Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/p9weqcwKzF5P6E4PpAyu9c1qrTk.roa
File: p9weqcwKzF5P6E4PpAyu9c1qrTk.roa (raw, json)
Hash identifier: vw93uscHpkewfwJ8S5ELvSe02w8qGO8AWWpmf1fHYTg=
Subject key identifier: A7:DC:1E:A9:CC:0A:CC:5E:4F:E8:4E:0F:A4:0C:AE:F5:CD:6A:AD:39
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 0197FD6FEEB5D020D0B897820752920F498F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/p9weqcwKzF5P6E4PpAyu9c1qrTk.roa
Signing time: Sat 12 Jul 2025 07:01:00 +0000
ROA not before: Sat 12 Jul 2025 07:01:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.248.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.128.0/23 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/23 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:fd:6f:ee:b5:d0:20:d0:b8:97:82:07:52:92:0f:49:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 12 07:01:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7dc1ea9cc0acc5e4fe84e0fa40caef5cd6aad39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fe:aa:2a:3a:f3:08:26:68:92:56:03:f1:74:
29:3f:39:19:e0:93:51:5e:1c:19:7d:50:3d:b7:5f:
2c:07:92:24:dc:6b:3d:9e:42:cc:26:3d:83:49:3c:
fa:1a:03:21:31:f0:43:3c:14:e8:1c:66:af:53:74:
5f:cd:a7:68:96:d9:de:9f:39:d4:c0:9b:f4:5b:49:
75:37:e0:7e:5d:2e:23:18:f2:aa:d8:c6:48:22:95:
a6:14:df:72:12:5f:ca:d1:59:e4:72:79:c9:b6:af:
1c:8e:67:f5:91:aa:ca:0c:60:ce:45:95:b3:71:ae:
68:04:4e:ec:e6:be:36:c2:1c:99:3d:04:4c:0e:f6:
6d:9a:91:d8:da:cf:02:6d:07:98:c9:c5:51:65:05:
5b:28:eb:e2:91:97:f3:57:52:17:1d:3a:e5:5e:d3:
a2:69:26:d9:fa:35:3a:f3:37:c3:9f:fd:41:01:db:
3f:66:be:f8:07:55:ee:68:00:2c:f3:b6:8f:3a:50:
e9:4f:10:6e:7a:d0:bc:1a:56:22:b5:10:05:3f:73:
69:c9:68:87:84:e5:68:c5:a5:d1:5c:14:a5:68:df:
af:13:3a:ce:43:e7:02:02:93:92:4b:eb:78:17:5b:
9a:cf:8a:a9:83:40:a1:4c:98:f2:b9:32:f2:14:5a:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DC:1E:A9:CC:0A:CC:5E:4F:E8:4E:0F:A4:0C:AE:F5:CD:6A:AD:39
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/p9weqcwKzF5P6E4PpAyu9c1qrTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0-37.202.248.255
94.182.101.0/24
94.182.104.0-94.182.108.255
94.182.128.0/23
94.182.131.0/24
94.182.134.0/24
94.182.136.0/23
94.182.145.0/24
94.182.147.0/24
94.182.149.0-94.182.150.255
94.182.152.0/24
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
87:31:89:b5:cb:d6:37:31:52:ef:87:dc:85:a8:4c:21:39:5c:
66:a4:0f:78:49:74:e4:32:a1:58:77:7d:96:57:58:a8:41:df:
50:45:df:3c:fb:3d:81:40:52:da:7a:7e:ff:86:fa:95:79:94:
2b:bc:04:13:d1:d7:5d:55:20:c1:88:6b:bd:27:70:b4:1e:38:
34:4c:09:5e:ed:3f:13:a0:48:35:89:91:b3:a0:55:a8:31:44:
df:16:f3:70:17:3f:5f:66:60:9b:7c:cf:f1:16:5f:e4:b9:5b:
8c:54:ea:ed:b5:22:d4:47:f0:f6:3b:18:2b:c8:70:3e:d0:1f:
66:8f:90:c0:95:1c:fc:7a:72:83:0e:6e:7c:d5:9d:e7:51:5d:
68:b5:b1:90:66:d1:17:00:d9:71:9e:52:60:92:aa:06:d1:60:
64:59:15:85:9d:f2:b6:43:f1:69:21:fa:f4:f6:7d:04:6c:ca:
a4:88:c0:b2:df:22:db:19:9a:49:43:70:72:c6:48:7c:ad:a5:
40:78:52:47:56:82:13:1e:ea:07:38:90:1f:0b:62:65:5e:02:
25:80:87:33:74:52:13:cb:50:9f:85:67:c1:42:63:cb:a6:06:
a6:aa:fb:76:71:8b:bb:6e:d0:98:95:df:ab:24:e7:cd:82:ac:
16:e1:26:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 18:49:31 2025 by rpki-client