Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hX1jJGqOaAUl0vyLj5Zg-pUBA3s.roa
File: hX1jJGqOaAUl0vyLj5Zg-pUBA3s.roa (raw, json)
Hash identifier: NSBn6WnYFgovt/7VXwnc5Pj1g1ndhr0MH7yemiIQCoc=
Subject key identifier: 85:7D:63:24:6A:8E:68:05:25:D2:FC:8B:8F:96:60:FA:95:01:03:7B
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019E64A24CEE169AC555E075D2636CD3A141
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hX1jJGqOaAUl0vyLj5Zg-pUBA3s.roa
Signing time: Tue 26 May 2026 14:13:38 +0000
ROA not before: Tue 26 May 2026 14:13:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 37.202.202.0/24 maxlen: 24
151.240.2.0/24 maxlen: 24
151.241.33.0/24 maxlen: 24
151.241.43.0/24 maxlen: 24
151.241.48.0/24 maxlen: 24
151.242.26.0/24 maxlen: 24
151.243.26.0/24 maxlen: 24
151.244.42.0/24 maxlen: 24
151.244.69.0/24 maxlen: 24
151.245.69.0/24 maxlen: 24
151.245.166.0/24 maxlen: 24
151.245.177.0/24 maxlen: 24
151.246.224.0/24 maxlen: 24
151.246.230.0/24 maxlen: 24
151.246.234.0/24 maxlen: 24
151.247.35.0/24 maxlen: 24
151.247.101.0/24 maxlen: 24
151.247.108.0/24 maxlen: 24
151.247.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 15:08:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:a2:4c:ee:16:9a:c5:55:e0:75:d2:63:6c:d3:a1:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: May 26 14:13:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=857d63246a8e680525d2fc8b8f9660fa9501037b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ed:5a:80:af:0a:62:3d:2c:a4:4e:3a:e0:91:
e1:d5:be:ef:b7:e4:43:54:e0:01:93:c8:83:0b:ad:
a7:76:67:b9:ed:a0:70:8f:ff:91:ea:75:d2:d6:b2:
d9:b2:97:d6:f3:4b:fa:e8:e5:8f:d7:06:65:7f:ee:
db:8b:66:3b:44:e5:b1:6c:01:26:3c:f9:dd:f1:d5:
69:e2:29:bb:4b:79:30:0e:1a:f2:47:6c:9b:72:21:
cf:06:ae:f3:ba:fa:d5:de:7c:8b:22:aa:a3:8e:30:
5d:eb:e1:4a:3d:c2:f2:ca:5d:e8:e6:4a:97:e8:22:
f4:77:fd:a6:be:1f:e3:cd:23:be:4a:a7:10:75:e1:
6b:da:a0:4b:de:3e:44:62:c3:a5:23:7d:e6:f0:22:
df:f8:38:11:e5:b0:d2:ee:29:d2:a0:0b:da:b4:7e:
1e:3d:b6:44:d9:a6:5f:e3:a6:e6:c5:a6:3f:2b:a9:
bc:a2:35:53:3d:7a:6f:d5:84:e9:62:e4:a8:38:1b:
3c:9e:cb:70:02:b1:00:1b:67:43:aa:47:4e:68:88:
68:4c:7c:0a:00:d4:e3:a1:04:f2:d6:1e:1d:6e:89:
ed:b5:b5:24:75:3b:d2:40:3b:ca:0f:39:40:3f:df:
ea:40:81:58:a0:81:25:50:b2:ae:a3:b0:b7:20:d1:
86:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7D:63:24:6A:8E:68:05:25:D2:FC:8B:8F:96:60:FA:95:01:03:7B
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/hX1jJGqOaAUl0vyLj5Zg-pUBA3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.202.0/24
151.240.2.0/24
151.241.33.0/24
151.241.43.0/24
151.241.48.0/24
