Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Pm6lp3qvcFfLJ4flFgghQPotdyE.roa
File: Pm6lp3qvcFfLJ4flFgghQPotdyE.roa (raw, json)
Hash identifier: LWLp7NCrCP/suPK9y7bFRh+l455QJg6YiGLb5Y5Bs5g=
Subject key identifier: 3E:6E:A5:A7:7A:AF:70:57:CB:27:87:E5:16:08:21:40:FA:2D:77:21
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01990E5EC7065C17705F50D811083994C0EC
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Pm6lp3qvcFfLJ4flFgghQPotdyE.roa
Signing time: Wed 03 Sep 2025 06:58:36 +0000
ROA not before: Wed 03 Sep 2025 06:58:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205647
IP address blocks: 37.148.0.0/19 maxlen: 24
37.148.32.0/20 maxlen: 24
37.148.48.0/23 maxlen: 24
37.148.50.0/23 maxlen: 24
37.148.52.0/22 maxlen: 24
37.148.56.0/21 maxlen: 24
37.148.64.0/21 maxlen: 24
37.148.72.0/21 maxlen: 24
37.148.80.0/22 maxlen: 24
37.148.84.0/22 maxlen: 24
37.148.84.0/23 maxlen: 24
37.148.86.0/23 maxlen: 24
37.148.88.0/22 maxlen: 24
37.148.88.0/24 maxlen: 24
37.148.89.0/24 maxlen: 24
37.148.90.0/24 maxlen: 24
37.148.91.0/24 maxlen: 24
37.148.92.0/23 maxlen: 24
37.148.92.0/24 maxlen: 24
37.148.120.0/21 maxlen: 24
37.202.128.0/21 maxlen: 21
37.202.136.0/21 maxlen: 21
37.202.144.0/21 maxlen: 21
37.202.144.0/22 maxlen: 22
37.202.148.0/23 maxlen: 23
37.202.150.0/23 maxlen: 23
37.202.152.0/21 maxlen: 21
37.202.160.0/21 maxlen: 21
37.202.168.0/21 maxlen: 21
37.202.176.0/22 maxlen: 22
37.202.180.0/22 maxlen: 22
37.202.184.0/21 maxlen: 24
37.202.184.0/22 maxlen: 24
37.202.188.0/22 maxlen: 24
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/18 maxlen: 18
94.182.8.0/23 maxlen: 23
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.17.0/24 maxlen: 24
94.182.30.0/23 maxlen: 23
94.182.30.0/24 maxlen: 24
94.182.41.0/24 maxlen: 24
94.182.48.0/24 maxlen: 24
94.182.56.0/22 maxlen: 24
94.182.60.0/22 maxlen: 24
94.182.64.0/18 maxlen: 18
94.182.64.0/20 maxlen: 20
94.182.72.0/21 maxlen: 21
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.94.0/24 maxlen: 24
94.182.96.0/20 maxlen: 20
94.182.97.192/28 maxlen: 28
94.182.112.0/20 maxlen: 20
94.182.114.0/23 maxlen: 23
94.182.116.0/22 maxlen: 22
94.182.120.0/21 maxlen: 21
94.182.128.0/18 maxlen: 18
94.182.128.0/20 maxlen: 20
94.182.144.0/20 maxlen: 20
94.182.160.0/20 maxlen: 20
94.182.176.0/20 maxlen: 20
94.182.192.0/18 maxlen: 18
94.182.196.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.204.0/24 maxlen: 24
94.182.205.0/24 maxlen: 24
94.182.206.0/24 maxlen: 24
94.182.207.0/24 maxlen: 24
94.182.208.0/24 maxlen: 24
94.182.212.0/23 maxlen: 23
94.182.217.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.232.0/23 maxlen: 24
