Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R0OSdvVHfHQfXgpoReR9iAxFdWw.roa
File: R0OSdvVHfHQfXgpoReR9iAxFdWw.roa (raw, json)
Hash identifier: QM4Jr+jp2jhIt62cNMpfrKzgpknEBzAFzjnq96rXO9s=
Subject key identifier: 47:43:92:76:F5:47:7C:74:1F:5E:0A:68:45:E4:7D:88:0C:45:75:6C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 019A16BCCCBFDB9543B949CFE6CCEC950390
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R0OSdvVHfHQfXgpoReR9iAxFdWw.roa
Signing time: Fri 24 Oct 2025 15:01:03 +0000
ROA not before: Fri 24 Oct 2025 15:01:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58272
IP address blocks: 37.18.0.0/24 maxlen: 24
37.18.23.0/24 maxlen: 24
37.18.25.0/24 maxlen: 24
37.18.60.0/24 maxlen: 24
37.18.63.0/24 maxlen: 24
37.18.78.0/24 maxlen: 24
37.18.82.0/24 maxlen: 24
37.18.103.0/24 maxlen: 24
37.18.106.0/24 maxlen: 24
37.18.125.0/24 maxlen: 24
37.18.126.0/24 maxlen: 24
37.230.130.0/24 maxlen: 24
37.230.132.0/24 maxlen: 24
37.230.134.0/24 maxlen: 24
37.230.135.0/24 maxlen: 24
37.230.140.0/24 maxlen: 24
37.230.145.0/24 maxlen: 24
37.230.151.0/24 maxlen: 24
37.230.163.0/24 maxlen: 24
37.230.176.0/24 maxlen: 24
37.230.177.0/24 maxlen: 24
37.230.178.0/24 maxlen: 24
37.230.182.0/24 maxlen: 24
37.230.183.0/24 maxlen: 24
37.230.187.0/24 maxlen: 24
37.230.200.0/24 maxlen: 24
37.230.208.0/24 maxlen: 24
37.230.226.0/24 maxlen: 24
37.230.227.0/24 maxlen: 24
37.230.230.0/24 maxlen: 24
37.230.231.0/24 maxlen: 24
37.230.238.0/24 maxlen: 24
37.230.254.0/24 maxlen: 24
37.230.255.0/24 maxlen: 24
46.243.138.0/24 maxlen: 24
46.243.139.0/24 maxlen: 24
46.243.140.0/24 maxlen: 24
46.243.148.0/24 maxlen: 24
46.243.149.0/24 maxlen: 24
46.243.163.0/24 maxlen: 24
46.243.204.0/24 maxlen: 24
46.243.214.0/24 maxlen: 24
46.243.215.0/24 maxlen: 24
46.243.220.0/24 maxlen: 24
46.243.221.0/24 maxlen: 24
46.243.222.0/24 maxlen: 24
46.243.223.0/24 maxlen: 24
46.243.224.0/24 maxlen: 24
46.243.225.0/24 maxlen: 24
46.243.236.0/24 maxlen: 24
46.243.237.0/24 maxlen: 24
46.243.238.0/24 maxlen: 24
46.243.239.0/24 maxlen: 24
46.243.240.0/24 maxlen: 24
46.243.241.0/24 maxlen: 24
46.243.242.0/24 maxlen: 24
46.243.243.0/24 maxlen: 24
46.243.246.0/23 maxlen: 23
46.243.246.0/24 maxlen: 24
46.243.247.0/24 maxlen: 24
46.243.248.0/24 maxlen: 24
46.243.249.0/24 maxlen: 24
46.243.250.0/24 maxlen: 24
46.243.251.0/24 maxlen: 24
128.0.71.0/24 maxlen: 24
141.101.132.0/24 maxlen: 24
141.101.133.0/24 maxlen: 24
141.101.134.0/24 maxlen: 24
141.101.135.0/24 maxlen: 24
141.101.136.0/24 maxlen: 24
141.101.138.0/23 maxlen: 23
141.101.143.0/24 maxlen: 24
141.101.144.0/24 maxlen: 24
141.101.145.0/24 maxlen: 24
141.101.146.0/24 maxlen: 24
141.101.147.0/24 maxlen: 24
141.101.148.0/24 maxlen: 24
141.101.149.0/24 maxlen: 24
141.101.150.0/24 maxlen: 24
141.101.153.0/24 maxlen: 24
141.101.154.0/24 maxlen: 24
141.101.155.0/24 maxlen: 24
141.101.156.0/24 maxlen: 24
