Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fllTrXCcvH6T3lg3ihBqVzAlrxw.roa
File: fllTrXCcvH6T3lg3ihBqVzAlrxw.roa (raw, json)
Hash identifier: t7MTWDAHK7Rm++xPohyQkuwQM1ou/J3edZtFbzQcpr8=
Subject key identifier: 7E:59:53:AD:70:9C:BC:7E:93:DE:58:37:8A:10:6A:57:30:25:AF:1C
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01990FAD084E16314A67B9A1ECA6856272CF
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fllTrXCcvH6T3lg3ihBqVzAlrxw.roa
Signing time: Wed 03 Sep 2025 13:03:42 +0000
ROA not before: Wed 03 Sep 2025 13:03:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 37.202.193.0/24 maxlen: 24
37.202.203.0/24 maxlen: 24
37.202.212.0/23 maxlen: 24
151.240.2.0/24 maxlen: 24
151.240.16.0/24 maxlen: 24
151.240.27.0/24 maxlen: 24
151.240.89.0/24 maxlen: 24
151.240.112.0/23 maxlen: 24
151.240.114.0/23 maxlen: 24
151.240.116.0/23 maxlen: 24
151.240.120.0/23 maxlen: 24
151.240.124.0/23 maxlen: 24
151.240.152.0/24 maxlen: 24
151.240.158.0/24 maxlen: 24
151.240.161.0/24 maxlen: 24
151.240.163.0/24 maxlen: 24
151.240.173.0/24 maxlen: 24
151.240.179.0/24 maxlen: 24
151.240.228.0/24 maxlen: 24
151.240.231.0/24 maxlen: 24
151.240.232.0/24 maxlen: 24
151.240.239.0/24 maxlen: 24
151.240.241.0/24 maxlen: 24
151.240.242.0/24 maxlen: 24
151.240.247.0/24 maxlen: 24
151.240.249.0/24 maxlen: 24
151.240.250.0/24 maxlen: 24
151.241.0.0/17 maxlen: 24
151.241.4.0/24 maxlen: 24
151.241.7.0/24 maxlen: 24
151.241.8.0/24 maxlen: 24
151.241.9.0/24 maxlen: 24
151.241.13.0/24 maxlen: 24
151.241.15.0/24 maxlen: 24
151.241.20.0/24 maxlen: 24
151.241.25.0/24 maxlen: 24
151.241.27.0/24 maxlen: 24
151.241.29.0/24 maxlen: 24
151.241.32.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.35.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.37.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.41.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/18 maxlen: 24
151.241.65.0/24 maxlen: 24
151.241.74.0/23 maxlen: 24
151.241.76.0/24 maxlen: 24
151.241.91.0/24 maxlen: 24
151.241.96.0/20 maxlen: 24
151.241.117.0/24 maxlen: 24
151.241.128.0/17 maxlen: 24
151.241.136.0/21 maxlen: 24
151.241.152.0/21 maxlen: 24
151.241.208.0/21 maxlen: 24
151.241.216.0/21 maxlen: 24
151.241.224.0/19 maxlen: 24
151.242.13.0/24 maxlen: 24
151.242.19.0/24 maxlen: 24
151.242.30.0/24 maxlen: 24
151.242.52.0/22 maxlen: 24
151.242.79.0/24 maxlen: 24
151.242.80.0/24 maxlen: 24
151.242.82.0/24 maxlen: 24
151.242.119.0/24 maxlen: 24
151.242.126.0/24 maxlen: 24
151.242.136.0/23 maxlen: 24
151.242.144.0/23 maxlen: 24
151.242.168.0/23 maxlen: 24
151.242.192.0/20 maxlen: 24
151.242.200.0/22 maxlen: 22
151.242.204.0/22 maxlen: 24
151.242.206.0/24 maxlen: 24
151.242.224.0/22 maxlen: 24
151.242.252.0/23 maxlen: 24
151.242.252.0/24 maxlen: 24
151.243.16.0/20 maxlen: 20
151.243.18.0/23 maxlen: 24
151.243.19.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.243.28.0/22 maxlen: 24
