Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z8N8CAROTk3L09jd5xKHv9wKV8o.roa
File: z8N8CAROTk3L09jd5xKHv9wKV8o.roa (raw, json)
Hash identifier: U2IaVRWeKtQP0Z8Zzym6MkqNHm4iUqowdB8BCD5RWn8=
Subject key identifier: CF:C3:7C:08:04:4E:4E:4D:CB:D3:D8:DD:E7:12:87:BF:DC:0A:57:CA
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 019EDAF8335746CC45F8B8E725637005B553
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z8N8CAROTk3L09jd5xKHv9wKV8o.roa
Signing time: Thu 18 Jun 2026 13:42:39 +0000
ROA not before: Thu 18 Jun 2026 13:42:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 37.202.198.0/24 maxlen: 24
37.202.201.0/24 maxlen: 24
151.240.45.0/24 maxlen: 24
151.241.30.0/24 maxlen: 24
151.241.39.0/24 maxlen: 24
151.241.50.0/24 maxlen: 24
151.241.64.0/24 maxlen: 24
151.241.67.0/24 maxlen: 24
151.241.70.0/24 maxlen: 24
151.241.71.0/24 maxlen: 24
151.241.73.0/24 maxlen: 24
151.241.77.0/24 maxlen: 24
151.241.95.0/24 maxlen: 24
151.241.115.0/24 maxlen: 24
151.241.160.0/24 maxlen: 24
151.241.161.0/24 maxlen: 24
151.241.176.0/24 maxlen: 24
151.241.204.0/24 maxlen: 24
151.242.33.0/24 maxlen: 24
151.242.45.0/24 maxlen: 24
151.242.73.0/24 maxlen: 24
151.242.128.0/24 maxlen: 24
151.242.158.0/24 maxlen: 24
151.243.2.0/24 maxlen: 24
151.243.105.0/24 maxlen: 24
151.243.137.0/24 maxlen: 24
151.243.147.0/24 maxlen: 24
151.244.5.0/24 maxlen: 24
151.244.6.0/24 maxlen: 24
151.244.57.0/24 maxlen: 24
151.244.111.0/24 maxlen: 24
151.244.114.0/24 maxlen: 24
151.244.115.0/24 maxlen: 24
151.244.131.0/24 maxlen: 24
151.244.143.0/24 maxlen: 24
151.244.191.0/24 maxlen: 24
151.244.193.0/24 maxlen: 24
151.244.212.0/24 maxlen: 24
151.245.3.0/24 maxlen: 24
151.245.28.0/24 maxlen: 24
151.245.76.0/24 maxlen: 24
151.245.78.0/24 maxlen: 24
151.245.104.0/24 maxlen: 24
151.245.142.0/24 maxlen: 24
151.245.195.0/24 maxlen: 24
151.245.212.0/24 maxlen: 24
151.245.227.0/24 maxlen: 24
151.245.230.0/24 maxlen: 24
151.245.239.0/24 maxlen: 24
151.247.120.0/23 maxlen: 24
151.247.122.0/23 maxlen: 24
151.247.124.0/23 maxlen: 24
151.247.126.0/23 maxlen: 24
151.247.188.0/24 maxlen: 24
151.247.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 19:57:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:f8:33:57:46:cc:45:f8:b8:e7:25:63:70:05:b5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Jun 18 13:42:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cfc37c08044e4e4dcbd3d8dde71287bfdc0a57ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:20:18:0d:9b:16:48:18:35:91:e0:66:64:24:
df:18:6c:5f:b0:0d:f9:0f:0b:f8:c1:3f:71:99:9d:
3d:d2:1c:07:a4:d8:c1:9f:b1:8b:50:2b:8a:65:55:
