Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/37k0nU6z7XRQ-nu_xSBO_wlWXs8.roa
File: 37k0nU6z7XRQ-nu_xSBO_wlWXs8.roa (raw, json)
Hash identifier: 31J9GQWFPTW55AXU0wB19k0rwdAvuXpa9Hqq0bbm5q0=
Subject key identifier: DF:B9:34:9D:4E:B3:ED:74:50:FA:7B:BF:C5:20:4E:FF:09:56:5E:CF
Certificate issuer: /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial: 019A2A5FF5DBBCBEDB8C0CC94C21AFF01279
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/37k0nU6z7XRQ-nu_xSBO_wlWXs8.roa
Signing time: Tue 28 Oct 2025 10:32:03 +0000
ROA not before: Tue 28 Oct 2025 10:32:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 46.80.0.0/12 maxlen: 12
62.153.0.0/16 maxlen: 16
62.154.0.0/15 maxlen: 15
62.156.0.0/14 maxlen: 14
62.224.0.0/14 maxlen: 14
79.192.0.0/10 maxlen: 10
80.128.0.0/11 maxlen: 11
80.128.0.0/12 maxlen: 12
80.144.0.0/13 maxlen: 13
80.152.0.0/14 maxlen: 14
80.156.0.0/16 maxlen: 16
80.157.0.0/16 maxlen: 16
80.157.8.0/21 maxlen: 21
80.157.16.0/20 maxlen: 20
84.128.0.0/10 maxlen: 10
87.128.0.0/10 maxlen: 10
91.0.0.0/10 maxlen: 10
93.192.0.0/10 maxlen: 10
192.166.49.0/24 maxlen: 24
193.158.0.0/15 maxlen: 15
194.25.0.0/16 maxlen: 16
194.150.228.0/23 maxlen: 23
195.145.0.0/16 maxlen: 16
195.243.0.0/16 maxlen: 16
212.184.0.0/15 maxlen: 15
217.0.0.0/13 maxlen: 13
217.80.0.0/12 maxlen: 12
217.224.0.0/11 maxlen: 11
2003::/19 maxlen: 19
2003::/23 maxlen: 23
2003:8:f400::/48 maxlen: 48
2003:8:f401::/48 maxlen: 48
2003:8:f402::/48 maxlen: 48
2003:8:f403::/48 maxlen: 48
2003:8:f404::/48 maxlen: 48
2003:8:f405::/48 maxlen: 48
2003:8:f406::/48 maxlen: 48
2003:8:f407::/48 maxlen: 48
2003:8:f408::/48 maxlen: 48
2003:8:f409::/48 maxlen: 48
2003:8:f40a::/48 maxlen: 48
2003:8:f40b::/48 maxlen: 48
2003:8:f40c::/48 maxlen: 48
2003:8:f40d::/48 maxlen: 48
2003:8:f40e::/48 maxlen: 48
2003:8:f40f::/48 maxlen: 48
2003:8:f412::/48 maxlen: 48
2003:8:f413::/48 maxlen: 48
2003:8:f414::/48 maxlen: 48
2003:8:f415::/48 maxlen: 48
2003:8:f416::/48 maxlen: 48
2003:8:f417::/48 maxlen: 48
2003:8:f418::/48 maxlen: 48
2003:8:f419::/48 maxlen: 48
2003:8:f41a::/48 maxlen: 48
2003:8:f41b::/48 maxlen: 48
2003:8:f41c::/48 maxlen: 48
2003:8:f41d::/48 maxlen: 48
2003:8:f41e::/48 maxlen: 48
2003:8:f41f::/48 maxlen: 48
2003:8:f420::/48 maxlen: 48
2003:8:f421::/48 maxlen: 48
2003:8:f422::/48 maxlen: 48
2003:8:f423::/48 maxlen: 48
2003:8:f424::/48 maxlen: 48
2003:8:f425::/48 maxlen: 48
2003:8:f426::/48 maxlen: 48
2003:8:f427::/48 maxlen: 48
2003:8:f428::/48 maxlen: 48
2003:8:f429::/48 maxlen: 48
2003:8:f42a::/48 maxlen: 48
2003:8:f42b::/48 maxlen: 48
2003:8:f500::/41 maxlen: 41
2003:3c0::/28 maxlen: 28
