Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/8toB7VFNGybG6ifS92zANgzIE1g.roa
File: 8toB7VFNGybG6ifS92zANgzIE1g.roa (raw, json)
Hash identifier: Xm6zBEQ9EAvLXB5HW7NMAdOsXFA/FL2WctKzXcvROIM=
Subject key identifier: F2:DA:01:ED:51:4D:1B:26:C6:EA:27:D2:F7:6C:C0:36:0C:C8:13:58
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197B665A0563DCD227B4B42B04741B419DF
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/8toB7VFNGybG6ifS92zANgzIE1g.roa
Signing time: Sat 28 Jun 2025 11:56:42 +0000
ROA not before: Sat 28 Jun 2025 11:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 37.148.0.0/17 maxlen: 24
37.148.0.0/18 maxlen: 18
37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/18 maxlen: 18
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.78.0/24 maxlen: 24
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/18 maxlen: 24
37.202.136.0/24 maxlen: 24
37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.228.0/24 maxlen: 24
37.202.229.0/24 maxlen: 24
37.202.230.0/24 maxlen: 24
37.202.231.0/24 maxlen: 24
37.202.232.0/22 maxlen: 22
37.202.232.0/24 maxlen: 24
37.202.233.0/24 maxlen: 24
37.202.234.0/24 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.243.0/24 maxlen: 24
84.241.0.0/18 maxlen: 24
84.241.0.0/20 maxlen: 20
84.241.4.0/24 maxlen: 24
84.241.16.0/20 maxlen: 20
84.241.23.0/24 maxlen: 24
84.241.32.0/20 maxlen: 20
84.241.34.0/24 maxlen: 24
84.241.48.0/20 maxlen: 20
84.241.48.0/24 maxlen: 24
85.15.0.0/18 maxlen: 24
85.15.0.0/20 maxlen: 24
85.15.1.0/24 maxlen: 24
85.15.5.0/24 maxlen: 24
85.15.6.0/24 maxlen: 24
85.15.7.0/24 maxlen: 24
85.15.11.0/24 maxlen: 24
85.15.12.0/24 maxlen: 24
85.15.16.0/20 maxlen: 24
85.15.25.0/24 maxlen: 24
85.15.32.0/20 maxlen: 20
85.15.48.0/20 maxlen: 20
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/15 maxlen: 24
94.182.0.0/20 maxlen: 20
94.182.8.0/23 maxlen: 23
94.182.11.0/24 maxlen: 24
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.16.0/20 maxlen: 20
94.182.17.0/24 maxlen: 24
94.182.28.0/22 maxlen: 22
94.182.28.0/23 maxlen: 23
94.182.28.0/24 maxlen: 24
94.182.32.0/20 maxlen: 20
94.182.42.0/24 maxlen: 24
94.182.43.0/24 maxlen: 24
94.182.46.0/24 maxlen: 24
94.182.48.0/20 maxlen: 20
94.182.56.0/22 maxlen: 22
94.182.64.0/24 maxlen: 24
94.182.65.0/24 maxlen: 24
94.182.66.0/24 maxlen: 24
94.182.67.0/24 maxlen: 24
94.182.68.0/24 maxlen: 24
94.182.69.0/24 maxlen: 24
94.182.70.0/24 maxlen: 24
94.182.71.0/24 maxlen: 24
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.85.0/24 maxlen: 24
94.182.88.0/22 maxlen: 24
94.182.93.0/24 maxlen: 24
94.182.96.0/24 maxlen: 24
94.182.98.0/24 maxlen: 24
94.182.99.0/24 maxlen: 24
94.182.100.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.110.0/23 maxlen: 23
94.182.112.0/20 maxlen: 20
94.182.112.0/23 maxlen: 23
94.182.128.0/19 maxlen: 19
