Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WBVnp6UFx10h-EhtXsQzBhlG6LE.roa
File: WBVnp6UFx10h-EhtXsQzBhlG6LE.roa (raw, json)
Hash identifier: dbcz2+EeJIQS1QBXU54KOOw2bOSqGF1CPYDnPmH3j28=
Subject key identifier: 58:15:67:A7:A5:05:C7:5D:21:F8:48:6D:5E:C4:33:06:19:46:E8:B1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A08BA6075D56B3320B7A8E0D35705C15FF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WBVnp6UFx10h-EhtXsQzBhlG6LE.roa
Signing time: Thu 10 Sep 2026 14:08:28 +0000
ROA not before: Thu 10 Sep 2026 14:08:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.198.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.156.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.192.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.115.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.149.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.44.0/24 maxlen: 24
151.247.78.0/24 maxlen: 24
151.247.83.0/24 maxlen: 24
151.247.88.0/24 maxlen: 24
151.247.101.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 08:15:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:a6:07:5d:56:b3:32:0b:7a:8e:0d:35:70:5c:15:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 10 14:08:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=581567a7a505c75d21f8486d5ec433061946e8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:45:16:e3:77:c7:fb:5c:ae:44:ae:78:af:9b:
eb:7c:15:55:07:a9:4b:d5:6a:40:ed:84:ed:3c:37:
82:f1:cd:60:ae:8c:b0:4c:f4:5c:76:20:6a:b6:a6:
78:e2:79:19:be:f8:ec:c9:fc:57:3c:32:21:1e:da:
78:e4:01:c9:9d:0c:fd:c0:1d:8f:7f:86:91:3e:2e:
fa:2e:e2:f4:52:ac:51:09:4a:13:00:34:79:04:a9:
2c:aa:8c:1b:6d:07:d5:2f:b7:5f:55:dc:02:51:e1:
f0:c4:34:da:9e:f0:fd:0e:49:ff:b3:e6:3f:7a:a3:
0f:01:b2:82:d8:03:cd:7d:e8:eb:c0:56:d0:44:00:
28:f5:ea:a7:b8:07:7d:99:fa:c3:36:13:f6:ef:dc:
ab:2a:3c:93:0c:ee:e9:25:ca:66:6a:1f:92:d8:c1:
38:86:2e:e1:29:dc:49:58:be:2f:a6:68:4b:0f:68:
f1:f9:7e:ae:2b:b7:dc:e8:02:5b:f7:e4:51:31:fd:
48:4a:f6:fc:40:bb:ef:77:11:71:50:c7:a3:72:96:
dd:b0:5b:c6:d1:f9:5e:72:ee:99:a2:de:e4:9d:d9:
76:5a:f4:17:20:1b:5f:c1:20:da:cf:f8:38:93:5f:
d4:d3:63:3c:f6:32:cb:5c:d0:15:ab:e5:19:3c:ec:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:15:67:A7:A5:05:C7:5D:21:F8:48:6D:5E:C4:33:06:19:46:E8:B1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/WBVnp6UFx10h-EhtXsQzBhlG6LE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
151.240.45.0/24
151.240.136.0/24
151.241.30.0/24
151.241.36.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.156.0/24
151.241.160.0/23
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.134.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.244.5.0-151.244.6.255
151.244.14.0/24
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0-151.244.193.255
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.115.0/24