2003:3e0::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:5f:f5:db:bc:be:db:8c:0c:c9:4c:21:af:f0:12:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Validity
Not Before: Oct 28 10:32:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfb9349d4eb3ed7450fa7bbfc5204eff09565ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:34:96:a3:08:0e:99:3b:da:cc:cb:ee:5c:
c7:20:75:27:6f:2c:f8:68:e8:8c:be:b1:b4:fe:fc:
19:bf:91:aa:07:a8:0a:39:c3:e2:e2:5a:eb:4a:25:
4e:d3:0f:e3:67:fc:3b:86:e2:40:47:0f:87:07:a3:
4c:6c:77:51:c1:23:e6:69:58:7d:25:ce:45:bb:95:
e8:99:9d:c6:9f:0b:79:96:be:7b:df:5e:c3:e5:07:
5b:16:47:71:24:7e:fd:f8:70:f7:83:95:9b:83:42:
67:4a:54:41:29:bc:ae:a7:c6:eb:95:3d:56:23:fd:
cf:87:50:c6:2c:ce:93:ac:c2:e6:42:06:1a:d4:a2:
4e:68:ed:49:cd:57:d5:00:7c:84:86:03:0a:1a:2e:
90:95:46:87:e8:df:af:0f:c6:89:46:c0:4d:aa:1b:
bd:e0:b2:83:3a:f2:37:4c:da:5c:df:46:7b:75:1b:
e4:5f:a9:16:73:09:05:1e:4a:7b:ed:30:31:3f:e0:
d8:7a:fb:74:9d:44:5e:4f:54:50:a8:7f:d1:9a:fc:
a6:39:34:fe:3f:e5:f4:61:41:81:f2:1f:80:6a:8b:
a1:5c:f6:d9:30:1a:cc:cf:d4:9a:a3:fd:26:9f:cd:
04:de:15:ce:0f:18:d0:66:75:1e:39:50:fe:67:98:
d0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B9:34:9D:4E:B3:ED:74:50:FA:7B:BF:C5:20:4E:FF:09:56:5E:CF
X509v3 Authority Key Identifier:
keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/37k0nU6z7XRQ-nu_xSBO_wlWXs8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.80.0.0/12
62.153.0.0-62.159.255.255
62.224.0.0/14
79.192.0.0/10
80.128.0.0/11
84.128.0.0/10
87.128.0.0/10
91.0.0.0/10
93.192.0.0/10
192.166.49.0/24
193.158.0.0/15
194.25.0.0/16
194.150.228.0/23
195.145.0.0/16
195.243.0.0/16
212.184.0.0/15
217.0.0.0/13
217.80.0.0/12
217.224.0.0/11
IPv6:
2003::/19
Signature Algorithm: sha256WithRSAEncryption
41:b4:3d:3d:53:71:6a:fd:fc:cb:84:21:a6:cd:8e:2f:f3:b3:
b3:cc:83:06:26:97:ef:7c:64:5b:18:bf:d9:d8:4f:50:51:3c:
7a:62:af:6a:95:01:d6:b9:ec:4e:3a:b2:a0:8b:21:5c:ec:da:
a1:af:9f:85:30:11:8e:5a:5c:66:4d:04:61:f4:fb:92:bb:ff:
37:dc:b1:0d:a4:58:87:4e:31:18:27:3e:48:12:a7:74:1a:37:
79:63:b8:b8:0b:89:c3:cc:10:01:1f:b0:ac:07:7a:c5:da:ad:
3e:37:70:2f:a4:33:3d:1e:62:b4:45:78:05:71:58:5c:df:5a:
bd:3f:5a:2f:4a:ca:e5:a8:fa:6a:99:ba:84:3c:d5:ea:8a:5d:
90:30:e7:a3:3b:56:ff:98:30:80:ce:0c:3e:92:6a:ad:a3:29:
99:c4:7b:78:b4:93:6e:b9:0a:03:d9:a3:4d:53:c9:1e:f5:37:
61:9e:80:93:c9:1b:c5:cc:99:1c:05:95:d7:db:1b:b2:ac:cc:
fd:c1:e0:a7:d5:c4:74:c0:82:72:7c:20:e9:cd:cd:a8:36:07:
d3:9a:c6:bb:f0:c4:cb:32:d3:42:be:8a:08:f4:fc:d8:6d:1c:
58:3d:d7:6a:a0:07:1b:6f:fd:9f:a3:6a:22:a9:d8:70:43:a7:
1d:2f:ca:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:34:07 2025 by rpki-client