Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UMkHnIq7XWRmxvmDvgvckqsDfyg.roa
File: UMkHnIq7XWRmxvmDvgvckqsDfyg.roa (raw, json)
Hash identifier: UclYhW3LjpNehjDdsWCzHEOORl0S/2R/2opPQs9YB3A=
Subject key identifier: 50:C9:07:9C:8A:BB:5D:64:66:C6:F9:83:BE:0B:DC:92:AB:03:7F:28
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 01963E3962A3300193B4D26034FC76AF7DAA
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UMkHnIq7XWRmxvmDvgvckqsDfyg.roa
Signing time: Wed 16 Apr 2025 10:51:10 +0000
ROA not before: Wed 16 Apr 2025 10:51:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31549
IP address blocks: 37.148.0.0/17 maxlen: 24
37.148.0.0/18 maxlen: 18
37.148.0.0/22 maxlen: 22
37.148.4.0/22 maxlen: 22
37.148.8.0/22 maxlen: 22
37.148.12.0/22 maxlen: 22
37.148.16.0/22 maxlen: 22
37.148.20.0/22 maxlen: 22
37.148.24.0/22 maxlen: 22
37.148.28.0/22 maxlen: 22
37.148.32.0/22 maxlen: 22
37.148.36.0/22 maxlen: 22
37.148.40.0/22 maxlen: 22
37.148.44.0/22 maxlen: 22
37.148.48.0/22 maxlen: 22
37.148.52.0/22 maxlen: 22
37.148.56.0/22 maxlen: 22
37.148.60.0/22 maxlen: 22
37.148.64.0/18 maxlen: 18
37.148.64.0/22 maxlen: 22
37.148.68.0/22 maxlen: 22
37.148.72.0/22 maxlen: 22
37.148.76.0/22 maxlen: 22
37.148.78.0/24 maxlen: 24
37.148.80.0/22 maxlen: 22
37.148.84.0/22 maxlen: 22
37.148.90.0/23 maxlen: 23
37.148.100.0/22 maxlen: 22
37.148.104.0/22 maxlen: 22
37.148.110.0/24 maxlen: 24
37.148.111.0/24 maxlen: 24
37.148.112.0/24 maxlen: 24
37.148.113.0/24 maxlen: 24
37.148.114.0/24 maxlen: 24
37.148.115.0/24 maxlen: 24
37.148.116.0/24 maxlen: 24
37.148.117.0/24 maxlen: 24
37.148.118.0/24 maxlen: 24
37.148.119.0/24 maxlen: 24
37.148.124.0/22 maxlen: 22
37.202.128.0/18 maxlen: 24
37.202.136.0/24 maxlen: 24
37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.228.0/24 maxlen: 24
37.202.229.0/24 maxlen: 24
37.202.230.0/24 maxlen: 24
37.202.231.0/24 maxlen: 24
37.202.232.0/22 maxlen: 22
37.202.232.0/24 maxlen: 24
37.202.233.0/24 maxlen: 24
37.202.234.0/24 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/23 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.243.0/24 maxlen: 24
84.241.0.0/18 maxlen: 24
84.241.0.0/20 maxlen: 20
84.241.4.0/24 maxlen: 24
84.241.16.0/20 maxlen: 20
84.241.23.0/24 maxlen: 24
84.241.32.0/20 maxlen: 20
84.241.34.0/24 maxlen: 24
84.241.48.0/20 maxlen: 20
84.241.48.0/24 maxlen: 24
85.15.0.0/18 maxlen: 24
85.15.0.0/20 maxlen: 24
85.15.1.0/24 maxlen: 24
