Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVB62WjeIHUoSXAlDaHdn5PK_8.roa
File: 4bVB62WjeIHUoSXAlDaHdn5PK_8.roa (raw, json)
Hash identifier: /p67qMcHJv3RbOud0rXiZ7z79yBSWpzTEpV9F5xAlec=
Subject key identifier: E1:B5:41:EB:65:A3:78:81:D4:A1:25:C0:94:36:87:76:7E:4F:2B:FF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0BD6B1D30C685875AC9437E6FE351CCC4
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVB62WjeIHUoSXAlDaHdn5PK_8.roa
Signing time: Sun 20 Sep 2026 06:05:08 +0000
ROA not before: Sun 20 Sep 2026 06:05:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 37.202.194.0/24 maxlen: 24
151.240.227.0/24 maxlen: 24
151.241.207.0/24 maxlen: 24
151.242.105.0/24 maxlen: 24
151.243.7.0/24 maxlen: 24
151.243.152.0/24 maxlen: 24
151.243.154.0/24 maxlen: 24
151.243.197.0/24 maxlen: 24
151.243.228.0/24 maxlen: 24
151.243.231.0/24 maxlen: 24
151.244.54.0/24 maxlen: 24
151.244.167.0/24 maxlen: 24
151.244.180.0/24 maxlen: 24
151.244.222.0/24 maxlen: 24
151.244.224.0/24 maxlen: 24
151.244.235.0/24 maxlen: 24
151.246.161.0/24 maxlen: 24
151.247.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:6b:1d:30:c6:85:87:5a:c9:43:7e:6f:e3:51:cc:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 20 06:05:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e1b541eb65a37881d4a125c0943687767e4f2bff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:59:a3:64:af:97:f6:de:17:ae:00:09:41:b7:
38:62:1b:85:8f:95:09:8e:6d:ac:1f:e0:0c:7d:c3:
64:af:58:dc:7a:26:ad:a3:a2:d5:0a:a7:1c:16:29:
33:65:11:6a:33:88:13:55:54:4a:6d:e3:8b:81:f1:
b5:50:aa:c6:52:aa:4b:0f:cb:6e:91:e3:76:39:ef:
06:e2:74:4a:ce:88:51:a3:03:b7:86:bc:5d:e8:b9:
25:a4:e4:91:2c:e8:0d:e4:bf:54:9b:56:85:7a:7d:
bb:a0:d2:2e:1f:0e:e6:8e:ec:74:6b:91:64:39:2e:
e6:30:71:46:43:23:93:f7:cd:a0:e1:03:53:a0:1a:
8d:a3:f3:3a:c7:32:4d:7d:fe:8a:4e:9d:23:26:38:
d5:14:24:03:d0:48:bf:0b:0f:be:c8:e2:5c:35:8e:
06:62:09:44:37:28:44:7c:bc:5d:3a:55:ca:28:0c:
6f:c7:b9:cd:5b:04:c6:68:59:f2:e6:07:da:67:89:
0f:93:bd:0d:18:04:30:48:33:b0:1a:f4:26:fd:b6:
21:5b:c9:0e:bd:69:b3:ac:b0:fa:82:8a:df:27:1e:
77:96:4a:1f:84:5f:fc:82:25:e1:7d:8a:bb:77:86:
3f:61:33:51:76:e7:e1:26:25:7e:b9:13:8b:49:20:
b6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:41:EB:65:A3:78:81:D4:A1:25:C0:94:36:87:76:7E:4F:2B:FF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/4bVB62WjeIHUoSXAlDaHdn5PK_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.194.0/24
151.240.227.0/24
151.241.207.0/24
151.242.105.0/24
151.243.7.0/24
151.243.152.0/24
151.243.154.0/24
