Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QSzHkkTPyghVAr1Jm1zPuOYWlG0.roa
File: QSzHkkTPyghVAr1Jm1zPuOYWlG0.roa (raw, json)
Hash identifier: 6kAwmXWu3pY4HaAY/ZgLvOE4nBeE/ksgi7PaAR5YrYs=
Subject key identifier: 41:2C:C7:92:44:CF:CA:08:55:02:BD:49:9B:5C:CF:B8:E6:16:94:6D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E8C757582F22FCB9CEEF842FAB2F896EC
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QSzHkkTPyghVAr1Jm1zPuOYWlG0.roa
Signing time: Wed 03 Jun 2026 07:49:28 +0000
ROA not before: Wed 03 Jun 2026 07:49:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.11.0/24 maxlen: 24
151.241.12.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.18.0/24 maxlen: 24
151.241.22.0/24 maxlen: 24
151.241.24.0/24 maxlen: 24
151.241.26.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.31.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.40.0/24 maxlen: 24
151.241.47.0/24 maxlen: 24
151.241.66.0/24 maxlen: 24
151.241.69.0/24 maxlen: 24
151.241.78.0/24 maxlen: 24
151.241.79.0/24 maxlen: 24
151.241.89.0/24 maxlen: 24
151.241.90.0/24 maxlen: 24
151.241.92.0/24 maxlen: 24
151.241.94.0/24 maxlen: 24
151.241.104.0/24 maxlen: 24
151.241.108.0/24 maxlen: 24
151.241.111.0/24 maxlen: 24
151.241.112.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.242.176.0/22 maxlen: 24
151.242.184.0/22 maxlen: 24
151.242.236.0/22 maxlen: 24
151.244.186.0/24 maxlen: 24
151.245.144.0/22 maxlen: 24
151.245.148.0/22 maxlen: 24
151.245.180.0/22 maxlen: 24
151.245.203.0/24 maxlen: 24
151.246.32.0/21 maxlen: 21
151.246.104.0/21 maxlen: 21
151.246.168.0/22 maxlen: 24
151.246.172.0/22 maxlen: 24
151.246.180.0/22 maxlen: 24
151.246.224.0/22 maxlen: 24
151.246.228.0/22 maxlen: 24
151.246.232.0/22 maxlen: 24
151.246.236.0/22 maxlen: 24
151.247.4.0/24 maxlen: 24
151.247.112.0/22 maxlen: 24
151.247.116.0/22 maxlen: 24
151.247.131.0/24 maxlen: 24
151.247.144.0/22 maxlen: 24
151.247.152.0/22 maxlen: 24
151.247.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 06:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8c:75:75:82:f2:2f:cb:9c:ee:f8:42:fa:b2:f8:96:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 3 07:49:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=412cc79244cfca085502bd499b5ccfb8e616946d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:ea:6e:4d:00:af:2d:97:91:5d:05:43:c4:
99:77:0a:fd:bf:dc:f1:b0:af:e1:8c:37:c8:5d:29:
f0:ef:c4:4b:70:7f:5f:30:54:17:19:a1:56:03:7e:
