Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1xHb2hMyguMhbLu5m885jg_omBI.roa
File: 1xHb2hMyguMhbLu5m885jg_omBI.roa (raw, json)
Hash identifier: 5wwvqqivxBmNcR27krEUfDQg5eVJb0e4pXnDy/xkHg0=
Subject key identifier: D7:11:DB:DA:13:32:82:E3:21:6C:BB:B9:9B:CF:39:8E:0F:E8:98:12
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019FA7B21D912B3B556E60B6382B80627C20
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1xHb2hMyguMhbLu5m885jg_omBI.roa
Signing time: Tue 28 Jul 2026 07:48:15 +0000
ROA not before: Tue 28 Jul 2026 07:48:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.198.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.156.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.149.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.83.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:b2:1d:91:2b:3b:55:6e:60:b6:38:2b:80:62:7c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 28 07:48:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d711dbda133282e3216cbbb99bcf398e0fe89812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:1b:85:dd:b8:83:45:fc:fc:0d:26:3e:9f:
94:34:83:ba:88:10:06:79:e6:9e:00:ab:8d:27:6a:
1d:36:36:e7:55:f6:9c:1c:4e:14:57:65:be:95:6a:
01:04:11:e2:f2:24:05:b8:04:a2:35:5b:22:c8:de:
66:31:9f:f8:c7:30:58:75:d7:28:18:de:cb:65:63:
7b:eb:d2:ac:f4:b7:c7:46:94:11:df:fa:6f:e1:c2:
b5:72:b7:5b:d7:91:a0:f1:7e:03:4f:85:79:4c:44:
62:c6:52:66:2b:6f:ee:cb:bd:19:8d:e6:41:70:72:
f2:9c:c6:5f:0c:38:05:8e:a0:15:25:ca:9c:bc:a8:
a8:dc:97:43:ee:fd:15:5f:61:fe:c9:ee:ee:99:6c:
29:77:d5:75:ef:c1:06:5f:34:e1:e1:85:95:aa:75:
5c:1f:8c:1d:f8:cc:e1:11:88:f0:dd:f7:3a:6f:21:
8d:31:1a:71:10:98:79:8b:92:91:0a:05:7f:91:af:
94:f1:c1:b9:14:38:c5:9e:a3:cc:17:41:f2:4b:56:
45:8f:0f:f0:23:4a:8d:2c:49:2b:2d:1b:09:0b:47:
f2:13:91:f6:31:c0:70:7f:c9:9e:2c:6c:e4:3b:85:
df:62:cc:bb:64:2a:ef:8e:aa:09:c5:13:0f:ad:5d:
24:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:11:DB:DA:13:32:82:E3:21:6C:BB:B9:9B:CF:39:8E:0F:E8:98:12
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1xHb2hMyguMhbLu5m885jg_omBI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
151.240.45.0/24
151.240.136.0/24
151.241.30.0/24
151.241.36.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.156.0/24
151.241.160.0/23
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.134.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.244.5.0-151.244.6.255
151.244.14.0/24
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0/24
151.244.193.0/24
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.142.0/24
151.245.149.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.83.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c2:fc:a2:40:12:0a:54:1d:fa:37:10:93:c9:13:8c:19:e0:
d6:f0:f7:17:b0:76:6e:be:db:49:40:8f:43:c2:39:92:fd:82:
b7:70:ce:6d:aa:5f:eb:ad:cb:be:3d:25:47:91:34:ba:57:f9:
18:99:a2:23:a4:6b:b3:17:f6:b9:0f:b1:1b:77:13:c7:73:3c:
1d:46:30:21:ff:f1:2a:ba:4b:74:79:3a:07:0c:fa:d7:c2:44:
38:46:0a:0f:a4:92:d2:31:30:37:99:fc:3f:14:f8:af:8f:62:
14:3a:fe:a0:9a:84:99:75:e3:78:44:7d:36:3f:ee:13:9a:b0:
47:39:0b:a4:9f:f1:e0:5d:6f:20:16:1c:3e:fb:9c:16:78:8c:
2f:b3:2a:ac:08:13:49:57:16:df:0a:a7:3b:cd:07:cc:8d:99:
fc:34:b2:97:3f:fd:f7:f1:10:57:77:4e:12:bb:87:9a:9e:4b:
2e:12:fd:2a:02:c1:da:89:af:3c:ce:4c:41:0f:8a:a1:6f:22:
e1:78:65:eb:64:e1:a5:95:3b:ff:67:ea:b7:4e:f0:b8:6f:3c:
c1:5e:b7:9d:1b:db:1d:b2:61:35:f1:03:4c:ea:f5:89:0e:3d:
c3:23:2f:cf:85:b4:59:00:bc:86:1c:79:95:2a:c3:84:16:71:
8f:06:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:01:37 2026 by rpki-client