Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h9g_PYMZuLeSljFMXLDLfTUsqxc.roa
File: h9g_PYMZuLeSljFMXLDLfTUsqxc.roa (raw, json)
Hash identifier: dttrOUO+v4KY515NCQvb1Vqt92zL71t/i+3OWHk84Zc=
Subject key identifier: 87:D8:3F:3D:83:19:B8:B7:92:96:31:4C:5C:B0:CB:7D:35:2C:AB:17
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A09E8369DD81BE3045453A0E9F09FC9322
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h9g_PYMZuLeSljFMXLDLfTUsqxc.roa
Signing time: Mon 14 Sep 2026 06:03:27 +0000
ROA not before: Mon 14 Sep 2026 06:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.50.0/23 maxlen: 24
37.148.52.0/22 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.64.0/21 maxlen: 24
37.148.72.0/21 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.84.0/23 maxlen: 24
37.148.86.0/23 maxlen: 24
37.148.88.0/22 maxlen: 24
37.148.88.0/24 maxlen: 24
37.148.89.0/24 maxlen: 24
37.148.90.0/24 maxlen: 24
37.148.91.0/24 maxlen: 24
37.148.92.0/23 maxlen: 24
37.148.92.0/24 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
37.202.224.0/20 maxlen: 24
37.202.240.0/21 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.30.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.94.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.115.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:83:69:dd:81:be:30:45:45:3a:0e:9f:09:fc:93:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 14 06:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=87d83f3d8319b8b79296314c5cb0cb7d352cab17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:e3:2f:c3:49:90:c8:54:03:c4:4d:4a:fc:
85:6c:2d:fe:17:74:b6:98:25:4b:19:77:9d:fd:79:
05:35:87:5d:86:00:27:a9:8b:cb:fd:d3:94:3b:4e:
8a:0c:5f:b4:35:c5:2f:46:51:25:95:02:9e:d1:5c:
39:3c:00:6a:9c:e1:5e:e8:27:48:92:28:d7:d0:44:
9d:74:0c:c5:50:9e:0c:c7:14:3c:f0:b7:9c:b3:71:
b2:ae:b0:85:9b:19:db:20:fd:1e:4d:eb:28:8b:ca:
52:dc:a8:67:39:b3:a8:38:f4:4d:2f:7b:2c:eb:3d:
b8:b8:1b:0c:c0:f0:14:2b:0b:b6:72:52:b2:13:0b:
39:20:5e:0d:ab:00:02:58:d7:74:40:58:c3:d0:c6:
c7:55:41:b7:c9:34:01:c4:2f:77:d9:d5:42:71:bf:
40:9f:8e:5f:3f:f5:b6:18:e5:00:74:96:92:b6:09:
8d:b5:71:45:2e:b0:48:a6:39:38:87:05:1d:d8:76:
de:ed:1b:6a:c8:63:65:ed:74:03:16:3e:b0:59:41:
f9:9a:93:f9:2a:51:80:79:4d:3e:ec:aa:57:bd:f1:
89:65:25:05:d8:4b:9d:b4:a7:a7:a7:33:56:39:31:
1c:e2:95:98:ef:0e:a8:c8:ef:25:4f:1d:6e:53:1b:
e7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D8:3F:3D:83:19:B8:B7:92:96:31:4C:5C:B0:CB:7D:35:2C:AB:17
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/h9g_PYMZuLeSljFMXLDLfTUsqxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.93.255
37.148.120.0/21
37.202.128.0/18
37.202.224.0-37.202.247.255
85.15.48.0/23
94.182.0.0-94.183.127.255
Signature Algorithm: sha256WithRSAEncryption
a5:fa:4f:09:90:fa:65:88:bc:2b:5b:26:fc:ff:9c:b6:0a:26:
5d:6a:50:d8:f7:2d:0e:44:38:de:54:1a:e9:9f:0c:72:57:89:
61:7b:34:92:54:dd:3b:b6:74:fe:b4:50:df:54:d6:09:fb:d5:
5f:e6:85:8a:fb:74:9f:03:a5:46:d5:fe:0d:ef:fe:d7:4c:c1:
f4:aa:d7:75:ba:27:e1:26:b8:9c:44:38:94:4f:10:ac:10:2e:
00:99:e9:40:9c:ff:d5:e2:cf:b2:d0:88:5f:ed:7d:05:3d:4c:
9d:55:1b:d4:d4:1f:6e:e6:35:78:d3:9f:95:ef:f6:da:b6:df:
ee:a2:73:22:9c:4c:ec:25:3f:25:45:99:4c:df:02:67:f0:d4:
95:0f:35:31:01:36:74:7d:bb:ed:50:17:7c:69:4d:6b:aa:dc:
15:fe:b8:0d:e6:d0:2b:7d:ef:0d:4a:20:d5:47:7b:51:65:0d:
04:63:0d:8a:ae:98:32:13:c2:07:18:1f:a2:3e:22:02:77:43:
60:fb:6a:67:f9:74:b8:3c:8b:b3:dd:18:83:fc:3a:42:87:65:
a2:19:ee:79:2e:e7:fc:4f:f7:89:81:b9:f2:d9:12:43:07:70:
3e:3f:e1:58:c6:cb:e2:0a:4b:79:2a:ac:7b:8a:1d:6d:e4:f9:
9f:04:d9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 21:07:06 2026 by rpki-client