151.242.26.0/24
151.243.26.0/24
151.244.42.0/24
151.244.69.0/24
151.245.69.0/24
151.245.166.0/24
151.245.177.0/24
151.246.224.0/24
151.246.230.0/24
151.246.234.0/24
151.247.35.0/24
151.247.101.0/24
151.247.108.0/24
151.247.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:2b:21:fe:44:bc:35:ea:10:06:62:a2:89:cf:39:c8:79:24:
c0:e6:ac:73:e5:70:56:8b:04:1d:56:fb:f6:77:61:01:b0:9b:
0c:09:9e:0e:c4:0d:e2:64:58:6b:7f:76:4a:82:99:1b:91:2f:
b1:38:36:01:ff:f7:ba:f6:e5:a8:17:95:b3:f1:04:7e:e0:46:
09:cc:6b:34:06:9a:c2:a8:f3:20:24:08:79:48:fd:d7:0a:d9:
dd:6c:58:ad:2c:99:d7:e0:67:29:87:d2:6a:bc:da:88:2a:3e:
1b:60:1e:4c:69:7a:c5:d0:0c:5d:05:52:3c:a3:6c:b5:fb:80:
a8:d4:a4:1c:6d:69:4b:a2:2b:3c:16:65:04:bf:24:ad:5a:55:
30:15:91:ed:1a:2b:16:5b:28:55:fb:71:e1:1c:d8:5a:1e:27:
4a:c2:a7:50:7c:28:7a:bf:c3:2b:2d:5a:b2:5b:15:3d:e7:76:
50:3c:c5:40:3e:18:ae:1b:15:8d:08:e7:50:df:3a:58:8b:df:
3c:d6:49:af:1f:90:e0:20:04:c9:b3:ce:e4:51:ac:29:8e:62:
a6:92:ff:8d:f1:b9:76:4d:9e:fd:2f:5b:46:3f:7d:4a:e5:79:
7b:e2:05:b5:68:d8:40:29:71:77:81:17:3f:8b:0f:f4:bc:48:
5a:de:7f:1f
-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgISAZ5kokzuFprFVeB10mNs06FBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwNTI2MTQxMzM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTdkNjMyNDZhOGU2ODA1MjVkMmZjOGI4Zjk2NjBmYTk1MDEwMzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0O1agK8KYj0spE464JHh1b7vt+RD
VOABk8iDC62ndme57aBwj/+R6nXS1rLZspfW80v66OWP1wZlf+7bi2Y7ROWxbAEm
PPnd8dVp4im7S3kwDhryR2ybciHPBq7zuvrV3nyLIqqjjjBd6+FKPcLyyl3o5kqX
6CL0d/2mvh/jzSO+SqcQdeFr2qBL3j5EYsOlI33m8CLf+DgR5bDS7inSoAvatH4e
PbZE2aZf46bmxaY/K6m8ojVTPXpv1YTpYuSoOBs8nstwArEAG2dDqkdOaIhoTHwK
ANTjoQTy1h4dbonttbUkdTvSQDvKDzlAP9/qQIFYoIElULKuo7C3INGGMQIDAQAB
o4ICdjCCAnIwHQYDVR0OBBYEFIV9YyRqjmgFJdL8i4+WYPqVAQN7MB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvaFgxakpHcU9hQVVsMHZ5TGo1WmctcFVCQTNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGLBggrBgEFBQcBBwEB/wR8MHoweAQCAAEwcgMEACXKygME
AJfwAgMEAJfxIQMEAJfxKwMEAJfxMAMEAJfyGgMEAJfzGgMEAJf0KgMEAJf0RQME
AJf1RQMEAJf1pgMEAJf1sQMEAJf24AMEAJf25gMEAJf26gMEAJf3IwMEAJf3ZQME
AJf3bAMEAJf39jANBgkqhkiG9w0BAQsFAAOCAQEAeish/kS8NeoQBmKiic85yHkk
wOasc+VwVosEHVb79ndhAbCbDAmeDsQN4mRYa392SoKZG5EvsTg2Af/3uvblqBeV
s/EEfuBGCcxrNAaawqjzICQIeUj91wrZ3WxYrSyZ1+BnKYfSarzaiCo+G2AeTGl6
xdAMXQVSPKNstfuAqNSkHG1pS6IrPBZlBL8krVpVMBWR7RorFlsoVftx4RzYWh4n
SsKnUHwoer/DKy1aslsVPed2UDzFQD4YrhsVjQjnUN86WIvfPNZJrx+Q4CAEybPO
5FGsKY5ippL/jfG5dk2e/S9bRj99SuV5e+IFtWjYQClxd4EXP4sP9LxIWt5/Hw==
-----END CERTIFICATE-----
Generated at Wed Jun 3 23:21:23 2026 by rpki-client