Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t0spMylG9OK-oRZiA64UogNDKw0.roa
File: t0spMylG9OK-oRZiA64UogNDKw0.roa (raw, json)
Hash identifier: pHYAiobdy9vXY66bFY8z7lmtryjLJPbZVWgOwfDA5nY=
Subject key identifier: B7:4B:29:33:29:46:F4:E2:BE:A1:16:62:03:AE:14:A2:03:43:2B:0D
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A18CAB4070D3B5B4ED957BA0881B7704F3
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t0spMylG9OK-oRZiA64UogNDKw0.roa
Signing time: Fri 30 Oct 2026 11:56:35 +0000
ROA not before: Fri 30 Oct 2026 11:56:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.198.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.240.136.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.36.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.156.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.134.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.14.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.192.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.115.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.149.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.44.0/24 maxlen: 24
151.247.78.0/24 maxlen: 24
151.247.83.0/24 maxlen: 24
151.247.88.0/24 maxlen: 24
151.247.101.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:ab:40:70:d3:b5:b4:ed:95:7b:a0:88:1b:77:04:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Oct 30 11:56:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b74b29332946f4e2bea1166203ae14a203432b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6d:e6:56:16:89:3e:29:65:f8:39:1d:ac:60:
e2:77:22:6a:84:56:79:30:d0:64:27:b1:5b:a5:29:
3b:f7:69:cf:ed:b8:2c:9f:36:60:8a:43:bc:65:48:
49:19:d8:ca:32:23:cb:99:96:ef:ff:95:17:f5:19:
d8:f8:a0:3f:bc:bd:1e:ff:45:5a:76:ef:03:a6:ba:
f3:3a:a5:f2:23:63:46:6d:ae:0c:9b:99:dc:91:c3:
76:f8:42:0a:7c:56:c5:48:11:d0:4b:4d:ad:e7:4d:
37:33:06:0c:fb:19:dd:b1:d4:de:ee:b9:bf:7a:e2:
62:18:90:ff:b6:3e:08:b1:c9:63:4d:23:3a:1c:6d:
4e:42:06:fc:e4:9b:1f:0e:5b:4f:12:3c:21:75:66:
af:14:70:88:91:f4:3d:33:7c:20:ae:6b:7b:c6:f9:
40:a4:40:57:4d:1c:83:04:fd:8f:9a:21:d3:f4:de:
fb:a8:95:40:ab:75:04:b8:f3:79:37:e2:d9:b1:39:
41:f9:8e:16:d6:6c:d2:3c:68:2e:68:08:18:a1:bc:
88:fc:e2:37:26:74:27:69:2f:52:5f:43:32:ed:ef:
a7:d8:5e:c1:3c:87:4b:d5:7a:94:1e:5f:4f:25:33:
9b:ea:21:e2:da:a7:32:ca:46:23:ef:57:6c:b4:20:
16:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:4B:29:33:29:46:F4:E2:BE:A1:16:62:03:AE:14:A2:03:43:2B:0D
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/t0spMylG9OK-oRZiA64UogNDKw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
151.240.45.0/24
151.240.136.0/24
151.241.30.0/24
151.241.36.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.156.0/24
151.241.161.0/24
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.134.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.244.5.0-151.244.6.255
151.244.14.0/24
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0-151.244.193.255