85.15.5.0/24 maxlen: 24
85.15.6.0/24 maxlen: 24
85.15.7.0/24 maxlen: 24
85.15.11.0/24 maxlen: 24
85.15.12.0/24 maxlen: 24
85.15.16.0/20 maxlen: 24
85.15.25.0/24 maxlen: 24
85.15.32.0/20 maxlen: 20
85.15.48.0/20 maxlen: 20
85.15.48.0/24 maxlen: 24
85.15.49.0/24 maxlen: 24
94.182.0.0/15 maxlen: 24
94.182.0.0/20 maxlen: 20
94.182.8.0/23 maxlen: 23
94.182.11.0/24 maxlen: 24
94.182.12.0/23 maxlen: 23
94.182.14.0/24 maxlen: 24
94.182.16.0/20 maxlen: 20
94.182.17.0/24 maxlen: 24
94.182.28.0/22 maxlen: 22
94.182.28.0/23 maxlen: 23
94.182.28.0/24 maxlen: 24
94.182.32.0/20 maxlen: 20
94.182.42.0/24 maxlen: 24
94.182.43.0/24 maxlen: 24
94.182.46.0/24 maxlen: 24
94.182.48.0/20 maxlen: 20
94.182.56.0/22 maxlen: 22
94.182.64.0/24 maxlen: 24
94.182.65.0/24 maxlen: 24
94.182.66.0/24 maxlen: 24
94.182.67.0/24 maxlen: 24
94.182.68.0/24 maxlen: 24
94.182.69.0/24 maxlen: 24
94.182.70.0/24 maxlen: 24
94.182.71.0/24 maxlen: 24
94.182.80.0/20 maxlen: 20
94.182.82.0/24 maxlen: 24
94.182.85.0/24 maxlen: 24
94.182.88.0/22 maxlen: 24
94.182.93.0/24 maxlen: 24
94.182.96.0/24 maxlen: 24
94.182.98.0/24 maxlen: 24
94.182.99.0/24 maxlen: 24
94.182.100.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.104.0/22 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.110.0/23 maxlen: 23
94.182.112.0/20 maxlen: 20
94.182.112.0/23 maxlen: 23
94.182.128.0/19 maxlen: 19
94.182.128.0/20 maxlen: 20
94.182.128.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.130.0/23 maxlen: 23
94.182.130.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.133.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.138.0/23 maxlen: 24
94.182.139.0/24 maxlen: 24
94.182.141.0/24 maxlen: 24
94.182.143.0/24 maxlen: 24
94.182.144.0/20 maxlen: 20
94.182.145.0/24 maxlen: 24
94.182.146.0/23 maxlen: 24
94.182.146.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.148.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.153.0/24 maxlen: 24
94.182.154.0/24 maxlen: 24
94.182.155.0/24 maxlen: 24
94.182.157.0/24 maxlen: 24
94.182.159.0/24 maxlen: 24
94.182.160.0/19 maxlen: 19
94.182.160.0/20 maxlen: 20
94.182.162.0/23 maxlen: 23
94.182.163.0/24 maxlen: 24
94.182.164.0/24 maxlen: 24
94.182.168.0/24 maxlen: 24
94.182.169.0/24 maxlen: 24
94.182.172.0/24 maxlen: 24
94.182.174.0/24 maxlen: 24
94.182.176.0/20 maxlen: 20
94.182.176.0/23 maxlen: 24
94.182.176.0/24 maxlen: 24
94.182.177.0/24 maxlen: 24
94.182.178.0/23 maxlen: 23
94.182.180.0/23 maxlen: 23