43:a3:ac:4a:b3:3f:aa:4c:d7:36:bc:d3:1a:4b:e9:
56:86:2d:3e:d9:a0:31:ff:3e:25:3c:07:51:33:b9:
1b:6d:e8:61:34:a1:33:ec:18:83:e5:95:16:9d:3d:
1e:a0:04:7e:0f:95:ac:ee:5d:6b:12:bf:92:0d:bf:
a5:6f:60:11:6b:86:09:74:e6:b8:c6:0f:61:7f:0d:
21:ce:24:2e:bd:cf:ab:7a:ee:05:11:2f:9d:60:a2:
46:57:1b:d4:76:ec:38:15:d2:d3:37:ef:72:1d:00:
93:64:46:2d:9b:48:d8:ec:73:cd:05:13:56:48:4a:
5f:2a:76:b2:bc:ee:97:9b:85:f0:e1:8a:ba:e3:44:
1d:b0:bf:1a:80:67:9d:2b:29:83:99:fe:f7:f6:da:
07:88:0f:e8:1a:50:16:1a:d8:58:0c:fd:de:f1:52:
ab:2f:39:40:4f:96:f4:63:bb:19:e7:bd:bc:de:0b:
6e:ba:ea:cc:9f:27:60:ab:fd:0f:bc:d0:94:68:5c:
21:b3:48:5a:f1:b9:b9:e3:7f:d9:1b:77:c5:17:f5:
c9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C3:7C:08:04:4E:4E:4D:CB:D3:D8:DD:E7:12:87:BF:DC:0A:57:CA
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/z8N8CAROTk3L09jd5xKHv9wKV8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.198.0/24
37.202.201.0/24
151.240.45.0/24
151.241.30.0/24
151.241.39.0/24
151.241.50.0/24
151.241.64.0/24
151.241.67.0/24
151.241.70.0/23
151.241.73.0/24
151.241.77.0/24
151.241.95.0/24
151.241.115.0/24
151.241.160.0/23
151.241.176.0/24
151.241.204.0/24
151.242.33.0/24
151.242.45.0/24
151.242.73.0/24
151.242.128.0/24
151.242.158.0/24
151.243.2.0/24
151.243.105.0/24
151.243.137.0/24
151.243.147.0/24
151.244.5.0-151.244.6.255
151.244.57.0/24
151.244.111.0/24
151.244.114.0/23
151.244.131.0/24
151.244.143.0/24
151.244.191.0/24
151.244.193.0/24
151.244.212.0/24
151.245.3.0/24
151.245.28.0/24
151.245.76.0/24
151.245.78.0/24
151.245.104.0/24
151.245.142.0/24
151.245.195.0/24
151.245.212.0/24
151.245.227.0/24
151.245.230.0/24
151.245.239.0/24
151.247.120.0/21
151.247.188.0/24
151.247.221.0/24
Signature Algorithm: sha256WithRSAEncryption
55:c7:bd:59:61:e7:bd:9d:c9:62:60:71:3a:4a:27:bb:42:19:
7e:eb:1f:8d:2b:90:c2:5c:14:49:ce:e0:c8:fe:24:4a:9a:4b:
66:e6:0f:b3:c9:5a:ff:99:17:9f:5b:a4:e8:96:06:62:18:34:
d9:8d:54:e7:6d:f2:27:fc:9c:83:44:84:24:e8:b5:64:31:01:
cd:95:0b:8a:29:b3:80:ce:57:36:d9:8b:09:cb:d8:d2:e5:68:
c9:15:ee:99:94:b0:0b:99:56:e7:80:f8:fa:ac:ae:09:6c:6e:
53:ce:bb:1b:6b:b0:11:aa:ca:df:d3:79:21:da:5e:88:10:3b:
0f:e5:cf:d2:c9:83:7d:ea:90:ee:73:70:2b:86:11:25:31:16:
0a:67:8a:24:6d:36:60:86:91:8a:98:e1:b9:e7:34:12:61:65:
8d:82:a5:89:8a:aa:02:4f:20:a4:af:6c:cf:2a:d3:b3:21:8b:
df:9c:c8:0a:01:ba:22:cb:b9:ec:b2:ba:e1:0c:5b:25:8f:d1:
20:64:3c:c4:4f:a6:fa:84:4e:c9:b5:de:ea:ae:c3:e2:b0:e4:
eb:00:fe:36:c2:e0:f9:d2:0a:d8:21:3d:4a:81:25:58:7a:70:
23:7f:82:34:18:ab:2e:ef:a9:c1:12:b1:50:c2:83:38:a9:75:
79:46:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 02:15:27 2026 by rpki-client