Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FIgkWI39HxfnXMwGvW6Lo6LjiI.roa
File: 1FIgkWI39HxfnXMwGvW6Lo6LjiI.roa (raw, json)
Hash identifier: q0mrx/3PGtasR8YWQXZFvVhUvUDIOd7flvtSDjk35l0=
Subject key identifier: D4:52:20:91:62:37:F4:7C:5F:9D:73:30:1A:F5:BA:2E:8E:8B:8E:22
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A06698F3E2924C517625C70F2B2A35638F
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FIgkWI39HxfnXMwGvW6Lo6LjiI.roa
Signing time: Thu 03 Sep 2026 09:28:14 +0000
ROA not before: Thu 03 Sep 2026 09:28:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.244.176.0/23 maxlen: 24
151.244.186.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.178.0/23 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.182.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.156.0/23 maxlen: 24
151.246.162.0/23 maxlen: 24
151.246.164.0/23 maxlen: 24
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.246.252.0/23 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.46.0/23 maxlen: 24
151.247.54.0/24 maxlen: 24
151.247.80.0/23 maxlen: 24
151.247.102.0/23 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.142.0/23 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.152.0/23 maxlen: 24
151.247.176.0/23 maxlen: 24
151.247.198.0/23 maxlen: 24
151.247.212.0/23 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 16:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:98:f3:e2:92:4c:51:76:25:c7:0f:2b:2a:35:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 09:28:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d45220916237f47c5f9d73301af5ba2e8e8b8e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d0:45:6b:ab:b5:d8:47:db:15:26:4f:1f:86:
fd:55:81:6a:03:14:88:24:b2:4b:49:ac:55:bd:3f:
38:43:2a:7f:49:cc:69:f8:12:4a:e0:63:b8:49:9b:
d9:c2:42:6a:3b:66:40:31:58:d9:02:17:fe:bd:02:
5c:d8:ae:0c:f6:61:56:30:e0:98:f3:de:d5:7b:3a:
bc:f5:e1:82:fa:52:ec:63:2a:42:6b:86:41:f7:b9:
86:45:2e:a0:9e:f0:d6:1c:f3:f3:1f:b7:08:94:9a:
31:75:df:fa:25:63:1d:8f:46:e1:15:e4:d7:b4:08:
64:75:d6:82:3d:8a:a0:ec:ad:33:1e:b2:11:fe:d0:
ce:fe:3a:65:d3:0a:42:b4:84:40:b8:17:82:08:53:
32:2b:f5:2d:8d:72:9d:49:8e:09:0a:13:ec:b4:cb:
81:de:89:45:cc:0b:24:b9:9c:47:6e:7f:90:a4:2a:
b5:52:60:3f:a8:c3:d6:ed:de:ca:37:f1:39:b8:dd:
97:b2:69:15:df:96:56:e1:13:86:06:3e:e5:d3:34:
af:4a:9e:1a:8f:d6:d5:50:f9:ee:44:55:34:0e:2a:
96:3a:e9:2d:72:fa:09:7d:0b:fc:16:ac:a4:c9:fa:
19:b7:e4:07:a6:ca:4e:f2:00:fa:f0:02:66:ce:7b:
ad:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:52:20:91:62:37:F4:7C:5F:9D:73:30:1A:F5:BA:2E:8E:8B:8E:22
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/1FIgkWI39HxfnXMwGvW6Lo6LjiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0/24
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0/24
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.176.0/22
151.242.184.0/22
151.244.176.0/23
151.244.186.0/24
151.245.144.0/21
151.245.178.0-151.245.183.255
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.156.0/23
151.246.162.0-151.246.165.255
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.246.252.0/23
151.247.4.0/24
151.247.16.0/23
151.247.46.0/23
151.247.54.0/24
151.247.80.0/23
151.247.102.0/23
151.247.112.0/21
151.247.131.0/24
151.247.142.0-151.247.147.255
151.247.152.0/22
151.247.176.0/23
151.247.198.0/23
151.247.212.0/23
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:7c:2c:12:11:33:67:ce:ee:0d:1e:68:68:35:54:aa:b3:0d:
11:cf:5a:09:aa:b3:12:06:1f:17:f1:b5:92:a3:b9:66:c9:9f:
80:6e:05:6e:6c:07:ec:33:f8:c9:32:90:44:84:18:8e:89:ed:
2c:74:3c:13:b1:97:76:d2:3b:ab:96:cd:5f:43:50:ef:9d:48:
57:19:34:f1:0f:16:de:93:d2:77:c3:b8:e0:f3:cd:aa:7d:09:
df:c2:3c:2b:d1:fa:9b:ab:ad:d1:3e:2a:f8:3c:e1:8d:5f:93:
2d:66:e6:32:11:c2:63:b7:e6:ee:82:7f:af:4e:c4:20:18:2e:
01:1c:7e:f8:ab:a6:bd:89:ab:f6:f5:d2:5f:9f:7b:dd:19:8a:
84:9e:7a:37:bb:05:90:67:9d:ec:1c:19:6b:e3:7f:2d:85:49:
14:b7:f0:6b:3a:f5:de:76:96:02:92:79:7d:13:3e:96:42:b8:
3a:ac:7f:5f:bd:4c:b9:c6:f5:5d:2b:8f:37:d1:c7:9d:81:68:
ea:85:39:98:25:5a:56:10:de:cf:15:80:33:c1:58:29:a2:db:
96:d1:45:eb:c3:7c:38:ea:48:14:02:92:fc:94:54:96:2c:1a:
b7:64:7c:84:fc:e8:86:29:1a:16:34:93:3e:cc:38:f7:0d:4d:
91:0d:fa:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:53 2026 by rpki-client