Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CMwkVYwwD2RkKvpQWZFt9vsv_yI.roa
File: CMwkVYwwD2RkKvpQWZFt9vsv_yI.roa (raw, json)
Hash identifier: WxPCdOn4zbSvInUEK+fB8Ar+vtPE/wvU3l6DpVaAxxQ=
Subject key identifier: 08:CC:24:55:8C:30:0F:64:64:2A:FA:50:59:91:6D:F6:FB:2F:FF:22
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A02DAD9DBAA0FFF36BEF550444463A430A
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CMwkVYwwD2RkKvpQWZFt9vsv_yI.roa
Signing time: Sun 23 Aug 2026 08:12:27 +0000
ROA not before: Sun 23 Aug 2026 08:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.50.0/23 maxlen: 24
37.148.52.0/22 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.64.0/21 maxlen: 24
37.148.72.0/21 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.84.0/23 maxlen: 24
37.148.86.0/23 maxlen: 24
37.148.88.0/22 maxlen: 24
37.148.88.0/24 maxlen: 24
37.148.89.0/24 maxlen: 24
37.148.90.0/24 maxlen: 24
37.148.91.0/24 maxlen: 24
37.148.92.0/23 maxlen: 24
37.148.92.0/24 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
37.202.224.0/20 maxlen: 24
37.202.240.0/21 maxlen: 24
37.202.248.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.30.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.94.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.115.0/24 maxlen: 24
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2d:ad:9d:ba:a0:ff:f3:6b:ef:55:04:44:46:3a:43:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Aug 23 08:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=08cc24558c300f64642afa5059916df6fb2fff22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:aa:ab:50:8d:b5:27:6c:2d:ea:ec:00:09:
e3:10:23:29:71:0c:eb:43:2e:15:b5:07:79:b9:a1:
88:2e:a0:5a:0f:ad:65:fb:27:14:6b:ee:85:21:c8:
fa:3b:7e:bc:5a:f8:84:12:7d:92:45:fe:91:66:0b:
07:ef:66:82:a6:99:80:f2:d0:a7:7f:a8:ea:d6:5d:
0b:8f:55:75:af:84:11:24:29:f0:0d:f8:ee:6e:f8:
be:8b:75:36:2d:e5:4c:1d:eb:99:26:81:81:bf:c4:
e8:02:96:47:f9:52:5a:6d:7c:87:ce:7e:12:97:98:
38:68:2b:f2:0a:b4:1a:ce:f5:07:08:c6:bd:1a:d0:
40:e1:16:da:53:8a:9e:63:9b:8c:3c:35:d1:34:8e:
06:44:27:79:d4:0e:fa:00:28:29:7d:ce:1e:42:b1:
74:a5:72:d9:15:57:cd:9a:62:a9:5d:f4:3f:bc:07:
7c:fb:8e:52:15:09:9f:07:9b:4b:ff:d5:a2:04:bb:
5a:39:1b:55:bf:1f:a7:19:ff:7b:0c:31:a8:89:66:
8d:fe:7f:a5:e0:61:16:c4:ab:e6:12:e8:94:91:07:
e9:fd:87:1b:42:73:e1:71:75:59:9b:f8:80:71:6d:
39:19:a7:dc:b2:d0:d7:bc:2b:85:72:db:0c:2c:68:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CC:24:55:8C:30:0F:64:64:2A:FA:50:59:91:6D:F6:FB:2F:FF:22
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/CMwkVYwwD2RkKvpQWZFt9vsv_yI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.93.255
37.148.120.0/21
37.202.128.0/18
37.202.224.0-37.202.251.255
85.15.48.0/23
94.182.0.0-94.183.127.255
Signature Algorithm: sha256WithRSAEncryption
47:9f:8b:82:d4:e4:0a:44:6f:ed:42:e8:bc:6c:8b:9f:75:7e:
a1:9c:47:ab:26:79:ee:bf:06:cf:21:a9:ee:bd:ea:04:6c:a7:
63:9d:22:34:41:0f:2d:9d:ba:e2:d2:c0:38:ee:8f:53:c6:1c:
f8:ea:f0:a9:7d:62:56:66:22:66:cb:8e:01:71:48:84:d7:ea:
00:02:17:7e:68:b8:37:a8:f4:ab:d9:a4:d9:25:a5:3e:51:bc:
99:13:e7:8b:d0:3e:cf:76:72:6a:f2:bb:f0:fb:56:8d:b0:a0:
fb:c0:2c:f8:21:25:a1:3f:f4:67:b9:cf:b5:53:2c:48:c6:08:
38:c3:71:63:8e:2d:e9:bb:a2:24:f1:dc:61:f6:d8:46:dc:0e:
75:fa:95:b9:88:f0:13:4c:43:bb:a2:4f:95:27:5f:f6:6d:97:
34:f2:cc:49:b7:aa:ae:7a:1e:20:a1:3c:80:35:35:84:7c:9f:
e7:ed:da:cc:7a:04:6b:0d:c3:2e:f0:83:15:97:49:39:a7:78:
d4:e9:be:6b:69:c0:53:59:ee:d7:81:c4:7f:ea:1a:2a:7c:7d:
79:7e:e6:8e:f5:b5:d6:f6:b1:c6:1d:78:74:27:6f:1f:26:60:
01:8a:87:4c:97:78:6e:aa:7a:86:c3:01:92:c1:0b:ab:5d:59:
6f:eb:6e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:57:40 2026 by rpki-client