Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T5yvXRnyLC6tRGY15DYZWxuVLes.roa
File: T5yvXRnyLC6tRGY15DYZWxuVLes.roa (raw, json)
Hash identifier: AG1bceJZUevsYdEYOaYHDweUWDXWbuKxjbD5cbLpNu4=
Subject key identifier: 4F:9C:AF:5D:19:F2:2C:2E:AD:44:66:35:E4:36:19:5B:1B:95:2D:EB
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 0198C74ECB570FA56A47C8A9B054647EBA28
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T5yvXRnyLC6tRGY15DYZWxuVLes.roa
Signing time: Wed 20 Aug 2025 11:48:06 +0000
ROA not before: Wed 20 Aug 2025 11:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 37.202.223.0/24 maxlen: 24
151.240.4.0/24 maxlen: 24
151.240.5.0/24 maxlen: 24
151.240.6.0/24 maxlen: 24
151.240.7.0/24 maxlen: 24
151.240.11.0/24 maxlen: 24
151.240.12.0/24 maxlen: 24
151.240.13.0/24 maxlen: 24
151.240.14.0/24 maxlen: 24
151.240.15.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.17.0/24 maxlen: 24
151.240.18.0/24 maxlen: 24
151.240.19.0/24 maxlen: 24
151.240.20.0/24 maxlen: 24
151.240.21.0/24 maxlen: 24
151.240.22.0/24 maxlen: 24
151.240.23.0/24 maxlen: 24
151.240.24.0/24 maxlen: 24
151.240.25.0/24 maxlen: 24
151.240.26.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.30.0/24 maxlen: 24
151.240.31.0/24 maxlen: 24
151.240.32.0/24 maxlen: 24
151.240.33.0/24 maxlen: 24
151.240.34.0/24 maxlen: 24
151.240.35.0/24 maxlen: 24
151.240.36.0/24 maxlen: 24
151.240.37.0/24 maxlen: 24
151.240.38.0/24 maxlen: 24
151.240.39.0/24 maxlen: 24
151.240.40.0/24 maxlen: 24
151.240.41.0/24 maxlen: 24
151.240.42.0/24 maxlen: 24
151.240.60.0/24 maxlen: 24
151.240.61.0/24 maxlen: 24
151.240.68.0/24 maxlen: 24
151.240.69.0/24 maxlen: 24
151.240.70.0/24 maxlen: 24
151.240.71.0/24 maxlen: 24
151.240.72.0/24 maxlen: 24
151.240.73.0/24 maxlen: 24
151.240.74.0/24 maxlen: 24
151.240.76.0/24 maxlen: 24
151.240.78.0/24 maxlen: 24
151.240.79.0/24 maxlen: 24
151.240.80.0/24 maxlen: 24
151.240.81.0/24 maxlen: 24
151.240.83.0/24 maxlen: 24
151.240.84.0/24 maxlen: 24
151.240.85.0/24 maxlen: 24
151.240.86.0/24 maxlen: 24
151.240.87.0/24 maxlen: 24
151.240.88.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.90.0/24 maxlen: 24
151.240.126.0/24 maxlen: 24
151.240.127.0/24 maxlen: 24
151.240.128.0/24 maxlen: 24
151.240.129.0/24 maxlen: 24
151.240.130.0/24 maxlen: 24
151.240.131.0/24 maxlen: 24
151.240.132.0/24 maxlen: 24
151.240.133.0/24 maxlen: 24
151.240.134.0/24 maxlen: 24
151.240.135.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.240.137.0/24 maxlen: 24
151.240.138.0/24 maxlen: 24
151.240.139.0/24 maxlen: 24
151.240.140.0/24 maxlen: 24
151.240.141.0/24 maxlen: 24
151.240.142.0/24 maxlen: 24
151.240.143.0/24 maxlen: 24
151.240.144.0/24 maxlen: 24
151.240.145.0/24 maxlen: 24
151.240.146.0/24 maxlen: 24
