS1hZTZhLTE3YjlkZTE0MTI1
Mi8xL3htSm05R2I3SkppamxGbXpOUzJpVVZHbHBNQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjCCAqUGCCsGAQUFBwEHAQH/BIIClDCCApAwggKMBAIAATCC
AoQDBAAlyt8DBACX8AsDBACX8A8DBACX8BMDBACX8BkwDAMEBZfwIAMEAJfwKgME
AJfwUzAMAwQDl/BYAwQAl/BaAwQBl/B+AwQBl/CcMAwDBACX8J8DBACX8KADBACX
8KIDBACX8KQwDAMEAZfwpgMEAJfwqDAMAwQBl/CqAwQAl/CsMAwDBAGX8K4DBACX
8LADBACX8LIwDAMEApfwtAMEAJfwzDAMAwQBl/DOAwQBl/DgAwQAl/DlMAwDBACX
8OkDBACX8O4DBACX8PADBACX8PgDBACX8P4DBACX8QkwDAMEAJfxCwMEAZfxDAME
AJfxDwMEAJfxEgMEAJfxFgMEAJfxGAMEAZfxGgMEAJfxHQMEAJfxHwMEAJfxKAME
AJfxLwMEAJfxQgMEAJfxRQMEAZfxTjAMAwQAl/FZAwQAl/FaAwQAl/FcAwQAl/Fe
AwQAl/FoAwQAl/FsMAwDBACX8W8DBACX8XADBAKX8rADBAKX8rgDBACX8+oDBACX
9KIDBACX9KwDBACX9LoDBACX9MYDBACX9OwDBAOX9ZADBACX9aQDBACX9aoDBACX
9awDBAKX9bQDBACX9b8DBACX9eIDBAOX9iADBAOX9mgDBAOX9qgDBAKX9rQDBACX
9towDAMEAJf23wMEBJf24DAMAwQAl/b7AwQBl/b8AwQAl/cAAwQAl/cEAwQAl/cH
AwQAl/cNAwQBl/cQMAwDBACX9y0DBASX9yADBACX9zEDBACX9zcDBACX90sDBAGX
91ADBACX91kDBAGX92YDBAOX93ADBACX94MwDAMEAZf3jgMEApf3kAMEApf3mAME
AZf3sAMEAZf3xgMEAZf31AMEAJf33zANBgkqhkiG9w0BAQsFAAOCAQEAe2Q5VzHk
DmO2bfB9z8LoGTDzQBMJGKpItIDG+TH1z7kPT80sI/uuR1+qeLRy0UMj3pM610me
B7VG9xxJGfQZ37HYOGxsylCYJrD62EB81t5DRSwABumBlbNMBpMmCofz2lio+uUp
2V9OkITNNWNAcxlhsaRXUbI5vX4DCa0ecmYdKG0ZwcJxwxGV2EpSAVhyi84PqADi
chWczjh+JfpQBSVhbgKksn6IAX0zkj7irVprygzSUDLmZgmhtDubduNBajKgyQHK
CTELxOixOTdE9Z3FGuz+fcF1NvChPcWei3XuZotRyxtaBrTk1HBWVXUR+59M+3hb
zSGERUFEYjRJIw==
-----END CERTIFICATE-----
Generated at Thu Nov 5 12:50:21 2026 by rpki-client