0d:87:5c:57:9e:4f:b3:c0:40:1a:56:66:5a:31:9a:
0b:77:11:44:ae:33:56:c5:f8:9a:de:fe:fc:4c:bd:
6c:eb:50:1b:68:27:1f:dc:10:fb:61:8e:86:1d:47:
db:bc:32:38:5d:5b:97:62:5e:ed:41:c0:41:6f:e9:
7c:80:09:33:d9:76:31:60:a1:45:9c:82:72:42:ca:
5d:34:b6:80:00:36:e0:2f:5c:94:4f:cd:fa:2a:de:
7e:40:44:04:1b:e9:55:b0:5a:09:ec:d6:9a:1d:eb:
ea:5e:f9:33:67:4e:64:48:04:ae:4b:d7:f7:54:cb:
bb:c5:3e:fa:08:f2:5f:e3:bd:c8:da:8b:59:d5:67:
4b:0c:11:13:59:d9:c4:0c:66:d7:e2:92:4e:16:4c:
24:69:41:7b:47:aa:c0:14:c6:f7:e4:14:a0:0c:82:
60:1c:e8:0f:06:18:4e:93:f6:34:4e:a8:27:22:45:
ec:13:00:c3:61:44:c2:9b:1e:d1:08:52:a6:6d:a4:
ce:89:72:1a:51:a6:64:4a:e0:58:21:2f:62:4a:9a:
fb:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:C7:92:44:CF:CA:08:55:02:BD:49:9B:5C:CF:B8:E6:16:94:6D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QSzHkkTPyghVAr1Jm1zPuOYWlG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.11.0-151.240.13.255
151.240.15.0/24
151.240.19.0/24
151.240.25.0/24
151.240.32.0-151.240.42.255
151.240.83.0/24
151.240.88.0-151.240.90.255
151.240.126.0-151.240.143.255
151.240.156.0/23
151.240.159.0-151.240.160.255
151.240.162.0/24
151.240.164.0/24
151.240.166.0-151.240.168.255
151.240.170.0-151.240.172.255
151.240.174.0-151.240.176.255
151.240.178.0/24
151.240.180.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.241.9.0/24
151.241.11.0-151.241.13.255
151.241.15.0/24
151.241.18.0/24
151.241.22.0/24
151.241.24.0/24
151.241.26.0/23
151.241.29.0/24
151.241.31.0-151.241.32.255
151.241.40.0/24
151.241.47.0/24
151.241.66.0/24
151.241.69.0/24
151.241.78.0/23
151.241.89.0-151.241.90.255
151.241.92.0/24
151.241.94.0/24
151.241.104.0/24
151.241.108.0/24
151.241.111.0-151.241.112.255
151.242.145.0/24
151.242.176.0/22
151.242.184.0/22
151.242.236.0/22
151.244.186.0/24
151.245.144.0/21
151.245.180.0/22
151.245.203.0/24
151.246.32.0/21
151.246.104.0/21
151.246.168.0/21
151.246.180.0/22
151.246.224.0/20
151.247.4.0/24
151.247.112.0/21
151.247.131.0/24
151.247.144.0/22
151.247.152.0/22
151.247.223.0/24
Signature Algorithm: sha256WithRSAEncryption
60:d7:b6:6d:23:d0:9c:94:5a:6c:8e:bc:e5:3a:a7:a4:a4:49:
2f:a8:02:d8:aa:08:10:f5:28:13:45:18:df:ca:48:28:a8:16:
2a:ed:b6:4f:27:00:2d:34:46:06:ec:f7:93:1d:45:26:82:c8:
c8:d4:05:4e:91:03:bf:7a:95:fc:1f:33:78:d2:e3:35:94:f4:
87:95:5f:10:4e:4f:9a:0e:a0:03:47:6c:d7:06:94:81:80:ff:
d4:c0:d7:35:31:3f:74:0d:ac:a2:69:4b:fd:30:c5:1d:3f:68:
ff:3e:51:48:82:c4:a3:7f:95:8a:95:99:b1:8f:30:bf:73:4a:
