Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa
File: rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa (raw, json)
Hash identifier: ZsARQdUofsJUezwT8h2OoSjlo0PYxXFJvHqyfmrbm74=
Subject key identifier: AC:9D:0A:42:90:89:DA:AF:48:BB:65:5A:47:DA:DB:74:3E:E9:42:B1
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A09E836A136DE4FF3D0546967F3C218047
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa
Signing time: Mon 14 Sep 2026 06:03:27 +0000
ROA not before: Mon 14 Sep 2026 06:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.245.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/23 maxlen: 24
94.182.106.0/24 maxlen: 24
94.182.107.0/24 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.114.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:83:6a:13:6d:e4:ff:3d:05:46:96:7f:3c:21:80:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 14 06:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ac9d0a429089daaf48bb655a47dadb743ee942b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:67:af:cb:a5:0e:28:4a:e9:59:86:fc:49:75:
42:43:42:96:4a:cd:7f:73:46:fc:e6:09:2a:d7:3c:
f0:af:58:95:54:e0:a1:66:c9:49:d5:34:45:d5:94:
cd:15:67:39:63:c6:c0:23:eb:a3:a2:4b:88:76:ad:
68:dd:5a:45:4f:56:0f:60:e6:d8:57:46:30:62:66:
db:9a:39:79:d7:ad:eb:18:54:b5:57:34:a8:81:bf:
77:91:a9:34:03:69:f5:a4:52:0e:95:8f:7c:8a:0c:
ab:58:f9:3e:0d:7f:e1:bd:52:f3:4f:06:ec:49:4e:
c3:92:2d:14:b1:39:1c:f5:6f:7d:80:0d:36:aa:63:
3f:c6:dd:75:bf:64:1f:13:9b:19:e7:5a:f7:10:a0:
1c:6e:23:54:ba:a5:d1:cb:66:d7:dd:54:ae:3c:f3:
89:ad:5d:70:ff:08:14:37:0b:00:00:a1:94:00:f4:
c5:2d:5e:87:65:60:1e:05:35:92:c6:d2:0d:09:ef:
15:85:e8:86:b5:6e:f9:7d:8e:f4:5f:68:a0:c1:6e:
a8:33:cb:d5:6f:49:0e:f8:14:88:13:0e:1b:54:eb:
76:bb:6e:f2:97:05:76:d6:39:73:b0:e9:70:f3:54:
53:32:ac:53:1c:f0:d1:4e:64:87:63:20:d7:21:04:
8b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9D:0A:42:90:89:DA:AF:48:BB:65:5A:47:DA:DB:74:3E:E9:42:B1
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0/22
37.202.251.0/24
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.109.255
94.182.114.0/24
94.182.116.0/24
94.182.129.0/24
94.182.131.0-94.182.132.255
94.182.134.0-94.182.137.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:22:f2:48:cc:4a:45:ec:9b:80:1e:91:9b:a9:2f:a5:8c:f5:
e0:1a:fb:af:9c:6d:0b:af:0a:61:f9:d4:5f:02:0e:94:54:4e:
f6:2b:13:14:4c:86:da:2d:2b:dd:56:cb:43:5f:87:ad:e6:e3:
59:a7:37:f1:9e:53:3c:30:72:cb:5a:f0:79:1d:82:23:f5:e5:
c6:b4:ef:11:22:fe:5e:e4:fa:0f:17:a3:29:f6:69:c9:85:3f:
0c:56:90:28:f8:cd:e1:a9:eb:63:2e:88:29:00:03:0b:74:8e:
ce:35:41:17:74:a5:00:63:ca:28:31:f3:03:e0:c2:e0:15:6e:
ba:24:4e:a3:4e:7a:7f:5e:50:a4:45:d4:76:6a:b8:af:54:9f:
45:21:83:91:ba:a1:1e:cb:5c:37:63:ea:1b:96:a7:cf:44:7f:
cb:d8:4c:f4:fc:ea:4a:3a:07:96:7f:2f:ff:3e:3d:96:e3:22:
08:dc:97:7e:bf:66:1b:52:e9:5b:9a:bc:47:02:f3:df:e9:0f:
f5:49:62:5c:a9:c5:35:86:18:c5:77:ce:2c:41:53:e7:7d:5c:
83:97:fc:3c:0c:80:f9:6b:2b:d4:99:38:75:6b:b4:5d:6b:50:
c2:32:d3:f7:c0:36:91:5c:4c:40:5e:4c:f9:b4:6a:94:4a:d3:
ab:ce:2f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 07:20:30 2026 by rpki-client