151.240.147.0/24 maxlen: 24
151.240.148.0/24 maxlen: 24
151.240.149.0/24 maxlen: 24
151.240.150.0/24 maxlen: 24
151.240.151.0/24 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.153.0/24 maxlen: 24
151.240.154.0/24 maxlen: 24
151.240.156.0/24 maxlen: 24
151.240.157.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.159.0/24 maxlen: 24
151.240.160.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.162.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.164.0/24 maxlen: 24
151.240.165.0/24 maxlen: 24
151.240.166.0/24 maxlen: 24
151.240.167.0/24 maxlen: 24
151.240.168.0/24 maxlen: 24
151.240.169.0/24 maxlen: 24
151.240.170.0/24 maxlen: 24
151.240.171.0/24 maxlen: 24
151.240.172.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.174.0/24 maxlen: 24
151.240.175.0/24 maxlen: 24
151.240.176.0/24 maxlen: 24
151.240.177.0/24 maxlen: 24
151.240.178.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.180.0/24 maxlen: 24
151.240.181.0/24 maxlen: 24
151.240.182.0/24 maxlen: 24
151.240.183.0/24 maxlen: 24
151.240.184.0/24 maxlen: 24
151.240.185.0/24 maxlen: 24
151.240.186.0/24 maxlen: 24
151.240.187.0/24 maxlen: 24
151.240.188.0/24 maxlen: 24
151.240.189.0/24 maxlen: 24
151.240.190.0/24 maxlen: 24
151.240.191.0/24 maxlen: 24
151.240.192.0/24 maxlen: 24
151.240.193.0/24 maxlen: 24
151.240.194.0/24 maxlen: 24
151.240.195.0/24 maxlen: 24
151.240.196.0/24 maxlen: 24
151.240.197.0/24 maxlen: 24
151.240.198.0/24 maxlen: 24
151.240.199.0/24 maxlen: 24
151.240.200.0/24 maxlen: 24
151.240.201.0/24 maxlen: 24
151.240.202.0/24 maxlen: 24
151.240.203.0/24 maxlen: 24
151.240.204.0/24 maxlen: 24
151.240.206.0/24 maxlen: 24
151.240.207.0/24 maxlen: 24
151.240.208.0/24 maxlen: 24
151.240.209.0/24 maxlen: 24
151.240.210.0/24 maxlen: 24
151.240.211.0/24 maxlen: 24
151.240.212.0/24 maxlen: 24
151.240.213.0/24 maxlen: 24
151.240.214.0/24 maxlen: 24
151.240.215.0/24 maxlen: 24
151.240.216.0/24 maxlen: 24
151.240.217.0/24 maxlen: 24
151.240.218.0/24 maxlen: 24
151.240.219.0/24 maxlen: 24
151.240.220.0/24 maxlen: 24
151.240.221.0/24 maxlen: 24
151.240.222.0/24 maxlen: 24
151.240.223.0/24 maxlen: 24
151.240.224.0/24 maxlen: 24
151.240.225.0/24 maxlen: 24
151.240.229.0/24 maxlen: 24
151.240.233.0/24 maxlen: 24
151.240.234.0/24 maxlen: 24
151.240.235.0/24 maxlen: 24
151.240.236.0/24 maxlen: 24
151.240.237.0/24 maxlen: 24
151.240.238.0/24 maxlen: 24
151.240.240.0/24 maxlen: 24
151.240.248.0/24 maxlen: 24
151.240.254.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.145.0/24 maxlen: 24
151.243.45.0/24 maxlen: 24
151.243.88.0/24 maxlen: 24
151.243.89.0/24 maxlen: 24
151.243.146.0/24 maxlen: 24
151.244.4.0/24 maxlen: 24
151.244.134.0/24 maxlen: 24
