Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nsp0zSM3YtKzxhkt3QG5zgB-a-k.roa
File: Nsp0zSM3YtKzxhkt3QG5zgB-a-k.roa (raw, json)
Hash identifier: U5e05xEIUEGlHXb9whoRv/cK69V9nXyZYDtlnxEOyXk=
Subject key identifier: 36:CA:74:CD:23:37:62:D2:B3:C6:19:2D:DD:01:B9:CE:00:7E:6B:E9
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0AFE66D0E3900F9483F3085A61C53655A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nsp0zSM3YtKzxhkt3QG5zgB-a-k.roa
Signing time: Thu 17 Sep 2026 15:05:09 +0000
ROA not before: Thu 17 Sep 2026 15:05:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.244.176.0/23 maxlen: 24
151.244.186.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.178.0/23 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.182.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.156.0/23 maxlen: 24
151.246.162.0/23 maxlen: 24
151.246.164.0/23 maxlen: 24
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.246.252.0/23 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.46.0/23 maxlen: 24
151.247.80.0/23 maxlen: 24
151.247.102.0/23 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.142.0/23 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.152.0/23 maxlen: 24
151.247.176.0/23 maxlen: 24
151.247.198.0/23 maxlen: 24
151.247.212.0/23 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Sep 2026 13:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:e6:6d:0e:39:00:f9:48:3f:30:85:a6:1c:53:65:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 17 15:05:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=36ca74cd233762d2b3c6192ddd01b9ce007e6be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:08:75:ce:7b:8a:a8:6e:43:ec:e2:76:fa:1c:
0f:18:56:94:7c:a4:d4:cf:18:33:27:96:ec:d3:b7:
db:d4:2e:eb:cb:92:a1:f6:f4:d9:cc:f5:83:03:3f:
37:9b:d2:63:e5:d9:75:be:95:68:85:cb:f3:73:65:
c1:c2:0f:9b:eb:c9:03:76:ff:f9:bd:a0:55:83:93:
1b:86:99:06:40:87:93:ef:67:eb:e3:72:c3:e1:a9:
0a:5b:9c:ed:15:f5:02:72:6b:b0:c8:d9:9e:26:11:
4c:90:93:36:56:98:03:86:35:11:a8:f7:88:53:a6:
d9:95:58:f1:d8:df:ad:f7:cc:d5:2e:c4:de:48:c0:
9b:fe:e9:c6:cc:d3:69:3e:c4:2c:78:b2:61:b5:eb:
85:d2:a4:f6:31:d5:4b:ea:74:1a:19:0e:3c:ff:bd:
11:cc:aa:5a:f8:a9:ca:1c:ce:09:07:a6:8e:d9:8c:
e5:2f:0a:ab:6d:e8:ca:ff:b0:60:8c:a6:3b:ed:4d:
a1:61:27:e8:dc:17:c3:c8:5b:e1:e8:cd:a7:3d:12:
b0:e4:00:1a:eb:53:b1:b2:d2:57:7c:db:c7:8a:e5:
9f:d5:5b:c7:55:92:56:4d:9c:42:2d:37:d2:a1:85:
16:e9:4e:59:9d:09:da:dd:92:61:40:a1:3d:52:6e:
03:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CA:74:CD:23:37:62:D2:B3:C6:19:2D:DD:01:B9:CE:00:7E:6B:E9
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/Nsp0zSM3YtKzxhkt3QG5zgB-a-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0/24
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0/24
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.176.0/22
151.242.184.0/22
151.244.176.0/23
151.244.186.0/24
151.245.144.0/21
151.245.178.0-151.245.183.255
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.156.0/23
151.246.162.0-151.246.165.255
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.246.252.0/23
151.247.4.0/24
151.247.16.0/23
151.247.46.0/23
151.247.80.0/23
151.247.102.0/23
151.247.112.0/21
151.247.131.0/24
151.247.142.0-151.247.147.255
151.247.152.0/22
151.247.176.0/23
151.247.198.0/23
151.247.212.0/23
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:cf:e3:96:7a:c9:e2:b0:3b:31:f0:f9:3c:6b:b5:79:60:68:
ad:33:10:95:ab:d6:da:56:5b:a1:5e:d0:d6:34:15:46:b6:9e:
85:1c:9d:bf:9e:29:7e:b8:e4:a5:b2:f5:a2:81:04:b1:48:e0:
c4:1c:e7:ae:a7:12:08:9d:32:70:e9:99:b7:2c:1d:09:b2:56:
ec:e3:a0:95:80:53:9a:e7:07:34:fd:16:43:aa:d0:00:6b:94:
88:26:e6:70:ec:aa:cd:93:f4:f8:f5:a0:9c:a5:78:6b:6c:77:
b6:7a:3f:87:ea:ed:3a:83:d4:2d:a1:4c:68:01:42:8b:ae:b2:
ee:4b:07:e8:01:37:ee:ec:e8:fe:82:28:12:ac:ec:20:5a:28:
cc:01:bf:e0:3d:81:20:54:98:52:9d:02:61:de:7b:a2:ac:02:
53:93:6f:2a:19:c4:c8:2f:7c:c7:aa:a7:d1:b8:23:18:9d:c7:
4e:78:f9:82:8d:5b:32:5a:b1:5e:ec:f0:fb:9b:51:56:c2:bf:
bb:03:04:4b:8d:52:e3:3c:1f:42:0b:5d:28:46:ad:48:e1:bc:
99:dc:14:e8:3f:f1:ff:a1:8f:c2:d6:20:4c:3f:66:2f:e3:00:
e8:36:01:a2:04:a3:d6:53:73:1a:59:df:17:ba:d9:db:eb:a4:
63:3f:7f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 22:48:57 2026 by rpki-client