94.182.128.0/20 maxlen: 20
94.182.128.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.130.0/23 maxlen: 23
94.182.130.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.133.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.138.0/23 maxlen: 24
94.182.139.0/24 maxlen: 24
94.182.141.0/24 maxlen: 24
94.182.143.0/24 maxlen: 24
94.182.144.0/20 maxlen: 20
94.182.145.0/24 maxlen: 24
94.182.146.0/23 maxlen: 24
94.182.146.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.148.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.153.0/24 maxlen: 24
94.182.154.0/24 maxlen: 24
94.182.155.0/24 maxlen: 24
94.182.157.0/24 maxlen: 24
94.182.159.0/24 maxlen: 24
94.182.160.0/19 maxlen: 19
94.182.160.0/20 maxlen: 20
94.182.162.0/23 maxlen: 23
94.182.163.0/24 maxlen: 24
94.182.164.0/24 maxlen: 24
94.182.168.0/24 maxlen: 24
94.182.169.0/24 maxlen: 24
94.182.172.0/24 maxlen: 24
94.182.174.0/24 maxlen: 24
94.182.176.0/20 maxlen: 20
94.182.176.0/23 maxlen: 24
94.182.176.0/24 maxlen: 24
94.182.177.0/24 maxlen: 24
94.182.178.0/23 maxlen: 23
94.182.180.0/23 maxlen: 23
94.182.182.0/23 maxlen: 23
94.182.182.0/24 maxlen: 24
94.182.183.0/24 maxlen: 24
94.182.184.0/22 maxlen: 22
94.182.184.0/23 maxlen: 23
94.182.184.0/24 maxlen: 24
94.182.186.0/23 maxlen: 23
94.182.188.0/23 maxlen: 23
94.182.188.0/24 maxlen: 24
94.182.189.0/24 maxlen: 24
94.182.190.0/24 maxlen: 24
94.182.191.0/24 maxlen: 24
94.182.192.0/19 maxlen: 19
94.182.192.0/24 maxlen: 24
94.182.193.0/24 maxlen: 24
94.182.196.0/24 maxlen: 24
94.182.197.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.208.0/20 maxlen: 20
94.182.208.0/24 maxlen: 24
94.182.213.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.222.0/24 maxlen: 24
94.182.224.0/20 maxlen: 20
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.238.0/24 maxlen: 24
94.182.239.0/24 maxlen: 24
94.182.240.0/20 maxlen: 20
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.248.0/22 maxlen: 22
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/20 maxlen: 20
94.183.16.0/20 maxlen: 20
94.183.22.0/23 maxlen: 23
94.183.24.0/24 maxlen: 24
94.183.32.0/21 maxlen: 21
94.183.40.0/21 maxlen: 21
94.183.48.0/20 maxlen: 20
94.183.58.0/24 maxlen: 24
94.183.58.1/32 maxlen: 32
94.183.62.0/24 maxlen: 24
94.183.64.0/20 maxlen: 20
94.183.77.0/24 maxlen: 24
94.183.80.0/20 maxlen: 20
94.183.96.0/20 maxlen: 20
94.183.98.0/24 maxlen: 24
94.183.112.0/20 maxlen: 20
94.183.128.0/21 maxlen: 21
94.183.136.0/21 maxlen: 21
94.183.144.0/20 maxlen: 20
151.238.0.0/15 maxlen: 24
151.238.0.0/18 maxlen: 24
151.239.128.0/17 maxlen: 24
151.239.128.0/18 maxlen: 24
151.239.128.0/19 maxlen: 24
151.239.160.0/19 maxlen: 24
151.239.192.0/18 maxlen: 24
151.239.192.0/19 maxlen: 24
151.239.224.0/19 maxlen: 24
185.73.0.0/22 maxlen: 24
185.73.0.0/23 maxlen: 23
185.73.0.0/24 maxlen: 24