94.182.182.0/23 maxlen: 23
94.182.182.0/24 maxlen: 24
94.182.183.0/24 maxlen: 24
94.182.184.0/22 maxlen: 22
94.182.184.0/23 maxlen: 23
94.182.184.0/24 maxlen: 24
94.182.186.0/23 maxlen: 23
94.182.188.0/23 maxlen: 23
94.182.188.0/24 maxlen: 24
94.182.189.0/24 maxlen: 24
94.182.190.0/24 maxlen: 24
94.182.191.0/24 maxlen: 24
94.182.192.0/19 maxlen: 19
94.182.192.0/24 maxlen: 24
94.182.193.0/24 maxlen: 24
94.182.196.0/24 maxlen: 24
94.182.197.0/24 maxlen: 24
94.182.199.0/24 maxlen: 24
94.182.204.0/22 maxlen: 22
94.182.208.0/20 maxlen: 20
94.182.208.0/24 maxlen: 24
94.182.213.0/24 maxlen: 24
94.182.222.0/23 maxlen: 23
94.182.222.0/24 maxlen: 24
94.182.224.0/20 maxlen: 20
94.182.226.0/24 maxlen: 24
94.182.228.0/22 maxlen: 22
94.182.238.0/24 maxlen: 24
94.182.239.0/24 maxlen: 24
94.182.240.0/20 maxlen: 20
94.182.240.0/23 maxlen: 23
94.182.244.0/22 maxlen: 22
94.182.248.0/22 maxlen: 22
94.182.252.0/24 maxlen: 24
94.182.254.0/24 maxlen: 24
94.183.0.0/20 maxlen: 20
94.183.16.0/20 maxlen: 20
94.183.22.0/23 maxlen: 23
94.183.24.0/24 maxlen: 24
94.183.32.0/21 maxlen: 21
94.183.40.0/21 maxlen: 21
94.183.48.0/20 maxlen: 20
94.183.58.0/24 maxlen: 24
94.183.58.1/32 maxlen: 32
94.183.62.0/24 maxlen: 24
94.183.64.0/20 maxlen: 20
94.183.77.0/24 maxlen: 24
94.183.80.0/20 maxlen: 20
94.183.96.0/20 maxlen: 20
94.183.98.0/24 maxlen: 24
94.183.112.0/20 maxlen: 20
94.183.128.0/21 maxlen: 21
94.183.136.0/21 maxlen: 21
94.183.144.0/20 maxlen: 20
94.183.160.0/20 maxlen: 20
94.183.176.0/21 maxlen: 21
94.183.184.0/21 maxlen: 21
94.183.184.0/24 maxlen: 24
94.183.192.0/20 maxlen: 20
94.183.208.0/20 maxlen: 24
94.183.224.0/20 maxlen: 20
94.183.229.0/24 maxlen: 24
94.183.240.0/20 maxlen: 20
151.238.0.0/15 maxlen: 24
151.238.0.0/18 maxlen: 24
151.239.128.0/17 maxlen: 24
151.239.128.0/18 maxlen: 24
151.239.128.0/19 maxlen: 24
151.239.160.0/19 maxlen: 24
151.239.192.0/18 maxlen: 24
151.239.192.0/19 maxlen: 24
151.239.224.0/19 maxlen: 24
185.73.0.0/22 maxlen: 24
185.73.0.0/23 maxlen: 23
185.73.0.0/24 maxlen: 24
185.73.1.0/24 maxlen: 24
185.73.2.0/23 maxlen: 23
185.73.2.0/24 maxlen: 24
185.73.3.0/24 maxlen: 24
2a0e::/26 maxlen: 26
2a0e:0:1::/48 maxlen: 48
2a0e:0:1::/52 maxlen: 52
2a0e:0:1:1000::/52 maxlen: 52
2a0e:0:1:2000::/52 maxlen: 52
2a0e:0:1:3000::/52 maxlen: 52
2a0e:0:2::/47 maxlen: 47
2a0e:0:4::/46 maxlen: 46
2a0e:0:40::/42 maxlen: 42
2a0e:0:80::/41 maxlen: 41
2a0e:0:100::/41 maxlen: 41
