Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6H-1kqoSKa_BvbfaZToEdkEJqHA.roa
File: 6H-1kqoSKa_BvbfaZToEdkEJqHA.roa (raw, json)
Hash identifier: oWuTOHWC514A2Rrwg1ifntVVvrdQXAUscHcvKFMm75U=
Subject key identifier: E8:7F:B5:92:AA:12:29:AF:C1:BD:B7:DA:65:3A:04:76:41:09:A8:70
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D5C39867B8192A3C569755DB212E04415
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6H-1kqoSKa_BvbfaZToEdkEJqHA.roa
Signing time: Sun 05 Apr 2026 05:59:27 +0000
ROA not before: Sun 05 Apr 2026 05:59:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.243.88.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:5c:39:86:7b:81:92:a3:c5:69:75:5d:b2:12:e0:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 5 05:59:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e87fb592aa1229afc1bdb7da653a04764109a870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:e7:0e:19:51:33:ee:25:54:dc:13:a4:f9:
68:69:84:37:ac:9d:ef:01:f5:1b:f0:da:e0:40:7e:
2e:aa:7a:14:8d:9e:c8:29:52:72:df:da:25:10:46:
c9:3f:6d:cb:e4:1f:ba:44:a9:1d:ec:1a:ad:9e:07:
87:e6:39:19:2b:9a:d3:21:9b:ec:2f:80:40:ec:77:
73:8f:c5:3e:51:e3:21:a2:34:e6:39:53:97:d7:59:
a8:fa:65:c6:d0:11:2c:01:ff:3a:cb:c0:fb:34:2d:
45:74:c8:fc:55:4d:be:69:69:e2:3c:8b:38:91:e9:
47:25:28:ca:a2:a7:e0:26:7e:2b:cb:1b:a1:9c:92:
ce:11:0c:58:54:83:8a:4c:43:23:5f:ff:7c:a4:5a:
c9:c1:4a:ba:ee:84:5a:f4:4f:cb:e8:71:cf:2e:64:
18:ed:b5:b7:e1:19:82:33:8b:76:f8:67:27:0f:4b:
b9:0a:14:e9:e9:a8:fe:c3:f5:89:21:ac:e5:d0:cb:
0c:99:a1:a1:0b:db:ab:65:58:36:58:a0:1e:a5:f8:
45:03:4b:85:22:eb:42:e8:6d:12:61:e2:af:08:cc:
3d:04:e8:62:b3:4d:5e:06:f4:ff:ce:d3:55:ce:61:
68:8f:53:2f:0b:67:ff:87:8a:f0:03:79:40:39:6c:
49:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:B5:92:AA:12:29:AF:C1:BD:B7:DA:65:3A:04:76:41:09:A8:70
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/6H-1kqoSKa_BvbfaZToEdkEJqHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.13.255
151.240.15.0-151.240.16.255
151.240.18.0/23
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0-151.240.143.255
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.32.0/24
151.242.145.0/24
151.242.176.0/22
151.242.184.0/22
151.242.236.0/22
151.243.88.0/24
151.244.186.0/23
151.245.144.0/21
151.245.180.0/22
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.247.4.0/24
151.247.112.0/21
151.247.131.0/24
151.247.144.0/22
151.247.152.0/22
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:f6:e6:f6:e0:99:12:1e:f1:3c:e1:89:15:a8:3e:35:b6:b0:
46:5a:fe:40:a4:ba:df:e0:5a:5f:98:03:97:9c:3c:05:b7:3e:
ab:b0:29:24:90:f5:02:d7:6b:19:d0:8e:d5:6a:bc:30:a3:40:
b9:98:2c:97:2a:d9:60:2f:49:d7:9e:3f:02:58:4c:cc:22:ad:
19:df:1d:83:5f:9f:a1:cd:8d:8c:41:30:53:a0:ef:79:dc:ed:
4f:7f:7f:ef:6b:75:cf:b5:49:cb:9b:19:dd:7f:47:57:22:a3:
a1:90:7c:57:ae:d4:fb:ff:3b:fd:f1:58:0c:ef:3a:ef:9d:ff:
3f:84:7d:6b:fb:b3:1f:fb:83:34:58:a6:a3:a5:93:02:cd:bc:
eb:fb:c2:9c:4d:e8:21:8b:27:16:28:5d:58:17:3a:c2:a3:5e:
ca:2e:c0:80:e1:63:68:d7:7b:8c:e8:32:6f:a7:70:90:31:18:
0a:1f:62:4e:b5:f0:96:a6:c9:24:4d:66:e0:4c:f6:f2:98:6c:
1b:eb:05:98:48:43:7d:21:09:ae:23:df:ff:4b:e4:bc:86:ca:
8a:7b:15:65:bf:d1:e2:7f:16:8e:65:0e:dd:3c:39:f5:13:20:
6a:72:96:ad:3b:6d:6d:db:b1:90:cb:97:11:57:82:d3:15:66:
6b:65:07:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:51:06 2026 by rpki-client