Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87sdggtNaQR6ytdZNN0y4WDmSRY.roa
File: 87sdggtNaQR6ytdZNN0y4WDmSRY.roa (raw, json)
Hash identifier: fXsc2OiDbYBexmJcBEQn5CXmnmM4WuKBxYs0Zf9u8Gc=
Subject key identifier: F3:BB:1D:82:0B:4D:69:04:7A:CA:D7:59:34:DD:32:E1:60:E6:49:16
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C5FD22B3D310B707B15F58688CABA3750
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87sdggtNaQR6ytdZNN0y4WDmSRY.roa
Signing time: Sun 15 Feb 2026 05:42:14 +0000
ROA not before: Sun 15 Feb 2026 05:42:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.247.35.0/24 maxlen: 24
151.247.101.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5f:d2:2b:3d:31:0b:70:7b:15:f5:86:88:ca:ba:37:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 15 05:42:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f3bb1d820b4d69047acad75934dd32e160e64916
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7c:ab:30:04:47:27:1a:ce:19:1d:0b:fa:69:
9a:17:d6:bf:59:47:1a:98:0f:2d:52:0e:7a:bf:cf:
99:73:b9:df:0c:51:d9:54:42:bf:02:d3:b9:1b:7d:
c0:40:59:15:72:f2:08:74:07:a1:59:86:89:5c:a5:
a5:83:4c:24:f7:92:f2:6c:48:3f:0d:07:7b:83:42:
88:53:31:a6:c1:8b:f4:56:ee:d9:3b:57:ad:6e:32:
70:66:99:7d:4b:5a:5b:12:72:3a:aa:98:32:00:9f:
b9:8c:f3:e2:3a:7b:9c:64:95:8f:68:cb:98:97:02:
72:99:e8:2f:e9:b1:23:52:d9:fd:92:0d:b4:6e:83:
71:c4:09:59:ff:0b:12:82:3a:5e:20:8e:c3:44:58:
f8:a3:3c:30:87:e6:91:c8:0b:1f:9d:a5:61:d0:23:
c9:b5:82:76:6a:22:80:3c:1c:78:8a:05:18:0b:23:
44:03:61:f0:53:09:4f:2a:34:d7:ca:8d:d3:1a:20:
cc:05:ac:c9:a3:f7:12:c7:14:02:7e:cc:26:af:ad:
62:68:62:9e:9b:e9:72:bb:54:98:a6:55:b2:87:9b:
e0:22:70:66:eb:01:b5:53:ba:f6:c9:69:4b:e0:9f:
0a:93:14:3a:49:10:7e:7e:78:d7:d0:69:00:db:89:
53:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:BB:1D:82:0B:4D:69:04:7A:CA:D7:59:34:DD:32:E1:60:E6:49:16
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/87sdggtNaQR6ytdZNN0y4WDmSRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.244.69.0/24
151.245.69.0/24
151.245.166.0/24
151.245.177.0/24
151.247.35.0/24
151.247.101.0/24
151.247.108.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:22:5b:9a:2a:fd:2c:25:d7:96:7b:39:eb:7d:15:d9:55:46:
07:d0:a8:b7:5d:77:76:44:17:f5:e8:19:d3:d1:8a:64:e6:39:
dd:2a:01:e8:3b:7e:1b:4d:eb:92:00:30:0e:b0:5e:b4:ab:2d:
70:97:19:54:1d:05:08:cf:80:ae:b0:56:44:61:61:7c:33:76:
81:3d:97:3f:25:28:48:72:b3:1b:77:be:a8:a0:f3:be:ca:65:
79:c4:a9:ca:c5:af:99:a3:aa:b7:b3:7f:77:b8:15:67:78:a7:
2b:67:d8:98:e1:3e:be:be:bb:e1:52:0f:31:24:72:4c:ac:25:
28:1d:de:0f:5c:14:25:04:33:5c:b4:2c:04:11:fa:40:b7:10:
b7:74:b9:64:49:48:a9:da:57:34:ab:c4:1c:5f:e5:8a:6d:00:
f7:e9:52:db:84:aa:d5:eb:eb:54:3d:a5:a9:2c:aa:60:49:d7:
bf:1d:8c:1d:0f:ed:53:67:5b:44:31:47:19:f1:b6:26:98:f6:
12:a1:4a:9d:eb:f4:71:f6:99:4e:af:4e:10:a0:58:a9:3b:3c:
e2:45:44:8e:c2:3e:9e:27:e4:d4:4d:f0:cb:d1:9c:b0:23:0d:
2e:9c:61:67:b2:6b:df:1f:ba:8b:08:b8:fa:48:79:06:0d:a2:
62:9b:18:d2
-----BEGIN CERTIFICATE-----
MIIFVzCCBD+gAwIBAgISAZxf0is9MQtwexX1hojKujdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMjE1MDU0MjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmM2JiMWQ4MjBiNGQ2OTA0N2FjYWQ3NTkzNGRkMzJlMTYwZTY0OTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXyrMARHJxrOGR0L+mmaF9a/WUca
mA8tUg56v8+Zc7nfDFHZVEK/AtO5G33AQFkVcvIIdAehWYaJXKWlg0wk95LybEg/
DQd7g0KIUzGmwYv0Vu7ZO1etbjJwZpl9S1pbEnI6qpgyAJ+5jPPiOnucZJWPaMuY
lwJymegv6bEjUtn9kg20boNxxAlZ/wsSgjpeII7DRFj4ozwwh+aRyAsfnaVh0CPJ
tYJ2aiKAPBx4igUYCyNEA2HwUwlPKjTXyo3TGiDMBazJo/cSxxQCfswmr61iaGKe
m+lyu1SYplWyh5vgInBm6wG1U7r2yWlL4J8KkxQ6SRB+fnjX0GkA24lTXwIDAQAB
o4ICYzCCAl8wHQYDVR0OBBYEFPO7HYILTWkEesrXWTTdMuFg5kkWMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvODdzZGdndE5hUVI2eXRkWk5OMHk0V0RtU1JZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHkGCCsGAQUFBwEHAQH/BGowaDBmBAIAATBgAwQAJcrKAwQA
l/ACAwQAl/EhAwQAl/ErAwQAl/EwAwQAl/IaAwQAl/MaAwQAl/QqAwQAl/RFAwQA
l/VFAwQAl/WmAwQAl/WxAwQAl/cjAwQAl/dlAwQAl/dsAwQAl/f2MA0GCSqGSIb3
DQEBCwUAA4IBAQBLIluaKv0sJdeWeznrfRXZVUYH0Ki3XXd2RBf16BnT0Ypk5jnd
KgHoO34bTeuSADAOsF60qy1wlxlUHQUIz4CusFZEYWF8M3aBPZc/JShIcrMbd76o
oPO+ymV5xKnKxa+Zo6q3s393uBVneKcrZ9iY4T6+vrvhUg8xJHJMrCUoHd4PXBQl
BDNctCwEEfpAtxC3dLlkSUip2lc0q8QcX+WKbQD36VLbhKrV6+tUPaWpLKpgSde/
HYwdD+1TZ1tEMUcZ8bYmmPYSoUqd6/Rx9plOr04QoFipOzziRUSOwj6eJ+TUTfDL
0ZywIw0unGFnsmvfH7qLCLj6SHkGDaJimxjS
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:26:01 2026 by rpki-client