94.182.234.0/23 maxlen: 23
94.182.238.0/24 maxlen: 24
94.182.240.0/23 maxlen: 24
94.182.244.0/22 maxlen: 24
94.182.244.0/23 maxlen: 23
94.182.248.0/22 maxlen: 24
94.182.248.0/23 maxlen: 23
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/18 maxlen: 18
94.183.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 18:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:0e:5e:c7:06:5c:17:70:5f:50:d8:11:08:39:94:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Sep 3 06:58:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e6ea5a77aaf7057cb2787e516082140fa2d7721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:0a:73:65:66:cd:c6:40:e1:cc:52:06:fa:
e2:bc:ad:75:21:51:fb:aa:b2:a0:e6:f2:b9:b1:2e:
2b:e8:32:68:62:42:ed:d2:6e:3c:20:8e:48:73:e0:
4d:93:be:7a:ee:fe:d2:2c:cf:76:27:3b:6b:43:6a:
3c:ea:7a:5c:8f:f5:c6:f0:01:0a:d1:ff:0f:c5:f7:
e8:95:41:b8:57:7f:62:ea:7d:c4:e9:48:be:d5:b8:
41:28:49:c4:40:1b:6f:08:b5:64:51:cd:7c:53:8d:
52:51:16:6f:56:d1:fc:0c:f6:3f:19:60:79:b8:de:
7e:f8:74:e4:cb:c1:88:ae:cf:63:d9:a5:62:a9:7e:
7a:20:1f:33:56:89:90:74:39:9c:10:59:17:a1:a4:
f8:19:12:28:06:ae:79:b3:dc:49:b6:7d:20:40:ab:
3c:e1:22:86:91:8e:41:a6:92:bb:79:ce:17:a4:51:
41:47:12:c9:4b:44:a6:0c:07:0e:05:d0:66:93:96:
ba:57:53:f7:58:0f:1a:7b:d6:a9:e9:95:d4:a6:83:
c5:0e:81:41:88:78:26:32:8b:7a:6f:b6:41:ec:47:
84:95:08:a4:14:e2:23:bd:57:a1:50:d4:a2:57:d3:
fc:00:15:fc:cc:65:d0:cd:7a:76:02:89:69:3f:71:
db:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6E:A5:A7:7A:AF:70:57:CB:27:87:E5:16:08:21:40:FA:2D:77:21
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/Pm6lp3qvcFfLJ4flFgghQPotdyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0-37.148.93.255
37.148.120.0/21
37.202.128.0/18
85.15.48.0/23
94.182.0.0-94.183.127.255
Signature Algorithm: sha256WithRSAEncryption
6d:fd:86:09:33:d5:6f:c6:ed:ce:84:44:cc:7e:fa:9d:ef:e8:
b4:e2:70:ea:e3:53:f7:63:63:d3:e7:13:2e:91:1e:5c:00:0d:
ed:75:3e:79:76:d2:85:8d:07:a0:73:40:78:da:f7:fd:fe:b2:
bd:60:cc:3a:e1:82:a8:ad:e5:09:02:11:f0:b7:b9:bc:4e:87:
7e:ad:c5:e7:6b:3d:0d:6a:87:71:31:15:3b:43:50:12:28:69:
92:28:3e:fa:43:22:cd:d5:47:55:50:40:97:7d:10:3a:4e:db:
0a:cd:68:65:b7:f5:0a:85:f6:11:82:77:fb:f2:d3:cc:f0:47:
07:b9:4b:3a:0f:0f:c6:01:43:9a:5c:b0:97:ea:42:ac:0b:62:
82:61:1c:b5:45:dd:d7:cb:d1:ed:00:61:2d:a3:c0:42:99:11:
ea:2d:bb:b9:e6:12:bd:b5:c5:2b:8b:f9:7f:45:e6:83:50:c5:
02:8d:75:94:08:0a:e0:25:0a:d9:75:fb:3f:88:f8:cf:d6:9f:
57:14:b6:68:c5:59:5c:f1:90:6a:15:c8:68:70:fb:71:bb:e5:
73:45:c4:77:6c:05:26:0d:71:04:93:47:44:54:c3:c8:64:d4:
26:92:2d:3c:f8:ca:a7:da:76:00:e4:07:b1:d6:ae:59:36:4e:
86:6a:e1:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 23:48:33 2025 by rpki-client