185.73.1.0/24 maxlen: 24
185.73.2.0/23 maxlen: 23
185.73.2.0/24 maxlen: 24
185.73.3.0/24 maxlen: 24
2a0e::/26 maxlen: 26
2a0e:0:1::/48 maxlen: 48
2a0e:0:1::/52 maxlen: 52
2a0e:0:1:1000::/52 maxlen: 52
2a0e:0:1:2000::/52 maxlen: 52
2a0e:0:1:3000::/52 maxlen: 52
2a0e:0:2::/47 maxlen: 47
2a0e:0:4::/46 maxlen: 46
2a0e:0:40::/42 maxlen: 42
2a0e:0:80::/41 maxlen: 41
2a0e:0:100::/41 maxlen: 41
2a0e:0:180::/43 maxlen: 43
2a0e:0:1a0::/43 maxlen: 43
2a0e:4::/30 maxlen: 30
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:65:a0:56:3d:cd:22:7b:4b:42:b0:47:41:b4:19:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jun 28 11:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2da01ed514d1b26c6ea27d2f76cc0360cc81358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:de:4d:7f:43:1f:42:ea:aa:2f:15:b5:1c:
ea:9c:3b:3f:56:19:52:14:db:ff:d1:20:9b:74:8d:
a9:60:25:09:45:85:df:dc:67:f8:43:60:e5:64:e7:
68:89:6c:87:f8:cb:93:d4:4a:a9:fd:5a:05:7b:77:
2b:8c:35:98:60:65:c4:7f:32:0f:79:88:b4:6c:c5:
5c:38:1a:0b:11:44:42:9e:2d:ef:bb:6a:d0:b3:53:
20:aa:56:90:77:ae:5a:82:44:d0:d8:c2:f6:be:40:
d1:3c:1f:27:56:8b:d3:b3:63:6d:e6:79:3a:5b:75:
74:a5:29:9c:f3:61:56:fd:f4:2f:a6:3a:75:5b:cb:
4e:64:6a:2e:67:76:a6:23:1f:dd:92:3b:2d:0d:f0:
ba:23:23:91:ae:a9:71:0e:b0:9d:c7:c8:4e:82:0d:
82:62:e8:48:a9:ad:0f:0a:b3:8f:9e:61:35:00:f6:
93:46:48:d3:b3:3a:a7:36:2f:b9:3e:78:25:85:3b:
d0:85:29:0a:71:71:2e:6e:14:ae:9f:4b:44:b0:42:
30:1e:c7:a2:8b:91:04:8b:e1:6c:c2:2f:33:00:44:
52:01:1b:a1:a8:07:2e:8f:79:20:1f:fd:33:9b:3a:
86:74:0b:b2:2f:fe:e5:e8:10:2d:14:dc:f9:52:96:
b9:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:01:ED:51:4D:1B:26:C6:EA:27:D2:F7:6C:C0:36:0C:C8:13:58
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/8toB7VFNGybG6ifS92zANgzIE1g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
37.202.224.0-37.202.243.255
84.241.0.0/18
85.15.0.0/18
94.182.0.0/15
151.238.0.0/15
185.73.0.0/22
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
ab:5f:52:3c:03:24:c2:e1:5e:7f:21:59:0f:d5:b7:d7:ae:75:
e1:e9:d4:11:fa:9c:2e:4e:59:f0:79:1d:3c:13:ea:ba:4d:48:
0c:52:a3:43:11:70:e1:70:d8:18:86:02:81:5c:1a:94:ce:52:
a5:66:0a:4f:a5:3a:02:2a:27:3d:a6:e3:04:4f:c7:00:04:7b:
3f:a4:36:41:0a:70:23:97:65:00:75:f2:92:48:94:c0:19:f0:
eb:92:28:14:db:f2:a1:4f:c0:81:9e:84:66:4c:c6:62:d0:55:
7d:64:61:00:4b:14:38:e7:90:37:c6:02:78:71:ae:45:fd:94:
7c:55:6c:4d:e5:12:57:16:a7:08:0d:33:07:4b:48:4a:90:bf:
63:bb:bd:36:9b:45:30:6f:aa:ed:e3:b6:72:21:a0:86:18:e7:
f2:df:cf:d5:3a:cd:3a:10:31:bc:a3:54:cc:f2:bf:ff:d8:1d:
8d:70:5a:47:93:e5:2a:4b:50:b9:16:96:bb:f7:77:73:f8:7f:
8a:c8:ef:3d:bf:83:c8:3a:b1:bd:4b:c6:08:0d:74:f3:ce:f7:
b9:1c:38:95:c5:8f:30:f6:70:e8:4e:d5:df:01:28:00:9c:0a:
af:9c:1e:68:c9:cb:40:a0:d3:3b:4c:6a:b8:d6:0e:35:ac:e1:
2e:31:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:32:43 2025 by rpki-client