Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/3bT1O_SQsUulP7kZ8G_HdJMH7pY.roa
File: 3bT1O_SQsUulP7kZ8G_HdJMH7pY.roa (raw, json)
Hash identifier: 9U1W+Z0eIujIrjWYIgvvd7GMM+c2K8HBzoLNrO660Io=
Subject key identifier: DD:B4:F5:3B:F4:90:B1:4B:A5:3F:B9:19:F0:6F:C7:74:93:07:EE:96
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019FA79D09825125879D798AAD41FEF1D1A0
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/3bT1O_SQsUulP7kZ8G_HdJMH7pY.roa
Signing time: Tue 28 Jul 2026 07:25:14 +0000
ROA not before: Tue 28 Jul 2026 07:25:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/24 maxlen: 24
37.202.241.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.245.0/24 maxlen: 24
37.202.248.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/23 maxlen: 24
94.182.106.0/24 maxlen: 24
94.182.107.0/24 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.114.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.137.0/24 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:9d:09:82:51:25:87:9d:79:8a:ad:41:fe:f1:d1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Jul 28 07:25:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ddb4f53bf490b14ba53fb919f06fc7749307ee96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:38:48:bb:b6:f7:35:8c:9a:ce:d8:74:32:
33:80:cc:3a:96:ab:80:cf:ca:7c:03:35:b0:33:79:
ce:b5:98:41:ce:1c:1c:84:10:15:45:85:5d:9f:16:
ed:71:07:16:74:b2:37:f0:e2:d3:7d:2f:ff:23:df:
92:0e:54:f5:95:fb:20:a1:04:6b:45:3b:f3:59:6e:
71:85:35:1f:bc:a0:8b:9e:03:46:a6:e7:78:49:36:
eb:91:f5:0a:ed:64:b2:0d:21:20:7f:53:74:bd:3f:
60:4a:89:a1:45:c2:da:3f:f8:e9:79:34:11:4d:0d:
25:ab:cb:0c:2a:11:39:ba:35:d7:a2:07:9e:68:8a:
6f:1c:f2:82:9a:6a:1b:94:83:1f:3b:33:98:17:54:
9a:d4:3d:34:ce:01:a7:6d:bb:29:80:38:6e:ba:e1:
9a:09:17:ca:7c:c0:a4:e2:24:16:41:54:cb:56:00:
fa:fb:cf:ec:c3:cd:56:5b:2c:e1:4f:bf:5e:95:3b:
04:c8:6e:d7:de:7c:f6:49:c1:9d:6d:42:b5:f6:ca:
40:5b:37:2b:ef:25:50:87:c9:b8:f6:5a:57:09:ae:
2a:6e:9f:81:5b:06:17:ba:be:32:56:31:4b:59:e6:
07:a3:38:f9:fa:83:f4:8e:39:d5:55:14:cd:e5:aa:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B4:F5:3B:F4:90:B1:4B:A5:3F:B9:19:F0:6F:C7:74:93:07:EE:96
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/3bT1O_SQsUulP7kZ8G_HdJMH7pY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.242.255
37.202.244.0-37.202.248.255
37.202.251.0/24
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.109.255
94.182.114.0/24
94.182.116.0/24
94.182.129.0/24
94.182.131.0-94.182.132.255
94.182.134.0-94.182.137.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:49:f1:d5:a3:4e:f3:d8:b4:2c:be:ce:b1:cf:9b:78:45:46:
24:56:46:bb:99:d8:74:80:77:9a:8e:91:af:a8:9a:3e:a9:c0:
4b:b3:3e:ca:a0:6d:0c:c8:46:9b:42:e4:86:38:3e:d1:1b:cb:
dd:e3:47:fa:b8:52:7c:50:37:d4:a8:32:f2:ee:88:46:22:ed:
15:83:b8:22:68:a0:3d:ee:78:d1:2e:1d:ca:8e:48:b7:db:36:
8b:4a:8c:42:af:50:be:12:20:25:81:eb:6b:9f:0e:fd:73:6b:
7f:95:63:cd:00:bb:a8:c7:c3:60:4e:c3:14:80:cd:30:f0:86:
34:cb:d1:9b:86:37:10:78:6f:42:1f:03:af:ee:d5:86:23:e7:
31:35:f8:7e:51:87:2d:34:b0:87:5b:3b:b1:2a:1c:ae:6a:14:
06:6f:3c:e1:df:79:e5:59:c8:35:d3:f9:11:fe:d9:2e:df:16:
f6:c0:5d:cb:c8:2b:92:bd:d8:70:cd:b2:6f:2c:2a:f2:90:db:
2b:bb:fd:5e:99:2b:34:02:52:48:96:ef:1b:ae:58:1a:dc:f0:
2f:0c:35:cf:89:45:b3:b8:d7:53:e5:ff:ef:52:e9:fb:fb:cb:
58:11:e0:f9:86:21:bb:a4:64:19:5b:fd:a1:fe:65:bb:5f:e8:
24:d3:7f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:19:58 2026 by rpki-client