2a0e:0:180::/43 maxlen: 43
2a0e:0:1a0::/43 maxlen: 43
2a0e:4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:39:62:a3:30:01:93:b4:d2:60:34:fc:76:af:7d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 16 10:51:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50c9079c8abb5d6466c6f983be0bdc92ab037f28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:76:bd:7b:f2:7e:d3:a3:29:5f:10:3f:ce:
63:f9:a0:ca:81:a7:62:3b:8f:58:b2:c3:c9:a0:7e:
40:7f:94:71:58:e7:c0:48:c8:b6:24:32:1c:62:22:
ca:4a:87:f2:55:f7:21:cb:93:e9:4d:c0:82:1c:ba:
2f:ab:1d:97:85:64:58:55:13:0f:d7:08:a1:90:45:
d2:12:cd:01:6d:ec:2b:05:36:bc:59:72:27:e7:5a:
f4:f9:ec:c3:03:c5:db:c3:f7:25:d4:fa:21:d8:03:
38:74:aa:c8:d8:a1:de:56:ea:24:05:d7:8c:d0:87:
7e:11:3a:f6:af:60:83:15:62:91:60:ee:73:e6:dc:
d2:4d:9b:9b:a6:b2:d4:4f:10:d8:82:6d:71:d1:0a:
75:e1:fa:01:5c:2e:e0:ad:d6:b7:75:8c:d3:58:23:
37:e8:92:c4:6a:6c:17:e8:94:64:ad:dc:8e:fe:c7:
3f:be:a8:bb:e6:64:db:3c:ce:b1:5b:79:3a:2f:62:
73:1c:05:ec:b1:2f:3f:0c:c5:0c:29:e9:02:64:64:
3d:b8:ea:0c:06:a8:8b:05:78:1c:d3:ed:01:5e:a2:
78:bd:b7:00:bc:a0:7c:77:15:f3:6f:fe:d8:b3:78:
e1:5e:d5:b1:8a:92:65:97:0f:47:2b:ca:fc:7f:72:
b7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:C9:07:9C:8A:BB:5D:64:66:C6:F9:83:BE:0B:DC:92:AB:03:7F:28
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/UMkHnIq7XWRmxvmDvgvckqsDfyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.148.0.0/17
37.202.128.0/18
37.202.224.0-37.202.243.255
84.241.0.0/18
85.15.0.0/18
94.182.0.0/15
151.238.0.0/15
185.73.0.0/22
IPv6:
2a0e::/26
Signature Algorithm: sha256WithRSAEncryption
33:0b:1e:e9:5a:d3:a3:2e:07:ff:8c:fd:f8:a5:22:a1:f5:74:
e6:52:f0:ec:43:99:81:9a:7a:c5:bb:f0:05:1d:54:bf:ee:22:
fc:56:70:25:15:9d:05:0a:45:78:ba:82:5e:36:be:1d:cb:fe:
f1:89:97:eb:30:32:eb:8d:1a:88:d9:03:79:fd:e8:77:27:89:
a3:cb:d0:ab:0c:78:ff:08:08:39:1e:8e:50:99:56:23:17:50:
b6:0c:6e:d7:9c:bf:fb:34:48:e0:6e:e7:5b:89:d4:05:42:86:
b6:de:5f:8a:96:a3:f1:c0:0e:55:85:63:0c:bb:bf:21:4e:3e:
e2:b7:10:c1:b9:37:f0:2a:cd:18:01:51:bf:3d:cd:ca:e8:9e:
31:c5:7f:1d:75:a6:c9:58:3d:d0:af:01:c3:5e:c5:99:5f:14:
53:47:b7:ac:77:3a:b4:53:2c:d5:a5:fd:6e:59:50:c8:c1:fb:
69:5c:1b:88:e8:cd:5d:09:aa:bc:ac:20:98:c1:18:d0:10:c7:
73:b3:e6:08:10:0e:de:af:a6:bc:50:86:71:e4:cb:06:88:10:
4a:0e:a5:a9:a0:14:c2:60:1e:83:56:d4:ed:40:f0:e8:9b:73:
5a:97:05:29:0d:e6:63:19:82:d5:88:6c:26:ce:5d:59:7b:c4:
cf:95:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:30:35 2025 by rpki-client