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.115.0/24
151.245.142.0/24
151.245.149.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.44.0/24
151.247.78.0/24
151.247.83.0/24
151.247.88.0/24
151.247.101.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
95:bc:fc:4d:ce:c9:c9:c6:1d:f5:7a:28:44:24:72:92:9d:3e:
7d:7f:45:1d:5d:8b:ed:f3:a1:a1:9a:d0:ab:71:f1:40:81:06:
6a:56:81:56:56:8c:26:5d:92:72:a6:9e:e1:cf:ac:13:f3:19:
9e:ba:34:8f:29:84:af:dc:a3:24:1f:65:f7:da:45:23:39:ba:
43:f3:c2:cb:87:f0:87:ab:55:3a:c4:c9:09:56:41:9f:c8:5b:
47:69:13:43:8d:80:59:48:30:c7:7e:e9:7c:26:03:59:69:27:
3c:90:b6:5e:cd:f9:be:99:ce:71:14:64:0e:1f:ff:9c:65:e1:
ae:08:24:0b:90:25:0a:00:d9:0b:b5:92:41:25:d1:28:6d:5f:
c3:52:27:7d:89:1b:e3:9c:57:41:37:43:6f:ac:7e:5e:49:13:
11:73:a4:e4:27:b4:a7:de:19:42:9c:6d:c9:5c:fc:0d:2f:4a:
ee:ff:3c:1b:37:15:37:d1:d8:03:d1:38:0c:cf:4d:2d:3c:cf:
c0:79:60:25:92:99:2b:34:d6:e8:29:f2:32:89:5e:c4:dd:10:
0b:07:04:a2:b6:82:50:f9:9c:b9:bc:42:5c:0b:5c:ed:44:a0:
a0:81:3e:c3:ff:8f:a8:7b:c6:ba:f2:10:3c:77:63:20:9a:5e:
b3:ab:b7:34
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgISAaGMq0Bw07W07ZV7oIgbdwTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYxMDMwMTE1NjM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzRiMjkzMzI5NDZmNGUyYmVhMTE2NjIwM2FlMTRhMjAzNDMyYjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0m3mVhaJPill+DkdrGDidyJqhFZ5
MNBkJ7FbpSk792nP7bgsnzZgikO8ZUhJGdjKMiPLmZbv/5UX9RnY+KA/vL0e/0Va
du8DprrzOqXyI2NGba4Mm5nckcN2+EIKfFbFSBHQS02t5003MwYM+xndsdTe7rm/
euJiGJD/tj4IscljTSM6HG1OQgb85JsfDltPEjwhdWavFHCIkfQ9M3wgrmt7xvlA
pEBXTRyDBP2PmiHT9N77qJVAq3UEuPN5N+LZsTlB+Y4W1mzSPGguaAgYobyI/OI3
JnQnaS9SX0My7e+n2F7BPIdL1XqUHl9PJTOb6iHi2qcyykYj71dstCAWPwIDAQAB
o4IDczCCA28wHQYDVR0OBBYEFLdLKTMpRvTivqEWYgOuFKIDQysNMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvdDBzcE15bEc5T0stb1JaaUE2NFVvZ05ES3cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBhwYIKwYBBQUHAQcBAf8EggF2MIIBcjCCAW4EAgABMIIB
ZgMEACXKxgMEAJfwLQMEAJfwiAMEAJfxHgMEAJfxJAMEAJfxJwMEAJfxMgMEAJfx
QAMEAJfxQwMEAZfxRgMEAJfxSQMEAJfxTQMEAJfxXwMEAJfxcwMEAJfxnAMEAJfx
oQMEAJfxsAMEAJfxzAMEAJfyIQMEAJfyLQMEAJfySQMEAJfygAMEAJfyhgMEAJfy
ngMEAJfzAgMEAJfzaQMEAJfziTAMAwQAl/QFAwQAl/QGAwQAl/QOAwQAl/Q5AwQA
l/RvAwQBl/RyAwQAl/SDAwQAl/SPMAwDBACX9L8DBAGX9MADBACX9NQDBACX9QMD
BACX9RwDBACX9UwDBACX9U4DBACX9WgDBACX9XMDBACX9Y4DBACX9ZUDBACX9cMD
BACX9dQDBACX9eMDBACX9eYDBACX9e8DBACX9ywDBACX904DBACX91MDBACX91gD
BACX92UDBAOX93gDBACX97wDBACX990wDQYJKoZIhvcNAQELBQADggEBAJW8/E3O
ycnGHfV6KEQkcpKdPn1/RR1di+3zoaGa0Ktx8UCBBmpWgVZWjCZdknKmnuHPrBPz
GZ66NI8phK/coyQfZffaRSM5ukPzwsuH8IerVTrEyQlWQZ/IW0dpE0ONgFlIMMd+
6XwmA1lpJzyQtl7N+b6ZznEUZA4f/5xl4a4IJAuQJQoA2Qu1kkEl0ShtX8NSJ32J
G+OcV0E3Q2+sfl5JExFzpOQntKfeGUKcbclc/A0vSu7/PBs3FTfR2APROAzPTS08
z8B5YCWSmSs01ugp8jKJXsTdEAsHBKK2glD5nLm8QlwLXO1EoKCBPsP/j6h7xrry
EDx3YyCaXrOrtzQ=
-----END CERTIFICATE-----
Generated at Wed Nov 4 14:30:17 2026 by rpki-client