Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NJI7JiVmHGQlFk7Z2cO_8vq6FJ4.roa
File: NJI7JiVmHGQlFk7Z2cO_8vq6FJ4.roa (raw, json)
Hash identifier: FpbXTfcOqx7c04RbTNf1FgMEIirUxwg2Q6VIV9LI6WM=
Subject key identifier: 34:92:3B:26:25:66:1C:64:25:16:4E:D9:D9:C3:BF:F2:FA:BA:14:9E
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A1301E6051B41E719924FA8C418040EE52
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NJI7JiVmHGQlFk7Z2cO_8vq6FJ4.roa
Signing time: Mon 12 Oct 2026 12:37:39 +0000
ROA not before: Mon 12 Oct 2026 12:37:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.243.234.0/24 maxlen: 24
151.244.186.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.182.0/24 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.246.252.0/23 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.16.0/23 maxlen: 24
151.247.46.0/23 maxlen: 24
151.247.80.0/23 maxlen: 24
151.247.102.0/23 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.142.0/23 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.152.0/23 maxlen: 24
151.247.176.0/23 maxlen: 24
151.247.198.0/23 maxlen: 24
151.247.212.0/23 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:1e:60:51:b4:1e:71:99:24:fa:8c:41:80:40:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 12 12:37:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=34923b2625661c6425164ed9d9c3bff2faba149e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f5:c8:e0:c1:cf:27:af:03:66:04:f0:c1:47:
25:7e:d0:b1:18:0a:71:33:0f:05:06:15:cc:56:c5:
a2:38:00:23:39:89:10:f7:fb:a5:ae:6e:f4:52:8a:
46:d2:d9:f2:a7:3c:17:fa:cf:06:ee:ca:af:8d:e0:
2a:ea:d6:25:1b:83:c9:a1:53:94:dd:bb:07:93:2f:
a6:f2:17:9e:1b:51:b1:5e:c8:14:b3:8a:bc:99:99:
c5:f6:36:0b:e3:7d:7c:7d:df:70:1f:cb:c2:fc:39:
91:3f:73:a8:12:ef:52:81:78:a0:64:47:48:d1:96:
1c:a9:3d:47:33:a3:2b:0a:bc:67:eb:16:a2:fb:cc:
96:23:8f:63:14:a9:f1:ca:e3:20:45:8b:88:40:87:
bc:e2:8e:4a:8a:13:c5:b5:34:88:36:7e:25:d6:f1:
d8:30:e7:15:6c:9d:e2:ad:b0:46:51:b0:2a:3c:55:
a5:3a:66:6f:e9:a3:3a:53:30:0a:a8:64:01:15:f4:
56:a3:79:1c:db:bb:87:1c:b9:bb:07:7c:2e:7a:60:
16:3b:af:60:28:26:aa:69:fe:67:fc:3e:75:58:a8:
0e:38:96:c4:7c:5c:a1:f3:48:4f:d4:8f:19:7b:d7:
72:7f:91:20:f7:4d:e5:f5:be:b0:4f:34:54:e5:a6:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:92:3B:26:25:66:1C:64:25:16:4E:D9:D9:C3:BF:F2:FA:BA:14:9E
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/NJI7JiVmHGQlFk7Z2cO_8vq6FJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0/24
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0/23
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0/24
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.176.0/22
151.242.184.0/22
151.243.234.0/24
151.244.186.0/24
151.245.144.0/21
151.245.180.0/22
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.246.252.0/23
151.247.4.0/24
151.247.16.0/23
151.247.46.0/23
151.247.80.0/23
151.247.102.0/23
151.247.112.0/21
151.247.131.0/24
151.247.142.0-151.247.147.255
151.247.152.0/22
151.247.176.0/23
151.247.198.0/23
151.247.212.0/23
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
98:5b:75:11:fc:56:41:16:e9:0d:21:d7:81:62:09:dc:b0:ff:
cd:67:ca:d1:71:42:80:c1:81:28:6d:75:3c:89:fd:28:5c:03:
92:ad:33:57:70:89:35:32:ae:1b:2a:35:a0:87:e7:18:18:11:
0c:84:8a:08:26:80:7a:f3:34:30:39:4e:14:8b:b0:39:ca:db:
5f:7e:18:7e:73:f1:2b:c5:7c:e6:27:49:6f:5a:1e:47:29:d1:
a0:4e:1c:d4:78:64:89:3a:1b:f4:36:3e:52:ef:a6:d1:4a:a8:
28:0d:c5:a5:96:8f:e8:3d:15:9f:bd:f3:d9:b0:26:5b:b9:64:
96:b9:b8:d6:98:01:dc:c5:2a:e9:69:a3:0d:ea:b6:b8:c6:c1:
77:50:30:c9:1f:bc:4e:af:89:f0:76:88:79:af:1d:22:2d:7b:
b9:32:8c:ef:15:1a:f2:2f:87:1f:d0:f1:d9:2a:9d:25:d4:7a:
97:fa:0f:3c:88:21:c8:09:2b:26:03:fd:1d:79:d1:c8:51:59:
32:b9:27:bf:bb:d1:a2:22:6c:3b:ff:bc:44:ed:02:e2:ac:21:
a7:8f:8d:80:2a:2b:7e:32:8e:32:01:9c:6b:4f:26:55:a8:5a:
f7:4b:aa:fa:1c:61:c0:1e:24:bb:48:50:10:68:e8:2c:39:54:
a8:7e:6d:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:36:09 2026 by rpki-client