141.101.157.0/24 maxlen: 24
141.101.158.0/24 maxlen: 24
141.101.159.0/24 maxlen: 24
141.101.160.0/24 maxlen: 24
141.101.161.0/24 maxlen: 24
141.101.162.0/24 maxlen: 24
141.101.163.0/24 maxlen: 24
141.101.164.0/24 maxlen: 24
141.101.165.0/24 maxlen: 24
141.101.166.0/24 maxlen: 24
141.101.167.0/24 maxlen: 24
141.101.168.0/24 maxlen: 24
141.101.169.0/24 maxlen: 24
141.101.170.0/24 maxlen: 24
141.101.171.0/24 maxlen: 24
141.101.172.0/24 maxlen: 24
141.101.173.0/24 maxlen: 24
141.101.174.0/24 maxlen: 24
141.101.179.0/24 maxlen: 24
141.101.189.0/24 maxlen: 24
141.101.190.0/24 maxlen: 24
141.101.191.0/24 maxlen: 24
141.101.198.0/24 maxlen: 24
141.101.209.0/24 maxlen: 24
141.101.216.0/24 maxlen: 24
141.101.230.0/24 maxlen: 24
141.101.233.0/24 maxlen: 24
141.101.235.0/24 maxlen: 24
141.101.237.0/24 maxlen: 24
141.101.238.0/24 maxlen: 24
141.101.242.0/24 maxlen: 24
141.101.245.0/24 maxlen: 24
141.101.252.0/24 maxlen: 24
141.101.253.0/24 maxlen: 24
141.101.254.0/24 maxlen: 24
141.101.255.0/24 maxlen: 24
178.170.136.0/24 maxlen: 24
178.170.137.0/24 maxlen: 24
178.170.138.0/24 maxlen: 24
178.170.139.0/24 maxlen: 24
178.170.140.0/24 maxlen: 24
178.170.141.0/24 maxlen: 24
178.170.142.0/24 maxlen: 24
178.170.144.0/24 maxlen: 24
178.170.145.0/24 maxlen: 24
178.170.146.0/24 maxlen: 24
178.170.172.0/24 maxlen: 24
178.170.187.0/24 maxlen: 24
178.170.188.0/24 maxlen: 24
185.4.148.0/24 maxlen: 24
185.4.149.0/24 maxlen: 24
185.4.150.0/24 maxlen: 24
185.4.151.0/24 maxlen: 24
188.72.80.0/24 maxlen: 24
188.72.81.0/24 maxlen: 24
188.72.82.0/24 maxlen: 24
188.72.83.0/24 maxlen: 24
188.72.84.0/24 maxlen: 24
188.72.85.0/24 maxlen: 24
188.72.86.0/24 maxlen: 24
188.72.87.0/24 maxlen: 24
188.72.89.0/24 maxlen: 24
188.72.95.0/24 maxlen: 24
188.72.97.0/24 maxlen: 24
188.72.98.0/24 maxlen: 24
188.72.101.0/24 maxlen: 24
188.72.102.0/24 maxlen: 24
188.72.114.0/24 maxlen: 24
188.72.115.0/24 maxlen: 24
188.72.116.0/24 maxlen: 24
188.72.119.0/24 maxlen: 24
188.72.124.0/24 maxlen: 24
188.72.125.0/24 maxlen: 24
217.150.88.0/24 maxlen: 24
217.150.89.0/24 maxlen: 24
217.150.90.0/24 maxlen: 24
217.150.91.0/24 maxlen: 24
217.150.92.0/24 maxlen: 24
217.150.93.0/24 maxlen: 24
217.150.94.0/24 maxlen: 24
217.150.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:16:bc:cc:bf:db:95:43:b9:49:cf:e6:cc:ec:95:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Oct 24 15:01:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47439276f5477c741f5e0a6845e47d880c45756c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:68:03:67:bf:d1:64:84:fa:a1:ff:6c:6e:bf:
99:0e:f8:27:07:c3:0e:16:c0:6f:65:18:ae:85:eb:
08:86:77:b1:fe:40:13:9a:e3:47:eb:e6:c9:8a:8b:
d6:c2:3f:13:6d:da:e7:b4:c7:29:62:75:c0:55:17:
73:3d:6a:b9:28:b4:34:4d:f6:a1:98:26:ee:71:dc:
07:a3:27:05:51:81:9d:28:7b:90:8f:d9:e9:f3:55:
91:09:ff:32:66:50:06:00:35:81:d0:e5:ee:cf:09:
24:14:22:51:2e:ea:8c:47:89:e2:f9:50:d6:ba:94:
b2:23:88:5c:b8:0c:40:0b:76:f7:27:9e:18:8b:ff:
c2:94:2c:27:fd:24:73:b8:71:30:d0:45:fa:8f:1a:
23:fc:0a:29:4c:81:0a:58:c3:4c:66:57:26:a3:3d:
96:46:75:f1:3d:39:dd:cb:3d:46:89:29:bd:a8:5a:
8b:c4:39:32:72:8a:7d:6c:07:e5:f9:f5:60:44:7c:
15:5f:c8:0a:3a:85:25:9b:23:88:89:df:f5:d9:9b:
ae:07:51:80:25:7e:c3:5f:6e:1e:55:3b:c0:0e:4e:
c6:5d:17:bb:01:3f:e8:dd:05:5d:0a:d7:70:a3:b7:
24:6c:03:03:6e:b3:7d:ec:d8:5b:2c:f8:36:af:8d:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:43:92:76:F5:47:7C:74:1F:5E:0A:68:45:E4:7D:88:0C:45:75:6C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/R0OSdvVHfHQfXgpoReR9iAxFdWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.18.0.0/24
37.18.23.0/24
37.18.25.0/24
37.18.60.0/24
37.18.63.0/24
37.18.78.0/24
37.18.82.0/24
37.18.103.0/24
37.18.106.0/24
37.18.125.0-37.18.126.255
37.230.130.0/24
37.230.132.0/24
37.230.134.0/23
37.230.140.0/24
37.230.145.0/24
37.230.151.0/24
37.230.163.0/24
37.230.176.0-37.230.178.255
37.230.182.0/23
37.230.187.0/24
37.230.200.0/24
37.230.208.0/24
37.230.226.0/23
37.230.230.0/23
37.230.238.0/24
37.230.254.0/23
46.243.138.0-46.243.140.255
46.243.148.0/23
46.243.163.0/24
46.243.204.0/24
46.243.214.0/23
46.243.220.0-46.243.225.255
46.243.236.0-46.243.243.255
46.243.246.0-46.243.251.255
128.0.71.0/24
141.101.132.0-141.101.136.255
141.101.138.0/23
141.101.143.0-141.101.150.255
141.101.153.0-141.101.174.255
141.101.179.0/24
141.101.189.0-141.101.191.255
141.101.198.0/24
141.101.209.0/24
141.101.216.0/24
141.101.230.0/24
141.101.233.0/24
141.101.235.0/24
141.101.237.0-141.101.238.255
141.101.242.0/24
141.101.245.0/24
141.101.252.0/22
178.170.136.0-178.170.142.255
178.170.144.0-178.170.146.255
178.170.172.0/24
178.170.187.0-178.170.188.255
185.4.148.0/22
188.72.80.0/21
188.72.89.0/24
188.72.95.0/24
188.72.97.0-188.72.98.255
188.72.101.0-188.72.102.255
188.72.114.0-188.72.116.255
188.72.119.0/24
188.72.124.0/23
217.150.88.0/21
Signature Algorithm: sha256WithRSAEncryption
15:a5:7b:af:47:c2:5f:f7:5c:55:92:69:93:e9:1f:c9:1d:58:
26:43:6d:61:d5:e4:46:4a:0c:69:c2:33:c5:f2:e4:7b:3f:b0:
30:b9:8f:8f:e2:2b:8a:07:aa:16:76:73:ce:87:9d:2b:d6:3d:
8d:02:f9:8b:65:60:3b:19:32:93:18:67:a8:27:1f:a4:04:f2:
55:54:4c:41:6a:cd:fa:13:54:cc:29:74:f2:45:4b:d6:fa:7b:
7b:d5:60:a9:e8:24:4c:ca:89:5c:2e:32:58:81:82:68:e7:ed:
14:b9:1d:de:8d:f9:ba:d4:56:83:bb:00:b1:70:c0:05:3a:5e:
5c:64:25:dc:a9:b7:3a:0a:39:c9:2b:3e:e4:93:e2:83:cf:59:
54:82:f1:5a:53:c2:57:f5:79:5d:8d:6b:99:d0:90:22:9a:f6:
91:97:a3:f2:ee:4f:65:39:65:94:1e:a3:7c:63:1f:eb:f5:e7:
8d:62:2c:13:e8:59:50:4b:35:d5:f9:1a:ce:d5:2b:a8:59:0c:
e0:b3:25:ef:5f:cd:65:33:2c:e1:db:94:05:e9:20:ca:dc:7b:
e4:ba:6a:85:3f:f3:6f:22:e3:81:7e:4f:36:02:b7:ef:6f:e1:
f5:ba:3f:a1:8d:d5:95:34:80:2a:b7:98:bb:89:1b:ff:bd:07:
46:94:fa:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 01:01:55 2025 by rpki-client