Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EbVgqTMSuWbeRNihFqefv62SByQ.roa
File: EbVgqTMSuWbeRNihFqefv62SByQ.roa (raw, json)
Hash identifier: aSmQu0S9sfpVO8iupLHmt+gzE+fsY2D6cegg4IC6b+M=
Subject key identifier: 11:B5:60:A9:33:12:B9:66:DE:44:D8:A1:16:A7:9F:BF:AD:92:07:24
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019CD75AB5E0EEA65813B5B4BB9BCD568A5B
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EbVgqTMSuWbeRNihFqefv62SByQ.roa
Signing time: Tue 10 Mar 2026 10:46:12 +0000
ROA not before: Tue 10 Mar 2026 10:46:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.99.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.164.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.247.4.0/24 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d7:5a:b5:e0:ee:a6:58:13:b5:b4:bb:9b:cd:56:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Mar 10 10:46:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11b560a93312b966de44d8a116a79fbfad920724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:12:5d:01:08:0d:5f:c6:d8:1a:c9:f6:06:25:
78:fa:9d:8b:e5:e7:62:d5:65:00:62:d7:69:3a:e5:
ba:61:77:81:e7:f4:09:1a:5b:c5:58:d8:50:18:4f:
bf:2b:4d:1b:de:8b:37:dd:07:7b:80:f6:d5:31:91:
00:38:b4:58:c4:54:7d:41:bb:02:19:f9:10:7c:74:
f7:a0:78:ee:63:17:55:0e:74:d5:c3:76:21:47:83:
c5:cc:39:2a:17:d7:5d:45:ff:13:ae:eb:d9:a5:4f:
ad:a5:e9:f2:90:f0:5f:78:d0:11:bc:f7:86:70:ea:
64:c0:dd:28:28:09:c2:36:87:5f:ec:9b:6f:75:9e:
5f:55:2f:f5:c8:a4:ac:a9:f7:a0:87:3b:03:c1:2b:
ed:6f:5f:d9:a5:11:ee:5b:39:39:33:5c:c0:7d:1e:
76:18:31:ed:88:15:ae:93:d2:4f:97:17:47:6c:0e:
ec:bc:76:8b:00:01:1a:a6:22:08:04:a8:f0:86:87:
a1:28:6b:3f:f2:b3:40:09:c7:b5:c0:73:5c:05:bd:
4a:01:d1:3b:3f:cf:55:2c:17:2a:54:cc:08:6b:0f:
38:90:41:cc:1a:5a:e3:d2:ee:9f:c6:f1:4d:35:d6:
18:55:f1:5f:f6:7d:9d:c9:8c:8d:6a:4a:22:a7:44:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:B5:60:A9:33:12:B9:66:DE:44:D8:A1:16:A7:9F:BF:AD:92:07:24
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/EbVgqTMSuWbeRNihFqefv62SByQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.13.255
151.240.15.0-151.240.16.255
151.240.18.0/23
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.73.0/24
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.99.0/24
151.240.126.0-151.240.143.255
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.32.0/24
151.242.145.0/24
151.243.45.0/24
151.243.88.0/24
151.243.164.0/24
151.244.186.0/23
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.247.4.0/24
151.247.131.0/24
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:1f:f7:a3:31:b6:11:17:12:a0:55:92:59:4f:8e:b7:8b:2d:
99:4b:5d:e8:63:e7:65:8a:58:d2:27:fe:17:ec:1f:fa:1d:3f:
78:0a:f3:9d:97:2e:a3:69:57:fd:ed:d1:6b:4e:af:9c:b0:b4:
e7:ba:5b:3c:86:28:04:81:9d:b2:cd:22:a5:cc:f3:ed:65:83:
86:b8:97:fb:a4:b1:0b:f1:17:1d:31:2d:62:b1:36:d9:d4:97:
88:59:bd:7e:0f:df:be:b5:59:c3:9e:13:fa:74:88:85:96:80:
74:8e:84:9e:42:95:ee:2c:96:31:51:1b:5b:89:92:7d:eb:e7:
1b:75:94:96:0c:1e:68:54:15:e4:50:1f:78:67:2d:f1:c7:60:
c7:29:fe:6c:10:dc:f2:cf:a0:fe:e4:ff:64:0b:d9:0c:5c:09:
fa:cd:3e:56:e4:f6:ca:9d:0e:be:13:dd:7a:80:87:36:94:df:
62:4a:db:aa:66:55:80:76:33:4a:50:a9:3d:93:89:06:49:fa:
e6:3f:cb:3b:41:32:1c:e3:d3:07:d6:66:00:42:f4:67:f7:7f:
7c:8f:64:46:d0:d3:b3:95:4e:51:ea:46:22:35:09:11:14:ca:
e1:00:4e:d0:b4:88:55:a6:eb:20:70:ee:d5:cb:34:20:31:83:
ec:5e:af:74
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgISAZzXWrXg7qZYE7W0u5vNVopbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwMzEwMTA0NjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWI1NjBhOTMzMTJiOTY2ZGU0NGQ4YTExNmE3OWZiZmFkOTIwNzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRJdAQgNX8bYGsn2BiV4+p2L5edi
1WUAYtdpOuW6YXeB5/QJGlvFWNhQGE+/K00b3os33Qd7gPbVMZEAOLRYxFR9QbsC
GfkQfHT3oHjuYxdVDnTVw3YhR4PFzDkqF9ddRf8TruvZpU+tpenykPBfeNARvPeG
cOpkwN0oKAnCNodf7JtvdZ5fVS/1yKSsqfeghzsDwSvtb1/ZpRHuWzk5M1zAfR52
GDHtiBWuk9JPlxdHbA7svHaLAAEapiIIBKjwhoehKGs/8rNACce1wHNcBb1KAdE7
P89VLBcqVMwIaw84kEHMGlrj0u6fxvFNNdYYVfFf9n2dyYyNakoip0TnDQIDAQAB
o4IDVzCCA1MwHQYDVR0OBBYEFBG1YKkzErlm3kTYoRann7+tkgckMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvRWJWZ3FUTVN1V2JlUk5paEZxZWZ2NjJTQnlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBawYIKwYBBQUHAQcBAf8EggFaMIIBVjCCAVIEAgABMIIB
SgMEACXK3wMEApfwBDAMAwQAl/ALAwQBl/AMMAwDBACX8A8DBACX8BADBAGX8BID
BACX8BkwDAMEBZfwIAMEAJfwKgMEAJfwSQMEAJfwUzAMAwQDl/BYAwQAl/BaAwQA
l/BjMAwDBAGX8H4DBASX8IADBAGX8JwwDAMEAJfwnwMEAJfwoAMEAJfwogMEAJfw
pDAMAwQBl/CmAwQAl/CoMAwDBAGX8KoDBACX8KwwDAMEAZfwrgMEAJfwsAMEAJfw
sjAMAwQCl/C0AwQAl/DMMAwDBAGX8M4DBAGX8OADBACX8OUwDAMEAJfw6QMEAJfw
7gMEAJfw8AMEAJfw+AMEAJfw/gMEAJfxIAMEAJfykQMEAJfzLQMEAJfzWAMEAJfz
pAMEAZf0ugMEAJf1ywMEA5f2IAMEA5f2aAMEAJf3BAMEAJf3gwMEAJf33zANBgkq
hkiG9w0BAQsFAAOCAQEAmh/3ozG2ERcSoFWSWU+Ot4stmUtd6GPnZYpY0if+F+wf
+h0/eArznZcuo2lX/e3Ra06vnLC057pbPIYoBIGdss0ipczz7WWDhriX+6SxC/EX
HTEtYrE22dSXiFm9fg/fvrVZw54T+nSIhZaAdI6EnkKV7iyWMVEbW4mSfevnG3WU
lgweaFQV5FAfeGct8cdgxyn+bBDc8s+g/uT/ZAvZDFwJ+s0+VuT2yp0OvhPdeoCH
NpTfYkrbqmZVgHYzSlCpPZOJBkn65j/LO0EyHOPTB9ZmAEL0Z/d/fI9kRtDTs5VO
UepGIjUJERTK4QBO0LSIVabrIHDu1cs0IDGD7F6vdA==
-----END CERTIFICATE-----
Generated at Fri Mar 13 02:17:58 2026 by rpki-client