151.243.197.0/24
151.243.228.0/24
151.243.231.0/24
151.244.54.0/24
151.244.167.0/24
151.244.180.0/24
151.244.222.0/24
151.244.224.0/24
151.244.235.0/24
151.246.161.0/24
151.247.54.0/24
Signature Algorithm: sha256WithRSAEncryption
28:eb:f0:b0:b6:00:2e:b2:6b:2e:cf:bd:b3:69:d8:d2:a3:60:
a6:ac:d9:1f:d8:c6:4d:89:8e:d2:22:cf:dc:8a:89:0b:17:0b:
7e:09:f7:0f:00:e0:f9:ed:a6:ed:25:be:08:63:63:66:0c:f0:
4a:1e:41:cb:9a:62:1d:e2:30:66:08:8f:14:a5:e4:c9:38:77:
dc:f8:3c:f5:f7:c7:a5:e6:3d:22:1a:d5:38:39:83:07:21:c7:
b4:d7:8e:14:d3:df:63:86:0f:18:26:d9:ee:41:dd:a4:7a:bc:
de:f4:2e:8f:df:0d:0f:c5:bc:aa:79:88:48:c7:cd:03:93:3d:
88:3e:13:e9:4c:5d:3f:b7:96:c6:5a:0c:15:70:8c:61:70:bb:
54:5e:a4:e2:a3:ff:24:df:40:b9:ef:f3:72:8c:66:89:23:c9:
c8:08:0e:44:8a:cf:cc:7f:ed:2b:06:a3:be:8e:06:04:dd:da:
3d:b6:a6:46:34:f4:5f:1b:89:b5:cd:89:6d:c4:df:b1:19:1f:
63:de:12:39:c2:99:e3:10:f1:85:b5:c1:d5:5b:19:f8:24:f3:
93:c2:b8:7e:9b:8a:a8:75:6a:c7:8e:3b:99:42:16:0f:4b:1d:
7d:96:29:90:8b:1d:b0:f4:65:1f:a1:d8:6b:f6:15:8f:fb:50:
d0:cf:24:4b
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgISAaC9ax0wxoWHWslDfm/jUczEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIwMDYwNTA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWI1NDFlYjY1YTM3ODgxZDRhMTI1YzA5NDM2ODc3NjdlNGYyYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1mjZK+X9t4XrgAJQbc4YhuFj5UJ
jm2sH+AMfcNkr1jceiato6LVCqccFikzZRFqM4gTVVRKbeOLgfG1UKrGUqpLD8tu
keN2Oe8G4nRKzohRowO3hrxd6LklpOSRLOgN5L9Um1aFen27oNIuHw7mjux0a5Fk
OS7mMHFGQyOT982g4QNToBqNo/M6xzJNff6KTp0jJjjVFCQD0Ei/Cw++yOJcNY4G
YglENyhEfLxdOlXKKAxvx7nNWwTGaFny5gfaZ4kPk70NGAQwSDOwGvQm/bYhW8kO
vWmzrLD6gorfJx53lkofhF/8giXhfYq7d4Y/YTNRdufhJiV+uROLSSC2owIDAQAB
o4ICcDCCAmwwHQYDVR0OBBYEFOG1Qetlo3iB1KElwJQ2h3Z+Tyv/MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvNGJWQjYyV2plSUhVb1NYQWxEYUhkbjVQS184LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGFBggrBgEFBQcBBwEB/wR2MHQwcgQCAAEwbAMEACXKwgME
AJfw4wMEAJfxzwMEAJfyaQMEAJfzBwMEAJfzmAMEAJfzmgMEAJfzxQMEAJfz5AME
AJfz5wMEAJf0NgMEAJf0pwMEAJf0tAMEAJf03gMEAJf04AMEAJf06wMEAJf2oQME
AJf3NjANBgkqhkiG9w0BAQsFAAOCAQEAKOvwsLYALrJrLs+9s2nY0qNgpqzZH9jG
TYmO0iLP3IqJCxcLfgn3DwDg+e2m7SW+CGNjZgzwSh5By5piHeIwZgiPFKXkyTh3
3Pg89ffHpeY9IhrVODmDByHHtNeOFNPfY4YPGCbZ7kHdpHq83vQuj98ND8W8qnmI
SMfNA5M9iD4T6UxdP7eWxloMFXCMYXC7VF6k4qP/JN9Aue/zcoxmiSPJyAgORIrP
zH/tKwajvo4GBN3aPbamRjT0XxuJtc2JbcTfsRkfY94SOcKZ4xDxhbXB1VsZ+CTz
k8K4fpuKqHVqx447mUIWD0sdfZYpkIsdsPRlH6HYa/YVj/tQ0M8kSw==
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:44:51 2026 by rpki-client