Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SXs0T13-ZXbmN6weOJaXLD2G4j4.roa
File: SXs0T13-ZXbmN6weOJaXLD2G4j4.roa (raw, json)
Hash identifier: emw3m6IkMWmS5Rm3L0izG+MTKKSbMXrLOeTbQTQwbh8=
Subject key identifier: 49:7B:34:4F:5D:FE:65:76:E6:37:AC:1E:38:96:97:2C:3D:86:E2:3E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D9B905A5F766F7EDAA26FED2A010D42FC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SXs0T13-ZXbmN6weOJaXLD2G4j4.roa
Signing time: Fri 17 Apr 2026 13:10:22 +0000
ROA not before: Fri 17 Apr 2026 13:10:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198250
IP address blocks: 37.202.198.0/24 maxlen: 24
37.202.207.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.242.14.0/24 maxlen: 24
151.243.156.0/24 maxlen: 24
151.244.24.0/24 maxlen: 24
151.244.64.0/24 maxlen: 24
151.245.148.0/24 maxlen: 24
151.246.146.0/24 maxlen: 24
151.247.191.0/24 maxlen: 24
151.247.227.0/24 maxlen: 24
151.247.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:90:5a:5f:76:6f:7e:da:a2:6f:ed:2a:01:0d:42:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 17 13:10:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=497b344f5dfe6576e637ac1e3896972c3d86e23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ee:48:c9:e9:3a:65:de:64:40:45:09:64:c8:
ed:b3:73:3b:ae:e3:12:b0:e8:bd:e9:45:17:74:7e:
ed:11:5d:28:c7:3e:f0:00:3f:24:93:f8:fc:7a:3c:
e5:58:5f:03:06:27:3a:34:e0:e3:73:63:6b:37:5a:
21:76:1d:d6:da:d5:68:07:56:cb:55:ad:80:db:21:
1e:07:0e:d0:28:65:b6:ea:eb:5a:d4:13:f2:ea:69:
97:21:f7:3a:7e:6f:74:1c:6c:50:9e:80:5c:f0:f0:
a9:e2:c2:31:1c:7d:01:70:7b:3e:7e:1c:42:b0:52:
bc:18:28:57:eb:5e:ab:02:e2:a6:d9:f1:61:d3:72:
4d:43:9d:00:25:07:86:89:70:3e:b4:37:04:6b:1c:
ce:0c:15:bc:0d:48:0c:51:cd:7d:1e:f4:a1:27:ca:
a8:b4:99:1d:cc:86:66:9d:be:0e:81:17:bd:1d:a0:
80:7d:2c:e7:f4:e1:ab:7a:ce:9c:0b:4f:ab:04:58:
26:68:15:32:fd:34:11:15:e9:b5:c2:f3:79:4b:89:
7b:08:a9:59:0b:8c:38:50:3e:84:72:8d:54:4a:a7:
4e:b2:29:70:2f:f1:64:58:d2:c8:e2:5c:bb:5c:15:
e1:e1:99:4b:8c:3a:69:0d:97:aa:b9:eb:29:bd:5f:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:34:4F:5D:FE:65:76:E6:37:AC:1E:38:96:97:2C:3D:86:E2:3E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/SXs0T13-ZXbmN6weOJaXLD2G4j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
37.202.207.0/24
151.240.150.0/24
151.242.14.0/24
151.243.156.0/24
151.244.24.0/24
151.244.64.0/24
151.245.148.0/24
151.246.146.0/24
151.247.191.0/24
151.247.227.0/24
151.247.235.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:85:4c:32:b6:79:c2:c9:24:bb:20:a1:14:dc:13:aa:65:49:
d6:c0:1d:5e:1a:76:fe:35:93:86:a5:7e:88:c6:5d:8c:01:bf:
cc:88:07:17:ff:85:fa:44:0c:38:c4:05:b6:20:ca:42:a0:3d:
86:a0:13:bf:4d:16:09:02:b6:b7:63:7e:b2:04:58:99:38:3f:
e0:87:8b:46:66:c6:6f:e9:0a:1d:13:4e:ab:44:e1:87:62:d8:
4e:c1:eb:07:ae:05:b7:8c:6a:4d:37:b7:bc:71:91:9f:15:5a:
14:b6:45:7b:a7:56:d5:2c:a5:57:c1:3d:52:9e:45:f5:aa:6c:
0c:f7:a4:64:19:b7:41:3a:e9:d5:a1:15:65:15:df:9b:78:f6:
e9:af:cf:6d:c1:40:9f:c0:18:79:26:17:4e:e3:f0:b5:41:33:
55:6a:ac:30:e9:3b:ed:bb:7b:6b:3a:3c:c8:78:33:6a:49:67:
ea:a2:75:07:12:94:4f:19:a3:63:6e:86:8c:0e:a2:ec:a4:4f:
23:03:88:60:bf:7a:d4:f7:1b:c6:61:39:12:67:1d:17:c3:a2:
ff:4c:03:00:23:50:84:5a:f5:e8:0c:61:ff:d7:8c:1a:f2:d1:
5f:4f:03:37:9a:e6:68:50:d3:ad:6a:c1:d8:ab:6a:7f:4a:7d:
e5:74:80:65
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZ2bkFpfdm9+2qJv7SoBDUL8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDE3MTMxMDIyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTdiMzQ0ZjVkZmU2NTc2ZTYzN2FjMWUzODk2OTcyYzNkODZlMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkO5Iyek6Zd5kQEUJZMjts3M7ruMS
sOi96UUXdH7tEV0oxz7wAD8kk/j8ejzlWF8DBic6NODjc2NrN1ohdh3W2tVoB1bL
Va2A2yEeBw7QKGW26uta1BPy6mmXIfc6fm90HGxQnoBc8PCp4sIxHH0BcHs+fhxC
sFK8GChX616rAuKm2fFh03JNQ50AJQeGiXA+tDcEaxzODBW8DUgMUc19HvShJ8qo
tJkdzIZmnb4OgRe9HaCAfSzn9OGres6cC0+rBFgmaBUy/TQRFem1wvN5S4l7CKlZ
C4w4UD6Eco1USqdOsilwL/FkWNLI4ly7XBXh4ZlLjDppDZequespvV8tZQIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEl7NE9d/mV25jesHjiWlyw9huI+MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvU1hzMFQxMy1aWGJtTjZ3ZU9KYVhMRDJHNGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAJcrGAwQA
JcrPAwQAl/CWAwQAl/IOAwQAl/OcAwQAl/QYAwQAl/RAAwQAl/WUAwQAl/aSAwQA
l/e/AwQAl/fjAwQAl/frMA0GCSqGSIb3DQEBCwUAA4IBAQANhUwytnnCySS7IKEU
3BOqZUnWwB1eGnb+NZOGpX6Ixl2MAb/MiAcX/4X6RAw4xAW2IMpCoD2GoBO/TRYJ
Ara3Y36yBFiZOD/gh4tGZsZv6QodE06rROGHYthOwesHrgW3jGpNN7e8cZGfFVoU
tkV7p1bVLKVXwT1SnkX1qmwM96RkGbdBOunVoRVlFd+bePbpr89twUCfwBh5JhdO
4/C1QTNVaqww6Tvtu3trOjzIeDNqSWfqonUHEpRPGaNjboaMDqLspE8jA4hgv3rU
9xvGYTkSZx0Xw6L/TAMAI1CEWvXoDGH/14wa8tFfTwM3muZoUNOtasHYq2p/Sn3l
dIBl
-----END CERTIFICATE-----
Generated at Sun Apr 19 12:09:59 2026 by rpki-client