Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SGYSs8BTlkfCu-Mq3c6XcBYmxhg.roa
File: SGYSs8BTlkfCu-Mq3c6XcBYmxhg.roa (raw, json)
Hash identifier: lAsFW8ZjyvpQlvWQfvhdK/v8mMhfPLZ6fVUS2ot7BuI=
Subject key identifier: 48:66:12:B3:C0:53:96:47:C2:BB:E3:2A:DD:CE:97:70:16:26:C6:18
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01A1689ABE294A0ADA21B9F206442A148F84
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SGYSs8BTlkfCu-Mq3c6XcBYmxhg.roa
Signing time: Fri 23 Oct 2026 11:52:13 +0000
ROA not before: Fri 23 Oct 2026 11:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.225.0/24 maxlen: 24
37.202.226.0/24 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.236.0/23 maxlen: 24
37.202.240.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.104.0/23 maxlen: 24
94.182.107.0/24 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:9a:be:29:4a:0a:da:21:b9:f2:06:44:2a:14:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Oct 23 11:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=486612b3c0539647c2bbe32addce97701626c618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:d4:0c:3a:21:00:05:fc:2f:b3:70:53:d3:
af:b2:36:fb:89:20:30:10:cc:6d:20:ca:0e:1a:0a:
0c:88:53:46:f2:a2:a6:af:56:9a:95:55:b4:50:a8:
7c:53:61:80:2c:38:64:b7:c9:25:c4:67:f5:bd:d4:
f8:f2:16:ed:79:8f:23:0f:a1:77:2c:27:20:93:fb:
28:70:23:cc:25:5a:ec:85:73:f7:93:7a:30:1f:f8:
b0:76:91:1c:42:f0:34:8d:c9:c7:06:5c:bc:50:89:
06:6a:8e:f2:c7:6e:d3:da:9d:e3:4d:4f:56:c6:4a:
9d:c9:70:80:2f:65:49:9b:47:14:f8:24:80:3a:24:
11:91:a2:40:14:09:58:7a:4e:49:01:58:36:69:4a:
36:25:ae:16:f9:20:1c:af:50:2f:3f:a0:72:de:24:
98:77:06:4a:01:0c:8e:35:5e:49:16:70:2b:1e:22:
25:9a:26:22:e6:51:9c:f0:c9:7b:7a:f1:e4:8a:f9:
ed:11:5d:8b:4d:7a:de:a4:23:a9:d4:21:40:a2:05:
97:6a:c1:91:e9:0b:c2:7a:db:e6:9e:c9:a3:45:5e:
0e:ee:a3:4e:55:02:94:96:53:92:29:3d:b2:ec:68:
2f:98:99:14:09:87:4a:84:d2:00:ff:89:5e:4a:99:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:66:12:B3:C0:53:96:47:C2:BB:E3:2A:DD:CE:97:70:16:26:C6:18
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/SGYSs8BTlkfCu-Mq3c6XcBYmxhg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.225.0-37.202.226.255
37.202.228.0-37.202.237.255
37.202.240.0/24
37.202.242.0/24
37.202.244.0/22
37.202.251.0/24
94.182.81.0/24
94.182.104.0/23
94.182.107.0-94.182.108.255
94.182.116.0/24
94.182.129.0/24
94.182.131.0/24
94.182.134.0-94.182.137.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
37:38:aa:4a:c8:d3:7d:33:1a:92:7f:ff:52:e3:3d:b6:ec:90:
6c:00:ae:54:f6:13:96:71:32:8b:7d:68:94:9c:c0:d3:e3:9b:
51:e0:cf:f3:af:5c:b1:9e:da:12:c8:fa:4f:c2:78:cf:99:53:
26:56:f8:86:38:c8:3f:35:c5:e4:08:a2:b9:82:b2:11:42:bd:
c8:fa:e7:92:45:3b:09:62:98:27:f9:ae:1c:b2:b6:77:af:09:
59:5e:d8:d6:9e:d9:f9:59:b2:8c:19:f1:d6:77:16:01:a1:32:
4b:6e:f9:7d:fb:28:4a:d7:92:85:67:e7:9f:0f:d7:a4:47:90:
00:62:14:1e:93:eb:c9:f6:9a:1d:4b:17:20:69:9c:4e:21:bb:
9f:f4:83:c6:0a:4e:83:c0:8d:af:3a:59:76:2c:6e:bb:a4:9a:
b1:47:d6:4d:39:9e:d6:9e:1d:c2:5a:26:86:89:ba:5f:fd:68:
82:18:87:20:8e:e9:2b:88:d3:b5:19:7d:af:59:db:f1:09:87:
56:8e:5c:96:99:0e:bf:6b:cc:5f:c6:5a:b8:67:91:4f:9a:d8:
a4:dc:33:a1:b7:95:f0:ad:4b:56:53:ed:e1:8b:d1:b2:97:fb:
98:73:3c:0c:b4:df:91:72:01:bc:61:86:fc:7a:03:85:a1:6c:
b5:ad:62:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:18:22 2026 by rpki-client