Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tsFDQXjpyVRBIFq_HZpBzDxUzI.roa
File: 0tsFDQXjpyVRBIFq_HZpBzDxUzI.roa (raw, json)
Hash identifier: WRjMjdY3MANvk/qtz3pDNGZw77g/yv/9TR/KIOgURAQ=
Subject key identifier: D2:DB:05:0D:05:E3:A7:25:51:04:81:6A:FC:76:69:07:30:F1:53:32
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CB7AC53B823BBF59425DC2010E6D9C641
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tsFDQXjpyVRBIFq_HZpBzDxUzI.roa
Signing time: Wed 04 Mar 2026 07:07:29 +0000
ROA not before: Wed 04 Mar 2026 07:07:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.247.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 07:18:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b7:ac:53:b8:23:bb:f5:94:25:dc:20:10:e6:d9:c6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 4 07:07:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2db050d05e3a7255104816afc76690730f15332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:e2:0b:8f:36:57:d2:2f:f6:48:09:ca:9b:
dc:ac:fa:1b:fa:f9:f4:c1:29:c9:fb:1e:ba:ef:11:
bb:08:f7:2b:e2:e8:5a:a8:af:d7:8b:88:a1:42:f8:
20:14:74:ab:51:03:8f:8d:92:5a:4c:17:11:e0:04:
7b:98:e7:67:dc:6c:38:5b:d4:8b:01:a3:8c:38:a2:
ed:65:15:f1:d4:7f:be:6f:60:21:db:fe:06:eb:b0:
c6:b0:f3:96:53:20:25:7f:a7:9a:bf:5e:f4:c0:ab:
37:8b:00:6f:d1:1e:e5:a3:01:c1:20:27:1f:f6:a4:
6b:c1:1a:cf:d5:3e:e3:87:99:5e:47:d4:77:a5:10:
51:fb:21:34:95:cd:43:4c:12:76:f4:74:7a:15:a8:
8d:b2:67:b6:67:7c:a0:53:33:fd:c5:05:81:87:8d:
3a:c3:91:5c:d4:38:0b:7b:ed:d9:66:12:8e:8d:75:
de:66:c9:a5:ee:5a:47:aa:f1:5b:2d:6a:59:bd:54:
37:4b:06:d5:a0:ec:75:c8:3c:52:20:63:33:10:a2:
cd:33:91:0e:cc:54:fe:82:b9:59:d1:3c:27:4d:64:
94:c3:6e:55:66:5f:f4:c1:30:c5:c5:af:ca:17:b8:
9b:a8:87:e8:e7:fa:62:32:a4:51:71:c6:13:71:c4:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DB:05:0D:05:E3:A7:25:51:04:81:6A:FC:76:69:07:30:F1:53:32
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/0tsFDQXjpyVRBIFq_HZpBzDxUzI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.13.255
151.240.15.0-151.240.16.255
151.240.18.0/23
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.73.0/24
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.99.0/24
151.240.126.0-151.240.143.255
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.32.0/24
151.242.145.0/24
151.243.45.0/24
151.243.88.0/24
151.244.186.0/23
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
65:84:1c:9e:e5:d0:bd:31:80:fc:03:83:6a:ce:b2:01:ea:b4:
57:f2:f5:8b:3a:7d:3b:31:e1:66:81:a7:b0:ba:9b:a0:fa:a1:
de:cb:69:ba:f2:af:a9:54:ee:74:d6:fe:1a:8e:ed:4a:d5:8f:
eb:50:4b:57:62:a7:28:71:6f:71:b6:8b:6b:34:86:90:04:05:
7a:34:fa:c8:28:33:81:b3:71:0b:09:51:1d:26:70:fc:5d:81:
90:0c:60:a2:c6:8c:d9:dd:f9:f3:08:2c:88:66:1c:6e:8e:3a:
cb:35:62:61:a0:43:33:49:24:92:81:41:15:5b:0e:0d:23:ea:
1d:fb:81:87:7d:91:46:11:f6:58:11:0b:28:2c:3f:a0:69:9f:
4a:be:17:f3:3d:38:3d:74:86:46:aa:d6:a3:36:94:f7:55:04:
e8:eb:1b:4f:aa:12:7c:35:42:d4:29:f4:32:bf:64:a8:2e:26:
6d:90:6d:77:c8:f6:2f:88:8c:bd:83:2b:fd:60:24:30:7f:fe:
81:4c:d7:cb:07:c8:6f:31:8a:29:d1:80:14:17:45:99:67:e9:
5a:39:6c:82:dc:e3:ed:b4:f7:a5:ff:d9:eb:77:55:0e:b1:a3:
55:d7:de:4a:48:fa:e5:59:11:56:08:4f:9f:ba:bb:34:98:83:
5e:42:59:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 16:01:33 2026 by rpki-client