Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Az605-Xi4-85FYu6feBXQ1SOYt4.roa
File: Az605-Xi4-85FYu6feBXQ1SOYt4.roa (raw, json)
Hash identifier: whVjTw7Oo6IjmdNZa7tDCs1+dbsJYo3zqsCYIoKzP7U=
Subject key identifier: 03:3E:B4:E7:E5:E2:E3:EF:39:15:8B:BA:7D:E0:57:43:54:8E:62:DE
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F394C3738576D6F2FD765AEA422E796F6
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Az605-Xi4-85FYu6feBXQ1SOYt4.roa
Signing time: Mon 06 Jul 2026 21:18:43 +0000
ROA not before: Mon 06 Jul 2026 21:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 168.113.0.0/24 maxlen: 24
168.113.1.0/24 maxlen: 24
168.113.2.0/24 maxlen: 24
168.113.3.0/24 maxlen: 24
168.113.4.0/24 maxlen: 24
168.113.5.0/24 maxlen: 24
168.113.6.0/24 maxlen: 24
168.113.7.0/24 maxlen: 24
168.113.8.0/24 maxlen: 24
168.113.9.0/24 maxlen: 24
168.113.10.0/24 maxlen: 24
168.113.11.0/24 maxlen: 24
168.113.12.0/24 maxlen: 24
168.113.13.0/24 maxlen: 24
168.113.14.0/24 maxlen: 24
168.113.15.0/24 maxlen: 24
168.113.16.0/24 maxlen: 24
168.113.17.0/24 maxlen: 24
168.113.18.0/24 maxlen: 24
168.113.19.0/24 maxlen: 24
168.113.20.0/24 maxlen: 24
168.113.21.0/24 maxlen: 24
168.113.22.0/24 maxlen: 24
168.113.23.0/24 maxlen: 24
168.113.24.0/24 maxlen: 24
168.113.25.0/24 maxlen: 24
168.113.26.0/24 maxlen: 24
168.113.27.0/24 maxlen: 24
168.113.28.0/24 maxlen: 24
168.113.29.0/24 maxlen: 24
168.113.30.0/24 maxlen: 24
168.113.31.0/24 maxlen: 24
168.113.32.0/24 maxlen: 24
168.113.33.0/24 maxlen: 24
168.113.34.0/24 maxlen: 24
168.113.35.0/24 maxlen: 24
168.113.36.0/24 maxlen: 24
168.113.37.0/24 maxlen: 24
168.113.38.0/24 maxlen: 24
168.113.39.0/24 maxlen: 24
168.113.40.0/24 maxlen: 24
168.113.41.0/24 maxlen: 24
168.113.42.0/24 maxlen: 24
168.113.43.0/24 maxlen: 24
168.113.44.0/24 maxlen: 24
168.113.45.0/24 maxlen: 24
168.113.46.0/24 maxlen: 24
168.113.47.0/24 maxlen: 24
168.113.48.0/24 maxlen: 24
168.113.49.0/24 maxlen: 24
168.113.50.0/24 maxlen: 24
168.113.51.0/24 maxlen: 24
168.113.52.0/24 maxlen: 24
168.113.53.0/24 maxlen: 24
168.113.54.0/24 maxlen: 24
168.113.55.0/24 maxlen: 24
168.113.56.0/24 maxlen: 24
168.113.57.0/24 maxlen: 24
168.113.58.0/24 maxlen: 24
168.113.59.0/24 maxlen: 24
168.113.60.0/24 maxlen: 24
168.113.61.0/24 maxlen: 24
168.113.62.0/24 maxlen: 24
168.113.63.0/24 maxlen: 24
168.113.64.0/24 maxlen: 24
168.113.65.0/24 maxlen: 24
168.113.66.0/24 maxlen: 24
168.113.67.0/24 maxlen: 24
168.113.68.0/24 maxlen: 24
168.113.69.0/24 maxlen: 24
168.113.70.0/24 maxlen: 24
