Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/r9aoUXhjBzFMOyzhXNAODBHv4GY.roa
File: r9aoUXhjBzFMOyzhXNAODBHv4GY.roa (raw, json)
Hash identifier: XNYE77w1isVB6qZpj8AqJdb/mmafFc7TaEnDP9vItDM=
Subject key identifier: AF:D6:A8:51:78:63:07:31:4C:3B:2C:E1:5C:D0:0E:0C:11:EF:E0:66
Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial: 019D66A0C65281283892FFE0F25499EB7B22
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/r9aoUXhjBzFMOyzhXNAODBHv4GY.roa
Signing time: Tue 07 Apr 2026 06:28:25 +0000
ROA not before: Tue 07 Apr 2026 06:28:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 37.202.224.0/22 maxlen: 24
37.202.228.0/22 maxlen: 24
37.202.232.0/22 maxlen: 24
37.202.235.0/24 maxlen: 24
37.202.236.0/22 maxlen: 24
37.202.240.0/24 maxlen: 24
37.202.242.0/24 maxlen: 24
37.202.244.0/22 maxlen: 24
37.202.248.0/24 maxlen: 24
37.202.251.0/24 maxlen: 24
94.182.81.0/24 maxlen: 24
94.182.101.0/24 maxlen: 24
94.182.103.0/24 maxlen: 24
94.182.104.0/23 maxlen: 24
94.182.107.0/24 maxlen: 24
94.182.108.0/24 maxlen: 24
94.182.109.0/24 maxlen: 24
94.182.114.0/24 maxlen: 24
94.182.116.0/24 maxlen: 24
94.182.129.0/24 maxlen: 24
94.182.131.0/24 maxlen: 24
94.182.132.0/24 maxlen: 24
94.182.134.0/24 maxlen: 24
94.182.135.0/24 maxlen: 24
94.182.136.0/24 maxlen: 24
94.182.144.0/24 maxlen: 24
94.182.145.0/24 maxlen: 24
94.182.147.0/24 maxlen: 24
94.182.149.0/24 maxlen: 24
94.182.150.0/24 maxlen: 24
94.182.151.0/24 maxlen: 24
94.182.152.0/24 maxlen: 24
94.182.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:66:a0:c6:52:81:28:38:92:ff:e0:f2:54:99:eb:7b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
Validity
Not Before: Apr 7 06:28:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=afd6a851786307314c3b2ce15cd00e0c11efe066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c6:cf:23:73:3c:95:b2:ed:82:17:12:e4:4c:
ed:76:6c:13:6f:7e:04:1d:d7:a3:e0:41:f0:5b:3f:
d4:af:72:f1:62:b3:a0:04:7b:d9:c0:95:3d:64:84:
6b:e9:7b:b2:50:55:2d:96:2a:67:0b:3b:34:c5:ef:
bf:8b:25:f3:8a:29:59:ee:f6:2d:47:d3:70:6e:1b:
f2:ca:a2:c0:62:73:43:d2:b2:8d:4b:e1:63:f5:f0:
66:b1:ef:3a:9b:19:a8:38:ef:4d:2a:3e:5e:89:2f:
3c:76:c8:22:a3:37:0e:52:a2:51:cb:1a:4e:50:6c:
f7:e9:2e:73:52:96:85:11:c2:5b:2b:da:96:12:68:
91:63:65:6f:97:2b:1e:a6:d9:d6:a7:75:4b:14:cb:
43:d9:00:13:5d:c5:0d:4b:8c:00:3b:db:18:63:d5:
62:00:62:2a:65:82:eb:ad:27:48:bc:36:10:7d:be:
ee:c9:40:18:91:d7:eb:64:41:02:d7:98:ea:df:e2:
35:82:db:7c:52:8c:63:c4:5e:27:e4:44:ce:f3:79:
08:65:76:81:9a:47:0b:eb:db:b4:ca:de:33:2b:df:
dd:5e:e4:3a:f1:80:5d:c1:ba:84:e7:86:38:7e:07:
a9:fa:43:df:77:8b:d1:79:af:bb:bc:4c:27:36:13:
77:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D6:A8:51:78:63:07:31:4C:3B:2C:E1:5C:D0:0E:0C:11:EF:E0:66
X509v3 Authority Key Identifier:
keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/r9aoUXhjBzFMOyzhXNAODBHv4GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.224.0-37.202.240.255
37.202.242.0/24
37.202.244.0-37.202.248.255
37.202.251.0/24
94.182.81.0/24
94.182.101.0/24
94.182.103.0-94.182.105.255
94.182.107.0-94.182.109.255
94.182.114.0/24
94.182.116.0/24
94.182.129.0/24
94.182.131.0-94.182.132.255
94.182.134.0-94.182.136.255
94.182.144.0/23
94.182.147.0/24
94.182.149.0-94.182.152.255
94.182.223.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:65:6a:19:5a:a0:75:54:c5:e0:1e:e4:bd:3b:5f:59:c9:06:
6f:2e:ac:ac:9f:48:6f:66:cc:62:61:39:6c:de:58:f4:f2:98:
21:46:b7:93:8a:59:36:7d:30:98:2f:49:a5:ab:df:56:d2:d7:
ae:f9:06:38:c8:2f:d6:0a:ac:94:8c:af:0d:79:f6:fc:ea:43:
fb:1a:c0:85:4c:46:53:5e:06:72:99:b8:48:06:d0:f1:4a:ee:
11:66:1a:15:cd:fd:0e:95:23:e5:14:1f:7f:70:a1:a4:b2:b9:
13:73:41:8c:e6:3d:60:84:d7:c7:e8:d4:a0:7d:79:43:2b:60:
2a:fe:13:5d:a1:f2:ec:08:c7:28:e7:4b:a7:67:4e:1b:64:ac:
d3:ba:66:94:41:b1:dd:8e:45:56:36:48:7b:e3:64:f7:df:fd:
24:ac:3e:47:89:74:a4:00:01:bd:b5:29:d2:2c:aa:ea:50:23:
5d:1a:e5:8f:a3:46:53:69:2b:c5:64:3e:48:c6:a2:61:df:70:
8c:e7:db:9a:e6:91:7b:52:eb:76:0b:90:cf:70:45:4b:aa:43:
2b:69:60:c0:11:ef:47:2c:f7:9d:a1:e5:b9:89:cc:bd:8f:82:
d5:03:6c:68:72:20:bd:5b:9a:aa:2f:4e:9a:83:13:1d:9a:6e:
9a:39:5d:58
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:16 2026 by rpki-client