31:ea:fa:6b:a2:d2:f2:10:62:b2:e7:50:db:d0:ea:e3:f3:09:
df:43:a7:8e:ef:c3:48:a2:a8:55:d2:da:06:a3:5d:3f:b7:c7:
0a:c0:b8:17:fd:7c:00:bc:7d:d9:a1:a8:0e:8d:27:21:80:f9:
07:15:9d:9b:15:52:6e:a4:e7:35:2a:7e:c2:59:76:fa:e9:e9:
86:6d:b1:6c:ac:ff:93:26:0f:9c:7c:c0:94:6e:d6:fb:79:94:
17:8e:8e:e0:54:86:de:52:2b:d0:44:f1:ef:f8:64:7a:b0:a9:
71:84:6f:d4:c8:00:94:f4:45:60:3a:af:c4:f1:bc:64:31:04:
22:17:48:63
-----BEGIN CERTIFICATE-----
MIIG8zCCBdugAwIBAgISAZ6MdXWC8i/LnO74Qvqy+JbsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNjAzMDc0OTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTJjYzc5MjQ0Y2ZjYTA4NTUwMmJkNDk5YjVjY2ZiOGU2MTY5NDZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprrqbk0Ary2XkV0FQ8SZdwr9v9zx
sK/hjDfIXSnw78RLcH9fMFQXGaFWA34Nh1xXnk+zwEAaVmZaMZoLdxFErjNWxfia
3v78TL1s61AbaCcf3BD7YY6GHUfbvDI4XVuXYl7tQcBBb+l8gAkz2XYxYKFFnIJy
QspdNLaAADbgL1yUT836Kt5+QEQEG+lVsFoJ7NaaHevqXvkzZ05kSASuS9f3VMu7
xT76CPJf473I2otZ1WdLDBETWdnEDGbX4pJOFkwkaUF7R6rAFMb35BSgDIJgHOgP
BhhOk/Y0TqgnIkXsEwDDYUTCmx7RCFKmbaTOiXIaUaZkSuBYIS9iSpr7MQIDAQAB
o4ID/zCCA/swHQYDVR0OBBYEFEEsx5JEz8oIVQK9SZtcz7jmFpRtMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUVN6SGtrVFB5Z2hWQXIxSm0xelB1T1lXbEcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICEwYIKwYBBQUHAQcBAf8EggICMIIB/jCCAfoEAgABMIIB
8gMEACXK3zAMAwQAl/ALAwQBl/AMAwQAl/APAwQAl/ATAwQAl/AZMAwDBAWX8CAD
BACX8CoDBACX8FMwDAMEA5fwWAMEAJfwWjAMAwQBl/B+AwQEl/CAAwQBl/CcMAwD
BACX8J8DBACX8KADBACX8KIDBACX8KQwDAMEAZfwpgMEAJfwqDAMAwQBl/CqAwQA
l/CsMAwDBAGX8K4DBACX8LADBACX8LIwDAMEApfwtAMEAJfwzDAMAwQBl/DOAwQB
l/DgAwQAl/DlMAwDBACX8OkDBACX8O4DBACX8PADBACX8PgDBACX8P4DBACX8Qkw
DAMEAJfxCwMEAZfxDAMEAJfxDwMEAJfxEgMEAJfxFgMEAJfxGAMEAZfxGgMEAJfx
HTAMAwQAl/EfAwQAl/EgAwQAl/EoAwQAl/EvAwQAl/FCAwQAl/FFAwQBl/FOMAwD
BACX8VkDBACX8VoDBACX8VwDBACX8V4DBACX8WgDBACX8WwwDAMEAJfxbwMEAJfx
cAMEAJfykQMEApfysAMEApfyuAMEApfy7AMEAJf0ugMEA5f1kAMEApf1tAMEAJf1
ywMEA5f2IAMEA5f2aAMEA5f2qAMEApf2tAMEBJf24AMEAJf3BAMEA5f3cAMEAJf3
gwMEApf3kAMEApf3mAMEAJf33zANBgkqhkiG9w0BAQsFAAOCAQEAYNe2bSPQnJRa
bI685TqnpKRJL6gC2KoIEPUoE0UY38pIKKgWKu22TycALTRGBuz3kx1FJoLIyNQF
TpEDv3qV/B8zeNLjNZT0h5VfEE5Pmg6gA0ds1waUgYD/1MDXNTE/dA2somlL/TDF
HT9o/z5RSILEo3+VipWZsY8wv3NKMer6a6LS8hBisudQ29Dq4/MJ30Onju/DSKKo
VdLaBqNdP7fHCsC4F/18ALx92aGoDo0nIYD5BxWdmxVSbqTnNSp+wll2+unphm2x
bKz/kyYPnHzAlG7W+3mUF46O4FSG3lIr0ETx7/hkerCpcYRv1MgAlPRFYDqvxPG8
ZDEEIhdIYw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:30 2026 by rpki-client