168.113.71.0/24 maxlen: 24
168.113.72.0/24 maxlen: 24
168.113.73.0/24 maxlen: 24
168.113.74.0/24 maxlen: 24
168.113.75.0/24 maxlen: 24
168.113.76.0/24 maxlen: 24
168.113.77.0/24 maxlen: 24
168.113.78.0/24 maxlen: 24
168.113.79.0/24 maxlen: 24
168.113.80.0/24 maxlen: 24
168.113.81.0/24 maxlen: 24
168.113.82.0/24 maxlen: 24
168.113.83.0/24 maxlen: 24
168.113.84.0/24 maxlen: 24
168.113.85.0/24 maxlen: 24
168.113.86.0/24 maxlen: 24
168.113.87.0/24 maxlen: 24
168.113.88.0/24 maxlen: 24
168.113.89.0/24 maxlen: 24
168.113.90.0/24 maxlen: 24
168.113.91.0/24 maxlen: 24
168.113.92.0/24 maxlen: 24
168.113.93.0/24 maxlen: 24
168.113.94.0/24 maxlen: 24
168.113.95.0/24 maxlen: 24
168.113.96.0/24 maxlen: 24
168.113.97.0/24 maxlen: 24
168.113.98.0/24 maxlen: 24
168.113.99.0/24 maxlen: 24
168.113.100.0/24 maxlen: 24
168.113.101.0/24 maxlen: 24
168.113.102.0/24 maxlen: 24
168.113.103.0/24 maxlen: 24
168.113.104.0/24 maxlen: 24
168.113.105.0/24 maxlen: 24
168.113.106.0/24 maxlen: 24
168.113.107.0/24 maxlen: 24
168.113.108.0/24 maxlen: 24
168.113.109.0/24 maxlen: 24
168.113.110.0/24 maxlen: 24
168.113.111.0/24 maxlen: 24
168.113.112.0/24 maxlen: 24
168.113.113.0/24 maxlen: 24
168.113.114.0/24 maxlen: 24
168.113.115.0/24 maxlen: 24
168.113.116.0/24 maxlen: 24
168.113.117.0/24 maxlen: 24
168.113.118.0/24 maxlen: 24
168.113.119.0/24 maxlen: 24
168.113.120.0/24 maxlen: 24
168.113.121.0/24 maxlen: 24
168.113.122.0/24 maxlen: 24
168.113.123.0/24 maxlen: 24
168.113.124.0/24 maxlen: 24
168.113.125.0/24 maxlen: 24
168.113.126.0/24 maxlen: 24
168.113.127.0/24 maxlen: 24
179.255.184.0/24 maxlen: 24
179.255.185.0/24 maxlen: 24
179.255.186.0/24 maxlen: 24
179.255.187.0/24 maxlen: 24
179.255.188.0/24 maxlen: 24
179.255.189.0/24 maxlen: 24
179.255.190.0/24 maxlen: 24
179.255.191.0/24 maxlen: 24
201.50.123.0/24 maxlen: 24
201.50.124.0/24 maxlen: 24
201.50.125.0/24 maxlen: 24
201.50.126.0/24 maxlen: 24
201.50.127.0/24 maxlen: 24
201.67.0.0/24 maxlen: 24
201.67.1.0/24 maxlen: 24
201.67.2.0/24 maxlen: 24
201.67.3.0/24 maxlen: 24
201.67.4.0/24 maxlen: 24
201.67.5.0/24 maxlen: 24
201.67.6.0/24 maxlen: 24
201.67.7.0/24 maxlen: 24
201.67.8.0/24 maxlen: 24
201.67.9.0/24 maxlen: 24
201.67.10.0/24 maxlen: 24
201.67.11.0/24 maxlen: 24
201.67.12.0/24 maxlen: 24
201.67.13.0/24 maxlen: 24
201.67.14.0/24 maxlen: 24
201.67.15.0/24 maxlen: 24
201.67.16.0/24 maxlen: 24
201.67.17.0/24 maxlen: 24
201.67.18.0/24 maxlen: 24
201.67.19.0/24 maxlen: 24
201.67.20.0/24 maxlen: 24
201.67.21.0/24 maxlen: 24
201.67.22.0/24 maxlen: 24
