Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/035ln37YeqsWXEgvqkRCVHt3Ri8.roa
File: 035ln37YeqsWXEgvqkRCVHt3Ri8.roa (raw, json)
Hash identifier: R/WkyEtwI6D0vokhj8mKQ0vbvvnYXtwev6BJkOiTzLc=
Subject key identifier: D3:7E:65:9F:7E:D8:7A:AB:16:5C:48:2F:AA:44:42:54:7B:77:46:2F
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236860C90403756F70BCAF4888BECB17
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/035ln37YeqsWXEgvqkRCVHt3Ri8.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 152.234.165.0/24 maxlen: 24
177.177.208.0/24 maxlen: 24
177.177.213.0/24 maxlen: 24
177.177.214.0/24 maxlen: 24
177.177.217.0/24 maxlen: 24
177.177.218.0/24 maxlen: 24
177.177.220.0/24 maxlen: 24
177.177.221.0/24 maxlen: 24
177.202.197.0/24 maxlen: 24
177.203.49.0/24 maxlen: 24
177.203.51.0/24 maxlen: 24
177.203.54.0/24 maxlen: 24
177.203.55.0/24 maxlen: 24
177.203.57.0/24 maxlen: 24
177.203.58.0/24 maxlen: 24
177.203.60.0/24 maxlen: 24
177.203.61.0/24 maxlen: 24
179.66.177.0/24 maxlen: 24
179.66.179.0/24 maxlen: 24
179.66.182.0/24 maxlen: 24
179.66.183.0/24 maxlen: 24
179.66.185.0/24 maxlen: 24
179.66.186.0/24 maxlen: 24
179.66.189.0/24 maxlen: 24
179.236.33.0/24 maxlen: 24
179.236.35.0/24 maxlen: 24
179.236.38.0/24 maxlen: 24
179.236.39.0/24 maxlen: 24
179.236.41.0/24 maxlen: 24
179.236.42.0/24 maxlen: 24
179.236.44.0/24 maxlen: 24
179.236.45.0/24 maxlen: 24
179.236.47.0/24 maxlen: 24
179.252.209.0/24 maxlen: 24
179.252.211.0/24 maxlen: 24
179.252.214.0/24 maxlen: 24
179.252.215.0/24 maxlen: 24
179.252.216.0/24 maxlen: 24
179.252.217.0/24 maxlen: 24
179.252.218.0/24 maxlen: 24
179.252.221.0/24 maxlen: 24
179.252.223.0/24 maxlen: 24
179.255.177.0/24 maxlen: 24
179.255.179.0/24 maxlen: 24
179.255.180.0/24 maxlen: 24
179.255.182.0/24 maxlen: 24
179.255.183.0/24 maxlen: 24
186.240.187.0/24 maxlen: 24
186.240.188.0/24 maxlen: 24
186.240.189.0/24 maxlen: 24
186.240.190.0/24 maxlen: 24
187.5.225.0/24 maxlen: 24
187.5.230.0/24 maxlen: 24
187.5.233.0/24 maxlen: 24
187.5.234.0/24 maxlen: 24
187.5.237.0/24 maxlen: 24
200.225.169.0/24 maxlen: 24
200.225.182.0/24 maxlen: 24
200.225.183.0/24 maxlen: 24
200.225.186.0/24 maxlen: 24
201.4.105.0/24 maxlen: 24
201.4.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:60:c9:04:03:75:6f:70:bc:af:48:88:be:cb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d37e659f7ed87aab165c482faa4442547b77462f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:41:e1:4f:6a:8b:5b:e0:98:31:2b:cd:77:38:
93:eb:bc:9b:11:d7:f1:19:b2:b9:07:a9:ae:94:1c:
37:78:fd:1e:a6:ed:25:47:50:99:6e:32:e1:b7:5b:
f6:18:ad:ec:cf:97:d5:98:13:09:8c:9a:73:20:e2:
b4:ad:7a:f5:cb:ea:56:d4:d4:0e:b5:d8:d0:43:68:
a3:51:60:4f:ba:ab:f4:c8:83:d4:7e:86:70:67:2f:
9b:2e:9b:72:76:50:27:b0:08:6a:aa:3d:95:2f:ed:
d9:92:8a:89:84:65:62:00:4b:24:cb:de:ac:07:20:
cd:03:b3:86:49:52:23:24:e9:5a:c7:81:b4:37:bb:
b5:8b:78:c4:bd:ec:92:9e:71:6a:99:c0:bc:c3:ac:
45:11:e8:4b:1b:9a:b9:c1:d4:7a:c8:c2:70:1f:a9:
5d:fc:b4:bf:cf:44:7c:25:0d:75:72:0d:8e:3d:90:
f0:be:35:a8:91:5d:d3:5d:32:82:a5:65:91:46:e1:
a4:f3:59:93:6f:93:29:81:7d:f5:7f:6b:db:d1:30:
7c:69:69:76:ab:0e:7f:0c:de:a2:3a:69:ca:07:92:
b3:3f:2a:22:fa:fc:95:b3:b5:56:9d:0f:f6:fa:de:
04:0e:be:1c:67:92:56:39:fa:40:59:35:47:fb:2f:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7E:65:9F:7E:D8:7A:AB:16:5C:48:2F:AA:44:42:54:7B:77:46:2F
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/035ln37YeqsWXEgvqkRCVHt3Ri8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.165.0/24
177.177.208.0/24
177.177.213.0-177.177.214.255
177.177.217.0-177.177.218.255
177.177.220.0/23
177.202.197.0/24
177.203.49.0/24
177.203.51.0/24
177.203.54.0/23
177.203.57.0-177.203.58.255
177.203.60.0/23
179.66.177.0/24
179.66.179.0/24
179.66.182.0/23
179.66.185.0-179.66.186.255
179.66.189.0/24
179.236.33.0/24
179.236.35.0/24
179.236.38.0/23
179.236.41.0-179.236.42.255
179.236.44.0/23
179.236.47.0/24
179.252.209.0/24
179.252.211.0/24
179.252.214.0-179.252.218.255
179.252.221.0/24
179.252.223.0/24
179.255.177.0/24
179.255.179.0-179.255.180.255
179.255.182.0/23
186.240.187.0-186.240.190.255
187.5.225.0/24
187.5.230.0/24
187.5.233.0-187.5.234.255
187.5.237.0/24
200.225.169.0/24
200.225.182.0/23
200.225.186.0/24
201.4.105.0/24
201.4.119.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:73:54:76:aa:58:dc:1a:a9:cb:2e:8c:8f:bf:9b:da:d0:d4:
50:92:1a:6c:29:21:d7:81:a4:e2:15:ea:7f:a8:f0:04:ec:cd:
b8:78:9d:57:e6:dc:ea:d8:31:fd:ff:7c:c4:e6:4c:34:3a:83:
79:82:82:1c:cb:0f:4e:ac:cf:7e:c8:ff:6c:1f:9c:37:90:e4:
32:ea:ec:db:bf:30:f2:67:12:2e:85:68:09:4c:3e:9e:f8:e4:
5d:53:3d:47:e3:fd:4a:40:9f:e9:93:f0:8a:c9:dd:1d:3e:4d:
e2:5d:d7:7c:e4:97:ce:cf:9f:9c:be:52:f5:60:fd:49:51:e2:
36:91:07:1b:9a:0d:da:1d:d4:2f:dd:3d:9f:c1:3a:f4:6a:8b:
aa:8b:46:a9:cd:5b:7f:95:23:1e:d4:b7:1b:9b:2a:76:ca:8e:
d6:ca:bf:5d:1f:4b:73:59:24:70:16:07:62:12:49:cc:f1:9d:
ee:f7:c8:cd:e0:1b:fd:09:eb:2c:38:d6:c9:c3:6a:c5:7c:9a:
d3:4a:25:26:21:6e:a3:16:44:73:5d:d2:fa:1f:c8:38:6b:ee:
fe:be:ee:05:a5:1f:9c:88:f4:44:85:86:3d:8d:67:38:e9:3c:
db:c0:d4:9f:f1:d2:3c:9f:f6:7d:18:46:45:19:e7:9d:9a:2c:
88:35:31:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:09:52 2026 by rpki-client