Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa
File: fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa (raw, json)
Hash identifier: pI5sDBFJByOhv7aMqIYQbfKd/45ixTiiuKep9pppuh0=
Subject key identifier: 7E:0F:19:65:A4:33:5F:C2:F1:97:11:A6:98:38:D4:65:21:1F:A8:B8
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01963E3963639291FDD88E7178CB9B0CDB61
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa
Signing time: Wed 16 Apr 2025 10:51:10 +0000
ROA not before: Wed 16 Apr 2025 10:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.50.0/23 maxlen: 24
37.148.52.0/22 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.64.0/21 maxlen: 24
37.148.72.0/21 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.84.0/23 maxlen: 24
37.148.86.0/23 maxlen: 24
37.148.88.0/22 maxlen: 24
37.148.88.0/24 maxlen: 24
37.148.89.0/24 maxlen: 24
37.148.90.0/24 maxlen: 24
37.148.91.0/24 maxlen: 24
37.148.92.0/23 maxlen: 24
37.148.92.0/24 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
94.183.128.0/18 maxlen: 18
94.183.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:39:63:63:92:91:fd:d8:8e:71:78:cb:9b:0c:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 16 10:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e0f1965a4335fc2f19711a69838d465211fa8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:e1:53:3d:8d:86:da:4f:b0:4b:23:5c:e1:
f5:fd:ea:3f:c8:89:b4:02:60:27:fa:80:b6:6f:b7:
e3:d7:c7:60:f2:10:50:f6:4c:4a:f9:41:25:26:8a:
d4:58:e8:93:a9:e8:e5:7c:38:65:b1:b4:af:ef:cd:
5c:ae:c7:ce:fc:da:7f:72:5d:b2:da:42:63:7a:c2:
c1:51:52:7f:f8:2d:3c:9b:e5:cc:d5:19:9a:57:b2:
83:a6:25:8f:92:60:0b:b2:a3:e0:20:cc:15:46:0e:
02:3c:c1:4f:96:d6:ab:4a:39:ab:4a:77:cd:c1:97:
ce:4f:6b:89:98:60:25:6b:f3:9f:fb:74:67:30:91:
17:f9:9b:90:73:17:15:8a:80:ac:9f:80:77:81:30:
2e:43:70:75:f9:0d:d0:20:fa:27:f8:e0:e4:f1:e7:
a7:22:ff:22:e2:b3:b8:9b:a3:6c:7c:9b:0b:7a:d2:
a8:b2:c3:b2:ea:77:77:5d:d3:ac:0c:db:e0:e7:28:
75:ae:4b:db:9c:7f:1f:62:83:86:7f:ea:5d:ef:21:
ed:05:c8:bc:6e:bb:aa:17:36:a5:f1:ef:de:c7:25:
6b:d8:6e:15:27:eb:57:d4:82:3c:0d:ca:43:0f:fe:
8c:51:37:63:a3:53:07:99:8e:ca:bf:34:ca:b7:de:
1f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:19:65:A4:33:5F:C2:F1:97:11:A6:98:38:D4:65:21:1F:A8:B8
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/fg8ZZaQzX8LxlxGmmDjUZSEfqLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.93.255
37.148.120.0/21
37.202.128.0/18
85.15.48.0/23
94.182.0.0/15
Signature Algorithm: sha256WithRSAEncryption
74:3d:ea:9e:75:dd:ef:23:d5:ae:4e:3b:5a:cc:e5:4e:6a:c1:
d6:dc:6c:0c:a8:da:cf:dd:00:51:a6:50:72:37:e4:6e:93:9d:
f4:c0:b9:8e:29:a3:21:32:85:4a:a9:bf:00:29:ce:0b:43:ca:
14:f6:e6:d8:54:45:b7:92:44:cf:6a:ee:99:a7:01:ec:94:c6:
4e:f8:09:40:33:79:0f:85:37:b8:ed:21:78:5f:f7:dc:bb:99:
f2:04:a0:f2:2c:f4:86:75:c4:2e:27:d7:5c:67:5a:1f:3c:5e:
99:39:b1:d8:bd:8b:64:19:70:ba:fa:0a:e3:9c:60:3f:41:8f:
a9:d3:1c:ca:a4:7f:3f:9b:0e:34:89:0d:d2:e6:44:3b:c0:07:
d1:04:86:ae:8e:83:00:27:07:6f:b2:21:1b:dc:40:7f:5d:5b:
c5:3a:7a:3d:ed:8c:90:0d:38:39:25:a0:61:e5:6f:6a:fa:81:
ac:95:ed:d6:cd:21:06:91:fa:5c:42:9f:75:4c:98:e3:74:12:
84:50:45:8a:1c:f5:43:94:c5:92:a4:d0:0e:18:6c:98:d3:56:
c4:77:38:14:6c:7b:5d:72:6d:59:3b:28:8d:cb:53:2d:67:3b:
87:b0:4a:bd:9c:c4:f9:3f:88:3e:ac:99:12:4e:95:b8:99:c0:
d3:a7:e3:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:30:58 2025 by rpki-client