Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J0nuU1B8JFZuOAOJf9vR2ppB-Bo.roa
File: J0nuU1B8JFZuOAOJf9vR2ppB-Bo.roa (raw, json)
Hash identifier: gxKAbLNwt6yjdD9iKWwub6xwg71Dyt/qHXExUTGAvjM=
Subject key identifier: 27:49:EE:53:50:7C:24:56:6E:38:03:89:7F:DB:D1:DA:9A:41:F8:1A
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019C6B03C4428347FB674EB8336CF16E46B6
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J0nuU1B8JFZuOAOJf9vR2ppB-Bo.roa
Signing time: Tue 17 Feb 2026 09:52:14 +0000
ROA not before: Tue 17 Feb 2026 09:52:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.245.132.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.247.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6b:03:c4:42:83:47:fb:67:4e:b8:33:6c:f1:6e:46:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Feb 17 09:52:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2749ee53507c24566e3803897fdbd1da9a41f81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:71:a9:89:95:5b:89:01:07:67:8f:d2:10:64:
e4:6e:0c:88:f4:34:64:f0:d3:66:98:3c:66:94:7e:
7c:17:6b:31:92:62:60:f2:56:66:22:b1:a4:04:ad:
38:33:51:b4:a6:48:da:bb:29:ed:6f:38:07:5b:9c:
ec:bf:94:2a:54:db:bc:6d:73:0f:da:7c:33:b6:8e:
8f:1f:73:67:03:92:d0:80:e3:b5:d3:18:e2:8a:f6:
f7:1f:89:c3:14:2a:90:b2:ff:a4:1f:1e:2b:67:a6:
8f:db:52:06:0d:0e:49:b6:09:74:ed:81:df:46:13:
13:a9:5b:84:1b:fc:ce:79:26:e6:a6:43:e1:50:04:
0f:3c:c7:63:d0:90:5f:ad:f4:2a:df:4e:26:c1:52:
8a:b9:a2:df:8c:48:4b:5d:99:c8:4b:c9:b9:2a:b1:
69:5e:b8:7b:36:47:8b:99:c8:dd:78:fe:08:43:c5:
16:12:08:5e:99:f7:80:9d:3b:c7:b5:22:bc:c8:4f:
85:2e:66:2d:95:25:d1:ee:0b:83:64:33:44:d7:d9:
4f:19:5c:ca:cb:32:be:94:29:ca:7b:f7:89:52:6b:
79:90:80:ac:ba:ab:34:13:45:e3:60:0b:d7:1a:9e:
8d:56:1b:ac:47:93:97:08:18:43:bf:cf:17:4a:fc:
8c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:49:EE:53:50:7C:24:56:6E:38:03:89:7F:DB:D1:DA:9A:41:F8:1A
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/J0nuU1B8JFZuOAOJf9vR2ppB-Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.13.255
151.240.15.0-151.240.23.255
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.68.0/22
151.240.73.0/24
151.240.83.0-151.240.90.255
151.240.99.0/24
151.240.126.0-151.240.143.255
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0-151.240.164.255
151.240.166.0-151.240.168.255
151.240.170.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.32.0/24
151.242.145.0/24
151.243.45.0/24
151.243.88.0/24
151.244.186.0/23
151.245.132.0/24
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:30:91:8b:fd:83:8b:5c:38:1b:5b:4c:88:bc:76:fe:78:59:
65:98:e6:5f:fe:49:48:3c:b2:8e:f2:aa:bf:3c:08:d9:79:9e:
8c:3e:2c:7f:fd:d5:d1:19:54:6c:48:f8:d9:21:1c:3a:9b:39:
c4:9f:8b:b9:8d:f1:44:10:58:fc:34:1f:85:5d:a3:c2:02:7f:
0a:a5:cc:03:eb:70:cb:5e:23:0e:dc:79:04:f1:72:59:3e:bc:
66:2a:63:f1:d5:cf:6b:6c:bc:65:ea:ba:b5:5c:e1:20:6f:95:
a8:41:5e:c2:0c:b1:f9:a7:fa:05:8a:aa:1d:cb:7e:7c:21:cc:
d5:0c:05:43:16:ae:ef:14:3a:02:50:c4:ec:eb:7b:98:4c:5a:
38:3d:d2:ec:87:f8:68:ff:05:c4:c1:88:84:81:ca:f6:14:d4:
be:fc:cd:91:32:78:20:d4:bc:ac:f5:06:a7:f5:5d:24:df:ab:
96:83:38:fa:2c:78:d6:d6:cc:7a:44:b7:90:6f:fc:9c:7d:ab:
54:47:5d:6e:c4:66:16:c8:29:08:d8:c4:46:22:80:6d:c4:4a:
8e:8c:a5:9e:44:42:cb:49:e4:87:03:30:3b:12:27:5d:e5:82:
28:44:34:3c:0f:9e:5d:60:dd:47:40:2e:91:c7:fe:22:a4:2f:
1d:c5:42:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:02:03 2026 by rpki-client