151.243.41.0/24 maxlen: 24
151.243.44.0/22 maxlen: 24
151.243.100.0/22 maxlen: 24
151.243.108.0/23 maxlen: 24
151.243.123.0/24 maxlen: 24
151.243.136.0/22 maxlen: 22
151.243.156.0/24 maxlen: 24
151.243.157.0/24 maxlen: 24
151.243.158.0/24 maxlen: 24
151.243.171.0/24 maxlen: 24
151.243.173.0/24 maxlen: 24
151.243.175.0/24 maxlen: 24
151.243.200.0/24 maxlen: 24
151.243.204.0/22 maxlen: 24
151.243.206.0/23 maxlen: 24
151.243.212.0/23 maxlen: 24
151.243.214.0/24 maxlen: 24
151.243.220.0/24 maxlen: 24
151.243.223.0/24 maxlen: 24
151.243.226.0/24 maxlen: 24
151.243.230.0/23 maxlen: 24
151.243.237.0/24 maxlen: 24
151.243.239.0/24 maxlen: 24
151.243.243.0/24 maxlen: 24
151.243.245.0/24 maxlen: 24
151.243.246.0/24 maxlen: 24
151.243.247.0/24 maxlen: 24
151.243.248.0/22 maxlen: 24
151.243.252.0/23 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.44.0/24 maxlen: 24
151.244.46.0/24 maxlen: 24
151.244.50.0/24 maxlen: 24
151.244.65.0/24 maxlen: 24
151.244.70.0/24 maxlen: 24
151.244.73.0/24 maxlen: 24
151.244.85.0/24 maxlen: 24
151.244.86.0/24 maxlen: 24
151.244.88.0/24 maxlen: 24
151.244.93.0/24 maxlen: 24
151.244.103.0/24 maxlen: 24
151.244.109.0/24 maxlen: 24
151.244.110.0/24 maxlen: 24
151.244.113.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.119.0/24 maxlen: 24
151.244.126.0/24 maxlen: 24
151.244.128.0/18 maxlen: 24
151.244.134.0/24 maxlen: 24
151.244.164.0/22 maxlen: 22
151.244.168.0/22 maxlen: 22
151.244.196.0/24 maxlen: 24
151.244.213.0/24 maxlen: 24
151.244.214.0/24 maxlen: 24
151.244.216.0/22 maxlen: 24
151.244.220.0/24 maxlen: 24
151.244.232.0/22 maxlen: 24
151.244.236.0/23 maxlen: 24
151.244.238.0/23 maxlen: 24
151.244.242.0/23 maxlen: 24
151.244.244.0/23 maxlen: 24
151.244.244.0/24 maxlen: 24
151.244.246.0/23 maxlen: 24
151.244.246.0/24 maxlen: 24
151.244.250.0/23 maxlen: 24
151.244.252.0/22 maxlen: 24
151.245.0.0/17 maxlen: 24
151.245.0.0/24 maxlen: 24
151.245.1.0/24 maxlen: 24
151.245.24.0/23 maxlen: 24
151.245.28.0/23 maxlen: 24
151.245.32.0/24 maxlen: 24
151.245.60.0/22 maxlen: 24
151.245.72.0/24 maxlen: 24
151.245.88.0/22 maxlen: 24
151.245.92.0/24 maxlen: 24
151.245.116.0/22 maxlen: 24
151.245.128.0/17 maxlen: 24
151.245.128.0/24 maxlen: 24
151.245.133.0/24 maxlen: 24
151.245.136.0/21 maxlen: 24
151.245.144.0/21 maxlen: 24
151.245.160.0/21 maxlen: 24
151.245.176.0/21 maxlen: 24
151.245.216.0/21 maxlen: 24
151.245.224.0/21 maxlen: 24
151.245.232.0/21 maxlen: 24
151.245.248.0/21 maxlen: 24
151.246.0.0/17 maxlen: 24
151.246.9.0/24 maxlen: 24
151.246.127.0/24 maxlen: 24
151.246.128.0/17 maxlen: 24
151.246.191.0/24 maxlen: 24
151.247.0.0/17 maxlen: 24
151.247.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Sep 2025 13:03:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0f:ad:08:4e:16:31:4a:67:b9:a1:ec:a6:85:62:72:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 3 13:03:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e5953ad709cbc7e93de58378a106a573025af1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:cd:91:06:74:66:66:9c:87:fc:81:b1:06:
18:92:b7:57:4b:9e:6d:7e:2d:2b:b2:ad:8f:d2:1b:
ad:f7:0b:07:c2:83:d7:06:89:b0:a7:75:aa:a0:eb:
30:13:3a:73:d4:ef:f0:cc:4b:e0:60:e3:0b:7f:20:
4b:be:09:21:20:a9:c1:6c:84:dc:bb:7f:c9:9b:6e:
59:c0:13:0c:e6:06:2b:a9:3c:62:a8:21:2c:e6:9f:
e1:5f:17:7e:d4:76:dc:93:47:24:a9:5d:29:56:82:
7f:46:a4:4b:4b:d0:e0:6f:1e:b9:c3:cf:c0:e3:69:
79:36:45:52:e3:51:7d:ab:3c:21:75:30:ea:c0:47:
43:73:19:33:4d:c3:a4:4d:1b:73:16:ee:05:d2:0a:
eb:14:62:ea:1e:84:3a:63:29:81:6f:f3:a0:77:bb:
66:02:9a:42:4a:78:dc:bb:59:f0:34:df:88:be:69:
ae:7e:4f:a4:e3:4b:5d:2d:98:49:26:1f:64:e4:41:
36:46:e3:fb:aa:31:d1:12:3d:41:43:88:4a:35:41:
75:c0:f4:a1:b8:71:9d:74:e9:dc:00:e9:0d:08:45:
ea:9b:2b:b6:c7:42:44:9f:61:93:5e:ea:63:e0:c4:
95:95:95:8c:d9:87:d6:57:76:49:82:7b:03:76:00:
16:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:59:53:AD:70:9C:BC:7E:93:DE:58:37:8A:10:6A:57:30:25:AF:1C
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/fllTrXCcvH6T3lg3ihBqVzAlrxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.193.0/24
37.202.203.0/24
37.202.212.0/23
151.240.2.0/24
151.240.16.0/24
151.240.27.0/24
151.240.89.0/24
151.240.112.0-151.240.117.255
151.240.120.0/23
151.240.124.0/23
151.240.152.0/24
151.240.158.0/24
151.240.161.0/24
151.240.163.0/24
151.240.173.0/24
151.240.179.0/24
151.240.228.0/24
151.240.231.0-151.240.232.255
151.240.239.0/24
151.240.241.0-151.240.242.255
151.240.247.0/24
151.240.249.0-151.240.250.255
151.241.0.0/16
151.242.13.0/24
151.242.19.0/24
151.242.30.0/24
151.242.52.0/22
151.242.79.0-151.242.80.255
151.242.82.0/24
151.242.119.0/24
151.242.126.0/24
151.242.136.0/23
151.242.144.0/23
151.242.168.0/23
151.242.192.0/20
151.242.224.0/22
151.242.252.0/23
151.243.16.0/20
151.243.41.0/24
151.243.44.0/22
151.243.100.0/22
151.243.108.0/23
151.243.123.0/24
151.243.136.0/22
151.243.156.0-151.243.158.255
151.243.171.0/24
151.243.173.0/24
151.243.175.0/24
151.243.200.0/24
151.243.204.0/22
151.243.212.0-151.243.214.255
151.243.220.0/24
151.243.223.0/24
151.243.226.0/24
151.243.230.0/23
151.243.237.0/24
151.243.239.0/24
151.243.243.0/24
151.243.245.0-151.243.253.255
151.244.14.0/24
151.244.42.0/24
151.244.44.0/24
151.244.46.0/24
151.244.50.0/24
151.244.65.0/24
151.244.70.0/24
151.244.73.0/24
151.244.85.0-151.244.86.255
151.244.88.0/24
151.244.93.0/24
151.244.103.0/24
151.244.109.0-151.244.110.255
151.244.113.0-151.244.114.255
151.244.119.0/24
151.244.126.0/24
151.244.128.0/18
151.244.196.0/24
151.244.213.0-151.244.214.255
151.244.216.0-151.244.220.255
151.244.232.0/21
151.244.242.0-151.244.247.255
151.244.250.0-151.247.255.255
Signature Algorithm: sha256WithRSAEncryption
7b:6b:f6:72:ff:45:b9:15:29:cf:f1:27:35:2e:af:2b:ff:53:
c0:44:4c:25:0f:66:24:ae:8f:1e:f7:51:32:4c:0a:6a:ef:42:
