Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/1-AqtvECSVD4xYU0xF1GEVmNs0H0.roa
File: 1-AqtvECSVD4xYU0xF1GEVmNs0H0.roa (raw, json)
Hash identifier: /n8rLmgBGlq8dKiSn+p+4gvvjC8V6bE9/4EnFk4XSXA=
Subject key identifier: F8:0A:AD:BC:40:92:54:3E:31:61:4D:31:17:51:84:56:63:6C:D0:7D
Certificate issuer: /CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Certificate serial: 019E8D44580C0BBADEA98E0C43944ADF526E
Authority key identifier: FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/1-AqtvECSVD4xYU0xF1GEVmNs0H0.roa
Signing time: Wed 03 Jun 2026 11:35:26 +0000
ROA not before: Wed 03 Jun 2026 11:35:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 103.166.155.0/24 maxlen: 24
193.17.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:44:58:0c:0b:ba:de:a9:8e:0c:43:94:4a:df:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffb2627672877d0f6de9bc4e7e186eedd1356110
Validity
Not Before: Jun 3 11:35:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f80aadbc4092543e31614d3117518456636cd07d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:61:c2:db:a1:a1:2a:36:8b:67:16:82:b2:
56:44:5e:0d:23:95:7e:c7:c3:d5:c9:2d:c9:87:15:
37:4a:f0:8a:88:84:de:c1:74:82:48:22:80:96:dc:
6d:90:60:a8:ff:10:12:84:dd:06:f1:62:0b:ce:2f:
b4:32:69:f5:fe:33:4d:a2:1c:32:0e:62:78:12:7e:
21:70:b4:ea:6b:64:0b:05:55:38:0f:28:00:d8:84:
78:c1:f0:8e:a7:30:72:aa:23:01:d0:7b:eb:1d:3e:
28:05:a7:04:d5:c3:9a:d3:be:af:6b:14:ad:ba:3c:
33:b3:12:0e:bc:8f:a8:46:51:58:64:1e:f8:a3:5e:
10:c6:2b:14:d2:04:9c:97:a7:09:2b:a7:2a:df:1b:
e8:74:a1:1d:96:aa:26:18:19:55:70:5c:58:ef:1a:
4d:fa:7c:81:1a:6f:4d:36:2d:45:a5:76:6b:a2:2b:
4e:1f:45:d2:da:8f:e8:98:ea:38:0d:18:6f:b0:03:
86:c9:48:52:c6:47:f9:c9:23:cc:d3:aa:e1:19:e5:
3b:da:b6:a8:54:49:65:35:4a:bc:8e:ad:28:16:cc:
9d:de:ae:f7:e3:93:5d:2f:90:a0:3d:d8:0a:45:70:
f8:8f:eb:84:61:4d:9f:d0:1d:0c:e5:55:78:76:e7:
54:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0A:AD:BC:40:92:54:3E:31:61:4D:31:17:51:84:56:63:6C:D0:7D
X509v3 Authority Key Identifier:
keyid:FF:B2:62:76:72:87:7D:0F:6D:E9:BC:4E:7E:18:6E:ED:D1:35:61:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7JidnKHfQ9t6bxOfhhu7dE1YRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/1-AqtvECSVD4xYU0xF1GEVmNs0H0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/22c510-3480-4ce1-8dd8-19746947558d/1/_7JidnKHfQ9t6bxOfhhu7dE1YRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.166.155.0/24
193.17.42.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:20:8b:a5:7a:f0:ce:a9:03:1e:4c:48:42:e3:e9:85:a3:bc:
63:e1:82:7c:6f:52:2b:7a:a8:2a:07:4b:31:64:ed:56:10:8c:
cb:1c:ff:b6:8d:60:5b:71:e3:ec:bd:d0:56:3a:3d:d0:9c:2f:
95:ee:3e:39:9e:b9:63:7d:69:c2:98:b1:9b:97:06:58:dd:5d:
5b:64:3f:60:5a:e2:84:88:9f:15:ea:f2:3f:25:17:9c:09:57:
73:26:2e:15:30:b5:76:d8:d3:c0:76:49:f2:9b:d5:66:52:5b:
21:36:c3:5d:a3:f3:3c:1a:f5:35:4e:f9:47:09:90:77:9b:d9:
71:f6:0c:51:aa:05:f5:f9:60:92:2d:cb:69:d5:7a:13:3a:fb:
50:03:82:db:29:41:b9:07:d3:36:3a:8c:7d:ef:ad:20:c6:8c:
15:5e:72:08:0f:b0:06:3a:97:e3:64:2b:b7:99:6c:63:09:2a:
60:c9:fa:05:b9:e0:53:a1:15:39:22:b6:80:b8:5a:4e:99:58:
c3:09:ad:27:e6:d8:86:2d:b1:1b:46:d8:91:7a:e8:42:a5:72:
50:f0:01:a7:8c:51:b0:22:9f:bf:d5:4d:a4:20:65:ee:47:1f:
ed:82:1e:53:e8:97:0f:66:b4:8b:7e:33:a4:a8:56:02:30:d0:
58:ab:21:2f
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZ6NRFgMC7reqY4MQ5RK31JuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYjI2Mjc2NzI4NzdkMGY2ZGU5YmM0ZTdlMTg2ZWVkZDEz
NTYxMTAwHhcNMjYwNjAzMTEzNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODBhYWRiYzQwOTI1NDNlMzE2MTRkMzExNzUxODQ1NjYzNmNkMDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaNhwtuhoSo2i2cWgrJWRF4NI5V+
x8PVyS3JhxU3SvCKiITewXSCSCKAltxtkGCo/xAShN0G8WILzi+0Mmn1/jNNohwy
DmJ4En4hcLTqa2QLBVU4DygA2IR4wfCOpzByqiMB0HvrHT4oBacE1cOa076vaxSt
ujwzsxIOvI+oRlFYZB74o14QxisU0gScl6cJK6cq3xvodKEdlqomGBlVcFxY7xpN
+nyBGm9NNi1FpXZroitOH0XS2o/omOo4DRhvsAOGyUhSxkf5ySPM06rhGeU72rao
VEllNUq8jq0oFsyd3q7345NdL5CgPdgKRXD4j+uEYU2f0B0M5VV4dudUgQIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPgKrbxAklQ+MWFNMRdRhFZjbNB9MB8GA1UdIwQY
MBaAFP+yYnZyh30Pbem8Tn4Ybu3RNWEQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzdKaWRuS0hmUTl0NmJ4T2ZoaHU3ZEUxWVJBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMmM1MTAtMzQ4MC00Y2UxLThkZDgt
MTk3NDY5NDc1NThkLzEvMS1BcXR2RUNTVkQ0eFlVMHhGMUdFVm1OczBIMC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzkvMjJjNTEwLTM0ODAtNGNlMS04ZGQ4LTE5NzQ2OTQ3NTU4
ZC8xL183SmlkbktIZlE5dDZieE9maGh1N2RFMVlSQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAGemmwME
AMERKjANBgkqhkiG9w0BAQsFAAOCAQEAiyCLpXrwzqkDHkxIQuPphaO8Y+GCfG9S
K3qoKgdLMWTtVhCMyxz/to1gW3Hj7L3QVjo90Jwvle4+OZ65Y31pwpixm5cGWN1d
W2Q/YFrihIifFeryPyUXnAlXcyYuFTC1dtjTwHZJ8pvVZlJbITbDXaPzPBr1NU75
RwmQd5vZcfYMUaoF9flgki3LadV6Ezr7UAOC2ylBuQfTNjqMfe+tIMaMFV5yCA+w
BjqX42Qrt5lsYwkqYMn6BbngU6EVOSK2gLhaTplYwwmtJ+bYhi2xG0bYkXroQqVy
UPABp4xRsCKfv9VNpCBl7kcf7YIeU+iXD2a0i34zpKhWAjDQWKshLw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:29 2026 by rpki-client