201.67.23.0/24 maxlen: 24
201.67.24.0/24 maxlen: 24
201.67.25.0/24 maxlen: 24
201.67.26.0/24 maxlen: 24
201.67.27.0/24 maxlen: 24
201.67.28.0/24 maxlen: 24
201.67.29.0/24 maxlen: 24
201.67.30.0/24 maxlen: 24
201.67.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:39:4c:37:38:57:6d:6f:2f:d7:65:ae:a4:22:e7:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 6 21:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=033eb4e7e5e2e3ef39158bba7de05743548e62de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:54:e9:b6:f7:c9:7e:76:58:09:76:ae:84:
da:01:08:fd:a8:a0:d6:33:78:5e:3c:a9:8e:87:e1:
6f:fa:eb:3f:b3:17:fd:17:e6:f7:6d:b6:89:01:e3:
13:21:88:13:86:69:ad:9d:a5:2d:f1:f0:10:b4:b2:
32:22:3b:40:70:26:40:d8:4c:49:7f:92:cd:af:2b:
16:9d:62:60:81:e3:52:85:74:a5:00:10:b1:ba:81:
d9:b7:83:5f:83:22:db:a7:b4:dc:bc:7c:12:80:0f:
d8:76:d4:a4:5a:63:5c:a5:26:23:ac:e9:13:f6:a9:
54:6d:6c:33:8e:d1:09:35:06:3b:8e:57:e1:95:41:
c8:6a:36:fa:1b:b5:ad:55:6d:c4:a1:f1:d6:d1:61:
2c:6c:b9:cd:30:43:5a:53:0b:a3:3c:31:1e:a5:45:
00:93:21:12:de:f2:d6:9c:39:a5:be:16:41:c2:ec:
57:d0:58:6e:ca:2f:49:e0:ae:09:d0:fb:b3:f6:db:
aa:86:18:46:ad:e9:38:aa:d8:b4:2f:8e:6b:d1:8d:
be:5a:93:00:97:ea:86:b7:6f:85:80:af:47:af:db:
30:c3:eb:d5:39:4d:25:ab:63:52:15:84:0b:92:06:
47:bd:36:af:75:1d:9f:60:d4:7b:e2:89:b5:57:67:
70:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:3E:B4:E7:E5:E2:E3:EF:39:15:8B:BA:7D:E0:57:43:54:8E:62:DE
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Az605-Xi4-85FYu6feBXQ1SOYt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.113.0.0/17
179.255.184.0/21
201.50.123.0-201.50.127.255
201.67.0.0/19
Signature Algorithm: sha256WithRSAEncryption
53:51:d9:ce:e9:09:51:76:de:b5:53:1d:17:64:f6:e9:fb:a7:
c5:e0:07:64:ea:1f:e8:97:1d:2f:a8:1f:4e:b9:35:98:e2:26:
f4:70:8c:b6:52:0a:50:1e:03:64:7c:b3:28:02:0a:3f:28:7d:
bb:57:ec:b1:06:53:aa:a8:09:e9:f5:c0:1c:e4:c0:02:a2:da:
97:bd:46:3e:26:f1:ea:34:f7:d4:98:86:cd:df:4a:53:d6:c8:
8c:c1:69:de:11:de:31:ec:a7:6f:50:da:70:72:93:60:86:d9:
4a:11:50:9c:7b:4d:a2:31:cb:d1:7a:02:34:37:87:38:65:dd:
1e:44:1d:6d:06:82:05:39:06:87:74:cb:32:ab:ce:d4:b5:87:
fc:a3:38:b5:e8:2f:7c:9a:07:41:11:17:57:94:a7:ac:d4:32:
01:e5:12:ff:ba:9e:46:1f:fc:f6:e0:d8:26:84:d6:ea:88:24:
1e:15:2f:fc:3b:0d:fe:01:4f:89:67:6c:3e:45:85:79:89:af:
3a:3c:76:53:cb:f4:86:fe:1b:81:51:65:cb:40:b5:a0:2c:76:
8f:d8:8e:34:e6:80:f4:3f:52:72:e6:72:1d:19:63:0c:81:0c:
5d:f5:38:b3:fa:6f:e9:91:4a:97:d5:2b:21:1a:a1:50:18:af:
cd:36:28:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:39 2026 by rpki-client