6a:0a:af:21:c2:c9:1a:e1:5d:1f:9d:14:2f:3d:fe:b7:a6:6e:
a5:aa:97:a5:be:49:cf:b0:02:ba:ee:8f:ef:2f:93:b9:6b:a7:
3c:8a:7e:3c:df:3f:03:35:03:f9:56:f5:2a:62:99:e9:ad:d3:
7d:70:4b:2e:89:d1:42:83:d9:68:63:77:5d:ea:99:74:fa:78:
6f:aa:7d:ee:4f:c3:7a:1f:41:9f:ca:cc:b0:c7:7c:f0:ab:fe:
84:89:00:cf:9b:15:d8:90:67:0c:d0:08:98:75:04:4e:c5:9f:
2b:d1:af:b7:96:b6:56:fd:60:02:27:11:76:d1:2a:7d:7b:2f:
42:1d:c9:9e:28:02:98:30:2f:08:23:95:3f:93:a6:77:56:f3:
c1:c6:de:36:e8:3c:05:19:ba:23:1f:b0:25:f9:d0:6c:82:d7:
61:cb:e5:8e:5b:9a:55:0d:8c:6c:8c:2a:a9:46:f2:e9:d1:db:
35:ee:d9:a4:d0:94:68:c7:1b:ee:86:88:f6:2f:9c:d3:36:e4:
f0:cd:06:85:3b:9e:74:c3:21:e0:c1:9c:54:a3:cf:66:5e:ad:
f3:58:5f:3e
-----BEGIN CERTIFICATE-----
MIIHYzCCBkugAwIBAgISAZkPrQhOFjFKZ7mh7KaFYnLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjUwOTAzMTMwMzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTU5NTNhZDcwOWNiYzdlOTNkZTU4Mzc4YTEwNmE1NzMwMjVhZjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4bNkQZ0Zmach/yBsQYYkrdXS55t
fi0rsq2P0hut9wsHwoPXBomwp3WqoOswEzpz1O/wzEvgYOMLfyBLvgkhIKnBbITc
u3/Jm25ZwBMM5gYrqTxiqCEs5p/hXxd+1Hbck0ckqV0pVoJ/RqRLS9Dgbx65w8/A
42l5NkVS41F9qzwhdTDqwEdDcxkzTcOkTRtzFu4F0grrFGLqHoQ6YymBb/Ogd7tm
AppCSnjcu1nwNN+Ivmmufk+k40tdLZhJJh9k5EE2RuP7qjHREj1BQ4hKNUF1wPSh
uHGddOncAOkNCEXqmyu2x0JEn2GTXupj4MSVlZWM2YfWV3ZJgnsDdgAWvwIDAQAB
o4IEbzCCBGswHQYDVR0OBBYEFH5ZU61wnLx+k95YN4oQalcwJa8cMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvZmxsVHJYQ2N2SDZUM2xnM2loQnFWekFscnh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICgwYIKwYBBQUHAQcBAf8EggJyMIICbjCCAmoEAgABMIIC
YgMEACXKwQMEACXKywMEASXK1AMEAJfwAgMEAJfwEAMEAJfwGwMEAJfwWTAMAwQE
l/BwAwQBl/B0AwQBl/B4AwQBl/B8AwQAl/CYAwQAl/CeAwQAl/ChAwQAl/CjAwQA
l/CtAwQAl/CzAwQAl/DkMAwDBACX8OcDBACX8OgDBACX8O8wDAMEAJfw8QMEAJfw
8gMEAJfw9zAMAwQAl/D5AwQAl/D6AwMAl/EDBACX8g0DBACX8hMDBACX8h4DBAKX
8jQwDAMEAJfyTwMEAJfyUAMEAJfyUgMEAJfydwMEAJfyfgMEAZfyiAMEAZfykAME
AZfyqAMEBJfywAMEApfy4AMEAZfy/AMEBJfzEAMEAJfzKQMEApfzLAMEApfzZAME
AZfzbAMEAJfzewMEApfziDAMAwQCl/OcAwQAl/OeAwQAl/OrAwQAl/OtAwQAl/Ov
AwQAl/PIAwQCl/PMMAwDBAKX89QDBACX89YDBACX89wDBACX898DBACX8+IDBAGX
8+YDBACX8+0DBACX8+8DBACX8/MwDAMEAJfz9QMEAZfz/AMEAJf0DgMEAJf0KgME
AJf0LAMEAJf0LgMEAJf0MgMEAJf0QQMEAJf0RgMEAJf0STAMAwQAl/RVAwQAl/RW
AwQAl/RYAwQAl/RdAwQAl/RnMAwDBACX9G0DBACX9G4wDAMEAJf0cQMEAJf0cgME
AJf0dwMEAJf0fgMEBpf0gAMEAJf0xDAMAwQAl/TVAwQAl/TWMAwDBAOX9NgDBACX
9NwDBAOX9OgwDAMEAZf08gMEA5f08DALAwQBl/T6AwMDl/AwDQYJKoZIhvcNAQEL
BQADggEBAHtr9nL/RbkVKc/xJzUuryv/U8BETCUPZiSujx73UTJMCmrvQmoKryHC
yRrhXR+dFC89/rembqWql6W+Sc+wArruj+8vk7lrpzyKfjzfPwM1A/lW9Spimemt
031wSy6J0UKD2Whjd13qmXT6eG+qfe5Pw3ofQZ/KzLDHfPCr/oSJAM+bFdiQZwzQ
CJh1BE7FnyvRr7eWtlb9YAInEXbRKn17L0IdyZ4oApgwLwgjlT+TpndW88HG3jbo
PAUZuiMfsCX50GyC12HL5Y5bmlUNjGyMKqlG8unR2zXu2aTQlGjHG+6GiPYvnNM2
5PDNBoU7nnTDIeDBnFSjz2ZerfNYXz4=
-----END CERTIFICATE-----
Generated at Wed Sep 3 18:40:22 2025 by rpki-client