Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/P-v3vv0KtPcU5ckoJuioqfAvCBA.roa
File: P-v3vv0KtPcU5ckoJuioqfAvCBA.roa (raw, json)
Hash identifier: RGoV+ttam68ElUsAZjdRegMArcfjEbAdwWH0ALqYdx4=
Subject key identifier: 3F:EB:F7:BE:FD:0A:B4:F7:14:E5:C9:28:26:E8:A8:A9:F0:2F:08:10
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0198BC3B5E907E6897E89F292B08BEE87E8E
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/P-v3vv0KtPcU5ckoJuioqfAvCBA.roa
Signing time: Mon 18 Aug 2025 08:11:04 +0000
ROA not before: Mon 18 Aug 2025 08:11:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.248.0/24 maxlen: 24
37.202.249.0/24 maxlen: 24
37.202.250.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.128.0/23 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/23 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:bc:3b:5e:90:7e:68:97:e8:9f:29:2b:08:be:e8:7e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 18 08:11:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3febf7befd0ab4f714e5c92826e8a8a9f02f0810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:06:b2:92:e3:13:d2:d9:5f:91:85:69:a7:69:
d9:2b:24:4e:bf:7f:0d:01:4a:97:25:be:d1:2a:c5:
4c:f5:8d:13:1f:b8:9e:87:da:13:1a:ac:53:5d:23:
c8:16:12:27:00:41:15:a9:f8:c1:a7:5d:8b:89:2e:
54:e9:dc:fc:6b:29:74:e8:06:62:41:8a:8e:38:53:
63:70:b4:f9:45:75:dc:37:19:ca:64:d8:75:d7:93:
77:aa:3e:9e:e5:2b:b8:9f:a1:94:6d:47:a8:23:f3:
76:de:5d:26:ff:56:54:6c:db:58:de:8e:b8:5e:8e:
5f:93:32:ef:d2:08:b0:8b:a9:fe:88:1a:70:cf:fe:
7e:7b:81:a4:ca:8e:44:cc:1f:a5:a1:6a:c3:a7:4f:
a3:9a:41:ae:a3:47:af:07:aa:28:2a:84:fa:a2:66:
a3:2d:4f:c7:69:6a:54:37:dd:b9:85:2a:1a:f9:ba:
05:00:16:d0:4f:30:6d:c7:a1:7f:1d:1e:e8:b8:09:
58:4f:ad:0d:39:25:ad:c7:75:f7:ca:00:05:81:a8:
4f:44:26:70:b1:c3:1d:ec:dd:b2:6f:8b:be:f2:ad:
60:9c:28:e7:5c:bb:1b:d9:74:c5:1e:a2:f9:70:72:
e5:b5:7d:78:91:00:d3:15:f7:17:2e:e1:2b:03:d8:
37:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EB:F7:BE:FD:0A:B4:F7:14:E5:C9:28:26:E8:A8:A9:F0:2F:08:10
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/P-v3vv0KtPcU5ckoJuioqfAvCBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0-37.202.251.255
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.108.255
94.182.128.0/23
94.182.131.0-94.182.132.255
94.182.134.0/24
94.182.136.0/23
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.150.255
94.182.152.0/24
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:b7:7c:f9:07:03:59:4f:69:b9:2f:1e:1d:d6:43:3b:02:31:
88:d0:95:8f:a7:36:c7:23:d5:c6:9f:7c:9e:24:ec:47:8a:08:
bd:74:72:1e:41:38:bd:f7:07:81:1d:ab:ca:61:8c:99:dc:ad:
f7:58:28:22:cc:25:c8:fa:b8:41:10:04:9f:5d:ee:2f:b4:39:
70:e4:ea:51:bd:a6:10:19:a3:7c:19:b1:ad:bf:a4:fa:a5:e5:
4e:dd:23:0f:ab:7f:67:a0:53:46:ee:0e:66:ca:a3:ab:05:32:
3b:23:ab:f1:0a:9e:4c:47:ba:29:ad:89:12:f6:b7:18:e6:9b:
5d:f6:e1:7b:2f:6b:cb:51:c6:fa:a6:e7:db:29:4f:a0:b0:60:
83:5a:02:c4:2f:f4:c0:55:b1:99:15:e7:88:ab:7a:70:9b:72:
0e:55:12:b0:89:b6:9f:28:b9:f1:5b:d8:8b:0e:ed:9c:da:f6:
64:91:1a:8c:6e:f6:90:63:a0:c1:d6:ea:b7:dc:d5:c0:1f:5f:
0b:fa:14:6d:51:37:94:84:5f:c5:6b:4d:1b:6b:75:66:fa:0b:
06:1e:37:63:8e:e0:44:4c:06:ec:cb:a8:c6:7a:8e:3e:d2:d2:
ec:28:22:bc:5e:e7:68:9c:4f:ea:d2:bc:57:ad:f4:f5:f9:d0:
28:d4:2f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:33:48 2025 by rpki-client