Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_8x6lfBCVPATKv2otBrVTrz-qL8.roa
File: _8x6lfBCVPATKv2otBrVTrz-qL8.roa (raw, json)
Hash identifier: y4hU6EDXevUFIsYJ9lcjWOo1Q/3dfYuzk2EfjoxbDpE=
Subject key identifier: FF:CC:7A:95:F0:42:54:F0:13:2A:FD:A8:B4:1A:D5:4E:BC:FE:A8:BF
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019D617F057A89B98CA6B7DF629A64F6465A
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_8x6lfBCVPATKv2otBrVTrz-qL8.roa
Signing time: Mon 06 Apr 2026 06:33:27 +0000
ROA not before: Mon 06 Apr 2026 06:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.201.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:61:7f:05:7a:89:b9:8c:a6:b7:df:62:9a:64:f6:46:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Apr 6 06:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ffcc7a95f04254f0132afda8b41ad54ebcfea8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9c:3c:7b:b0:24:06:6a:2d:f4:66:87:5f:b3:
ab:7f:4f:a0:0c:b4:08:c9:a7:3e:87:f8:83:9f:92:
e1:e2:23:23:37:d7:0a:96:a7:27:25:ba:07:fd:12:
0e:f3:6b:15:bd:41:a6:15:21:4b:aa:69:24:7d:48:
eb:c0:75:16:37:78:fa:bb:d4:0f:15:8e:9e:73:c1:
12:99:da:df:99:e1:48:b5:51:87:2a:36:bd:ea:09:
dc:c0:04:1b:f0:bb:ac:79:43:2d:b3:6c:62:96:a5:
9b:70:d2:c5:6e:9d:f7:64:52:16:7a:f8:70:6b:d5:
2b:c3:2e:fa:aa:83:7f:57:74:0e:a7:8a:6a:78:0a:
25:94:f6:66:c3:5b:d8:be:ed:2a:e6:ca:c9:bf:e5:
10:47:da:89:d5:44:29:56:98:d3:1e:c9:46:17:97:
b5:c3:4b:8a:e8:74:a2:ce:06:90:6d:bf:d6:86:d7:
14:05:bb:77:61:86:4d:cd:71:44:e5:61:5d:57:d7:
c0:56:6a:3a:f4:06:55:56:42:ab:33:ae:85:dc:8e:
3d:d5:ab:66:5d:92:38:93:52:b3:5b:70:fd:2f:f7:
e9:b6:e6:19:2c:ba:ba:96:73:35:da:9a:6c:3a:3e:
b4:db:9a:68:57:b0:66:39:7f:61:63:6b:5e:61:92:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:CC:7A:95:F0:42:54:F0:13:2A:FD:A8:B4:1A:D5:4E:BC:FE:A8:BF
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/_8x6lfBCVPATKv2otBrVTrz-qL8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.201.0/24
151.240.45.0/24
151.241.30.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.160.0/24
151.241.176.0/24
151.241.204.0/24
151.242.45.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.244.5.0/24
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.191.0/24
151.244.193.0/24
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.142.0/24
151.245.195.0/24
151.245.212.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:cf:e8:66:25:ee:23:c4:dd:9d:0e:c0:1a:b4:af:06:c1:5e:
a6:a5:8c:c8:6f:46:6d:83:19:23:3e:9e:e6:d6:06:6c:c2:a9:
c0:ea:dc:3f:7e:81:c1:ea:2c:21:da:0a:0e:9b:a1:66:39:a2:
7e:67:8a:3f:02:dd:6d:64:9b:74:44:4e:8b:47:db:bf:b5:6c:
69:60:4c:88:53:21:6d:b8:af:13:95:d7:18:1e:ef:ed:d1:f1:
d6:28:09:9a:55:45:f9:c3:13:d3:75:6b:a4:df:ac:eb:b0:58:
cb:ce:3f:c3:75:2f:24:45:6d:d5:7d:1f:44:54:be:be:8c:68:
f1:12:82:7b:9f:45:38:9f:83:f1:6e:f6:ab:b4:64:ca:9e:4d:
d8:c8:24:24:90:9f:49:d7:bc:b8:b0:a3:83:a5:78:fe:bb:32:
57:76:2c:73:2b:74:0d:ba:b4:97:35:f6:9f:ca:f6:cc:fa:20:
da:5a:36:14:72:84:01:55:e6:76:48:03:4c:bb:3c:84:d1:1a:
81:85:87:b7:2c:07:cf:89:c9:4b:d9:1a:11:58:8d:4c:21:4a:
be:79:f8:cf:25:5c:25:25:9a:f5:f9:77:12:3d:ff:3a:40:d8:
ba:ab:95:00:d9:4a:15:24:b4:67:e6:e7:bb:f5:48:1f:ed:94:
f9:c0:d3:a1
-----BEGIN CERTIFICATE-----
MIIF5zCCBM+gAwIBAgISAZ1hfwV6ibmMprffYppk9kZaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNDA2MDYzMzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZmNjN2E5NWYwNDI1NGYwMTMyYWZkYThiNDFhZDU0ZWJjZmVhOGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZw8e7AkBmot9GaHX7Orf0+gDLQI
yac+h/iDn5Lh4iMjN9cKlqcnJboH/RIO82sVvUGmFSFLqmkkfUjrwHUWN3j6u9QP
FY6ec8ESmdrfmeFItVGHKja96gncwAQb8LuseUMts2xilqWbcNLFbp33ZFIWevhw
a9Urwy76qoN/V3QOp4pqeAollPZmw1vYvu0q5srJv+UQR9qJ1UQpVpjTHslGF5e1
w0uK6HSizgaQbb/WhtcUBbt3YYZNzXFE5WFdV9fAVmo69AZVVkKrM66F3I491atm
XZI4k1KzW3D9L/fptuYZLLq6lnM12ppsOj6025poV7BmOX9hY2teYZLS0QIDAQAB
o4IC8zCCAu8wHQYDVR0OBBYEFP/MepXwQlTwEyr9qLQa1U68/qi/MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvXzh4NmxmQkNWUEFUS3Yyb3RCclZUcnotcUw4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBBwYIKwYBBQUHAQcBAf8EgfcwgfQwgfEEAgABMIHqAwQA
JcrJAwQAl/AtAwQAl/EeAwQAl/EnAwQAl/EyAwQAl/FAAwQAl/FDAwQBl/FGAwQA
l/FJAwQAl/FNAwQAl/FfAwQAl/FzAwQAl/GgAwQAl/GwAwQAl/HMAwQAl/ItAwQA
l/KeAwQAl/MCAwQAl/NpAwQAl/OJAwQAl/QFAwQAl/Q5AwQAl/RvAwQBl/RyAwQA
l/SDAwQAl/S/AwQAl/TBAwQAl/TUAwQAl/UDAwQAl/UcAwQAl/VMAwQAl/VOAwQA
l/VoAwQAl/WOAwQAl/XDAwQAl/XUAwQDl/d4AwQAl/e8AwQAl/fdMA0GCSqGSIb3
DQEBCwUAA4IBAQCxz+hmJe4jxN2dDsAatK8GwV6mpYzIb0ZtgxkjPp7m1gZswqnA
6tw/foHB6iwh2goOm6FmOaJ+Z4o/At1tZJt0RE6LR9u/tWxpYEyIUyFtuK8TldcY
Hu/t0fHWKAmaVUX5wxPTdWuk36zrsFjLzj/DdS8kRW3VfR9EVL6+jGjxEoJ7n0U4
n4PxbvartGTKnk3YyCQkkJ9J17y4sKODpXj+uzJXdixzK3QNurSXNfafyvbM+iDa
WjYUcoQBVeZ2SANMuzyE0RqBhYe3LAfPiclL2RoRWI1MIUq+efjPJVwlJZr1+XcS
Pf86QNi6q5UA2UoVJLRn5ue79Ugf7ZT5wNOh
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:39 2026 by rpki-client