Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JTpX56TV5za7wxomgsephSZBWus.roa
File: JTpX56TV5za7wxomgsephSZBWus.roa (raw, json)
Hash identifier: aT00esU4YN7zQgh6CnPFmpbZuJVTR2JzWysFUODPt9U=
Subject key identifier: 25:3A:57:E7:A4:D5:E7:36:BB:C3:1A:26:82:C7:A9:85:26:41:5A:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EB7BA3134D03E4F0DBDA384664B382DE2
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JTpX56TV5za7wxomgsephSZBWus.roa
Signing time: Thu 11 Jun 2026 17:28:13 +0000
ROA not before: Thu 11 Jun 2026 17:28:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.201.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.147.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:ba:31:34:d0:3e:4f:0d:bd:a3:84:66:4b:38:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 11 17:28:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=253a57e7a4d5e736bbc31a2682c7a98526415aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ad:dc:02:d2:2b:74:86:a4:bc:d1:b8:e9:17:
b5:57:f0:43:97:dd:28:93:62:18:af:bf:8b:50:11:
e2:21:cc:b3:d2:c4:a3:69:15:69:b3:5f:dc:d1:2a:
8d:40:1f:27:7e:e6:90:66:60:6b:69:1f:97:f0:19:
38:8e:07:32:fa:78:fd:10:2f:f6:da:60:4f:c1:ef:
43:72:56:14:4b:87:4f:5e:3b:64:bb:53:10:db:6d:
4c:49:ee:cc:28:4f:14:02:ea:cf:ce:69:46:9b:0a:
b6:fb:bf:98:31:63:e8:a2:2c:c4:79:48:48:a7:31:
13:50:6e:13:cf:6f:37:f7:e2:6a:78:78:39:e9:d9:
00:0a:21:30:e7:e1:7f:94:00:04:49:9a:d7:3a:23:
cd:6d:9a:56:49:11:97:c1:a7:67:4e:93:92:3d:fe:
4f:e3:10:f5:a9:af:a7:55:b8:44:68:17:4f:0f:90:
68:6b:81:01:b1:fc:69:68:60:bf:18:df:df:59:26:
1b:e1:a0:2d:05:ae:63:98:17:36:d7:22:55:6b:bb:
7b:d6:17:36:6b:76:49:9e:24:b9:50:e9:26:8c:32:
3a:9f:3d:08:68:b5:76:05:3f:42:d5:83:04:8b:f4:
3b:71:d1:c0:48:3d:1f:fc:01:09:7a:88:cf:da:75:
ca:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3A:57:E7:A4:D5:E7:36:BB:C3:1A:26:82:C7:A9:85:26:41:5A:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/JTpX56TV5za7wxomgsephSZBWus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.240.45.0/24
151.241.30.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.160.0/23
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.243.147.0/24
151.244.5.0-151.244.6.255
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0/24
151.244.193.0/24
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.142.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
83:5d:71:24:2d:77:a2:5e:f4:e6:ad:4b:ea:51:13:9f:2d:60:
ac:fa:24:a2:39:dc:57:79:4b:3a:36:24:ac:8b:04:9a:1b:37:
a2:25:f2:00:87:ed:a0:70:e3:f5:50:09:cf:75:bc:e6:97:a7:
63:d7:fb:13:c9:60:f6:4a:0e:71:8b:d9:de:aa:8a:fc:f8:14:
db:9d:1a:d9:2a:f7:a7:02:34:3a:24:6a:8f:37:b5:22:32:98:
ce:6a:0c:dc:45:56:3f:7f:21:cc:8f:6f:71:18:7f:e9:4f:d2:
77:3a:79:4a:de:3b:e6:3a:25:f6:6d:fc:94:8b:ee:10:6a:b8:
9b:84:4c:9d:42:f3:08:2b:df:6e:21:50:02:81:70:8c:a1:c9:
8b:63:0e:0d:2c:49:d2:f7:be:42:5f:03:20:d4:5a:cd:f8:0c:
7f:aa:3b:2a:b5:3f:3d:b9:be:b3:06:63:8e:f7:de:cc:c5:95:
36:cc:bd:46:82:92:40:ca:1d:f9:fb:4e:cc:26:10:2c:04:c2:
b8:77:ae:53:95:61:9d:32:f6:33:98:ee:10:98:7b:c6:0c:33:
1e:e6:4f:0c:6d:fe:ad:e8:88:af:c1:5f:21:ec:ac:b6:1a:3a:
57:6f:6b:a2:9e:c0:b3:2f:b8:08:04:e6:e8:88:34:88:7d:bb:
a4:f5:98:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:12 2026 by rpki-client