151.244.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:4e:cb:57:0f:a5:6a:47:c8:a9:b0:54:64:7e:ba:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Aug 20 11:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f9caf5d19f22c2ead446635e436195b1b952deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0c:0f:6c:5c:98:c2:8e:c4:10:13:9c:65:b9:
12:f3:73:76:e5:17:65:68:cb:ba:a5:b2:f0:92:f6:
b7:be:d7:07:7e:04:0f:75:42:a9:95:c6:f7:b5:cc:
d3:87:2d:d3:fc:0e:ee:0c:91:e6:93:6b:56:a7:23:
08:60:ad:17:6f:73:19:87:ae:43:37:a5:2e:b6:89:
e3:34:57:73:70:36:d7:38:7d:57:26:cf:1e:c3:a6:
d5:29:1f:74:25:41:18:e9:32:9a:ac:a9:3e:44:d4:
44:18:80:7c:f6:fc:20:bf:66:98:7a:da:f8:15:d9:
72:43:6d:7d:82:3d:fe:c7:97:3e:54:65:1e:f5:cc:
f7:a8:3d:e7:fa:4e:87:c4:63:d1:13:95:2c:b5:72:
6e:d1:be:b9:dd:03:4a:83:63:f7:e5:28:15:62:7d:
cd:d1:19:90:e6:c6:c1:f6:eb:ec:93:c5:8e:62:ac:
3b:16:f8:4f:1e:34:2d:f0:a8:81:0b:14:a7:0e:02:
16:a3:5a:4d:05:e7:11:d9:a5:15:39:74:8d:bd:4f:
29:14:3b:77:35:a8:9c:ac:b5:dc:4d:da:53:ec:12:
a2:5c:45:ae:10:7f:4a:b1:34:e5:dd:a9:44:a9:8b:
fb:8f:90:a0:df:70:c0:f5:de:c8:b9:37:a3:f1:9c:
3f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9C:AF:5D:19:F2:2C:2E:AD:44:66:35:E4:36:19:5B:1B:95:2D:EB
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/T5yvXRnyLC6tRGY15DYZWxuVLes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.223.0/24
151.240.4.0/22
151.240.11.0-151.240.27.255
151.240.30.0-151.240.42.255
151.240.60.0/23
151.240.68.0-151.240.74.255
151.240.76.0/24
151.240.78.0-151.240.81.255
151.240.83.0-151.240.90.255
151.240.126.0-151.240.154.255
151.240.156.0-151.240.204.255
151.240.206.0-151.240.225.255
151.240.229.0/24
151.240.233.0-151.240.238.255
151.240.240.0/24
151.240.248.0/24
151.240.254.0/24
151.242.119.0/24
151.242.145.0/24
151.243.45.0/24
151.243.88.0/23
151.243.146.0/24
151.244.4.0/24
151.244.134.0/24
151.244.187.0/24
Signature Algorithm: sha256WithRSAEncryption
69:33:27:68:ef:79:b4:af:73:d2:6c:d0:27:a3:8a:e0:9b:2d:
7c:de:ea:21:38:a5:04:12:2f:97:10:68:fa:82:82:4c:40:5f:
67:e3:f0:1a:ff:3c:ae:4c:70:22:3f:c3:37:66:ff:8c:59:40:
32:f8:31:4a:dd:5e:59:6b:a3:5d:da:5d:45:08:5c:d1:68:58:
bc:0a:6d:ea:d0:b2:0b:90:f7:1f:87:ab:77:06:53:00:c9:b5:
82:08:22:cd:e6:df:33:fa:7e:d2:c0:c6:02:c4:14:70:16:99:
17:b7:ac:01:b9:f2:89:e1:d1:6f:cd:73:e2:9e:ec:d6:8b:1f:
de:2d:d1:c6:51:35:b1:9d:46:0b:42:59:b5:7f:d9:36:01:04:
ad:40:9e:c5:0c:91:ec:9b:07:b8:ab:1b:7d:f1:3e:4c:fd:4d:
0c:3e:f2:82:d2:74:94:51:f1:4d:aa:2f:f5:6b:0b:c3:ef:6b:
0c:de:59:57:be:29:46:64:b0:3b:b9:38:04:eb:39:79:9e:89:
31:39:5c:8b:9f:bb:07:bd:76:ac:1a:99:a4:e2:ce:52:21:06:
2a:58:c5:b9:2d:a4:51:ed:57:64:f7:8c:ff:f7:d2:7a:08:a6:
db:10:19:b4:9f:2e:a0:62:4d:f0:d9:00:45:6f:81:d0:47:37:
c4:7a:dc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 11:09:08 2025 by rpki-client