151.245.142.0/24
151.245.149.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.44.0/24
151.247.78.0/24
151.247.83.0/24
151.247.88.0/24
151.247.101.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:a2:55:8a:30:11:cc:e4:fa:76:70:26:df:0f:e3:e9:ef:3d:
b2:55:9e:8c:7b:72:fc:7f:a3:64:86:88:7b:d9:80:85:72:57:
b5:8a:cd:85:71:ac:2c:32:e6:0f:b6:cb:16:3f:8f:bc:4a:be:
ee:37:33:2e:75:b2:d2:8b:27:f5:ea:80:d1:af:ce:62:08:97:
d4:c2:45:20:7a:8e:a0:7b:22:ea:fd:6c:15:a9:d6:44:5d:7c:
84:f1:7d:58:1b:37:84:fe:06:da:34:28:5d:d3:a7:96:7c:c0:
c9:91:db:41:b6:56:63:97:79:d1:24:08:66:17:96:2b:e1:97:
14:70:58:82:09:3d:34:67:9a:7e:75:d0:d7:00:b1:1e:f2:64:
b2:81:f1:98:fd:57:4b:72:8d:ba:88:0a:9e:66:5c:86:e3:e7:
bf:59:cd:c8:e5:f4:8e:dc:34:2f:4b:71:d7:50:a3:05:a8:94:
a1:58:43:33:9c:18:36:4a:12:20:27:53:5d:e7:02:63:24:13:
df:e0:a3:76:9d:85:65:e9:91:e4:d7:54:b9:cf:94:86:72:a3:
77:d8:f8:21:f6:e8:91:3d:0b:f2:66:d8:e8:9a:a4:ca:09:13:
8d:b8:f8:8a:49:5e:98:c5:e2:c5:2e:84:c1:b7:60:d9:9c:f1:
3e:ca:80:0e
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISAaCLpgddVrMyC3qODTVwXBX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTEwMTQwODI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ODE1NjdhN2E1MDVjNzVkMjFmODQ4NmQ1ZWM0MzMwNjE5NDZlOGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokUW43fH+1yuRK54r5vrfBVVB6lL
1WpA7YTtPDeC8c1groywTPRcdiBqtqZ44nkZvvjsyfxXPDIhHtp45AHJnQz9wB2P
f4aRPi76LuL0UqxRCUoTADR5BKksqowbbQfVL7dfVdwCUeHwxDTanvD9Dkn/s+Y/
eqMPAbKC2APNfejrwFbQRAAo9eqnuAd9mfrDNhP279yrKjyTDO7pJcpmah+S2ME4
hi7hKdxJWL4vpmhLD2jx+X6uK7fc6AJb9+RRMf1ISvb8QLvvdxFxUMejcpbdsFvG
0flecu6Zot7kndl2WvQXIBtfwSDaz/g4k1/U02M89jLLXNAVq+UZPOxBkQIDAQAB
o4IDczCCA28wHQYDVR0OBBYEFFgVZ6elBcddIfhIbV7EMwYZRuixMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvV0JWbnA2VUZ4MTBoLUVodFhzUXpCaGxHNkxFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhwYIKwYBBQUHAQcBAf8EggF2MIIBcjCCAW4EAgABMIIB
ZgMEACXKxgMEAJfwLQMEAJfwiAMEAJfxHgMEAJfxJAMEAJfxJwMEAJfxMgMEAJfx
QAMEAJfxQwMEAZfxRgMEAJfxSQMEAJfxTQMEAJfxXwMEAJfxcwMEAJfxnAMEAZfx
oAMEAJfxsAMEAJfxzAMEAJfyIQMEAJfyLQMEAJfySQMEAJfygAMEAJfyhgMEAJfy
ngMEAJfzAgMEAJfzaQMEAJfziTAMAwQAl/QFAwQAl/QGAwQAl/QOAwQAl/Q5AwQA
l/RvAwQBl/RyAwQAl/SDAwQAl/SPMAwDBACX9L8DBAGX9MADBACX9NQDBACX9QMD
BACX9RwDBACX9UwDBACX9U4DBACX9WgDBACX9XMDBACX9Y4DBACX9ZUDBACX9cMD
BACX9dQDBACX9eMDBACX9eYDBACX9e8DBACX9ywDBACX904DBACX91MDBACX91gD
BACX92UDBAOX93gDBACX97wDBACX990wDQYJKoZIhvcNAQELBQADggEBALiiVYow
Eczk+nZwJt8P4+nvPbJVnox7cvx/o2SGiHvZgIVyV7WKzYVxrCwy5g+2yxY/j7xK
vu43My51stKLJ/XqgNGvzmIIl9TCRSB6jqB7Iur9bBWp1kRdfITxfVgbN4T+Bto0
KF3Tp5Z8wMmR20G2VmOXedEkCGYXlivhlxRwWIIJPTRnmn510NcAsR7yZLKB8Zj9
V0tyjbqICp5mXIbj579Zzcjl9I7cNC9LcddQowWolKFYQzOcGDZKEiAnU13nAmMk
E9/go3adhWXpkeTXVLnPlIZyo3fY+CH26JE9C/Jm2OiapMoJE424+IpJXpjF4sUu
hMG3YNmc8T7KgA4=
-----END CERTIFICATE-----
Generated at Fri Sep 18 18:04:34 2026 by rpki-client