Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0WSl_SmMYrGQ5zglagv3ZzXTPZI.roa
File: 0WSl_SmMYrGQ5zglagv3ZzXTPZI.roa (raw, json)
Hash identifier: CUN5J3ZsfkOV9lS58W+mhjl70ldrLloLZx74OeTMZGw=
Subject key identifier: D1:64:A5:FD:29:8C:62:B1:90:E7:38:25:6A:0B:F7:67:35:D3:3D:92
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0197DF7A498B1689355915F6D18DF2A67663
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0WSl_SmMYrGQ5zglagv3ZzXTPZI.roa
Signing time: Sun 06 Jul 2025 11:23:42 +0000
ROA not before: Sun 06 Jul 2025 11:23:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.82.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.96.0/24 maxlen: 24
151.240.97.0/24 maxlen: 24
151.240.98.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.205.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.240.255.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.244.2.0/24 maxlen: 24
151.244.134.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Jul 2025 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:df:7a:49:8b:16:89:35:59:15:f6:d1:8d:f2:a6:76:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jul 6 11:23:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d164a5fd298c62b190e738256a0bf76735d33d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d3:63:36:7c:06:06:89:ec:86:3c:0e:57:0d:
89:dd:50:01:0a:e0:4b:4b:6d:fc:94:59:64:10:ba:
1f:84:6a:b1:39:91:5d:13:d8:6d:29:16:ef:d0:fc:
91:df:34:5e:8a:8e:2e:fe:d5:05:6e:e4:34:7f:c9:
5a:d4:94:4f:99:ff:f2:f2:02:de:e6:d2:30:4e:cf:
db:1d:22:9b:07:8c:3c:60:0b:79:05:19:a9:a2:65:
8d:30:86:5b:12:51:4c:c8:e4:84:1d:35:7f:f5:12:
9a:90:81:a3:91:44:88:99:1c:38:e1:70:b6:b8:b6:
c0:a8:33:cf:2f:da:fe:31:cc:d9:5a:8a:6d:62:f2:
2b:eb:d8:b7:4f:59:e8:9b:d6:49:07:ae:4b:8c:81:
bd:36:e6:9f:d2:b8:de:b3:63:e5:6e:b5:5b:fd:e5:
54:4c:9e:25:9b:2e:80:7a:d1:e8:22:49:cb:62:03:
22:f7:37:e2:bc:1c:a3:c9:8e:6f:5d:88:c0:9a:cc:
c4:07:70:b5:f3:fe:93:86:0c:2b:ad:2b:a0:e3:2b:
30:e7:e5:64:d4:f5:ac:b2:b9:47:c3:f3:ca:d7:02:
65:b4:4c:d2:4e:fc:b2:24:71:b6:2a:dd:9c:a3:21:
1c:93:fe:ee:2f:c5:86:25:13:c9:81:b1:28:ad:16:
39:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:64:A5:FD:29:8C:62:B1:90:E7:38:25:6A:0B:F7:67:35:D3:3D:92
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0WSl_SmMYrGQ5zglagv3ZzXTPZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.74.255
151.240.76.0/24
151.240.78.0-151.240.90.255
151.240.96.0/22
151.240.126.0-151.240.154.255
151.240.156.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/23
151.243.45.0/24
151.243.88.0/23
151.244.2.0/24
151.244.134.0/24
151.244.187.0/24
151.244.250.0-151.244.255.255
Signature Algorithm: sha256WithRSAEncryption
50:f4:76:53:59:db:73:5a:8e:4c:86:70:d9:60:eb:eb:38:74:
cc:fc:ad:a0:92:ff:af:3f:22:8c:1f:65:a4:8c:9b:ce:49:60:
8e:fa:46:58:cb:0d:4c:67:78:38:26:e7:73:d0:1a:49:93:95:
52:76:0c:1a:8d:5d:e2:20:3e:02:ab:5d:06:5a:e3:b2:72:70:
1b:79:d8:37:73:70:02:f0:06:e9:50:34:92:55:4e:f2:5c:22:
a4:a1:55:f4:60:de:67:07:5c:d5:6c:05:c7:a0:bc:8d:16:e4:
a4:00:fa:d3:4a:78:82:af:f1:85:b0:e1:9d:ce:2b:2a:fe:5a:
e1:32:bc:a1:9c:98:79:a3:39:4e:26:37:3c:84:c0:90:a1:2c:
d1:45:d8:41:74:2e:f1:54:f2:4c:59:7d:33:01:a0:1b:c2:61:
8b:a7:f2:8a:dc:35:e2:ab:81:d8:d0:43:62:8b:58:3d:13:68:
96:63:90:9c:a8:6d:bd:4b:6a:66:34:7b:94:1c:32:70:1b:cb:
96:44:21:c4:f2:58:f6:d2:74:7d:49:15:43:da:cc:18:f6:07:
5d:de:d4:cb:35:37:47:6c:aa:67:2c:a5:76:c8:8a:22:0e:1b:
bb:6f:76:67:09:2e:7f:8e:8c:5f:94:24:55:81:1c:2d:0f:6b:
fc:3e:df:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:09:51 2025 by rpki-client