Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BcxI73p8ErEeQ0hukRaoWm0fhjA.roa
File: BcxI73p8ErEeQ0hukRaoWm0fhjA.roa (raw, json)
Hash identifier: eNJkC6bVkAW9TwdngXUYqa/fXCyz5L/k5yc9vvGi7Oc=
Subject key identifier: 05:CC:48:EF:7A:7C:12:B1:1E:43:48:6E:91:16:A8:5A:6D:1F:86:30
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686396B82843A0BB055E5DD78B8B26
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BcxI73p8ErEeQ0hukRaoWm0fhjA.roa
Signing time: Thu 02 Jul 2026 15:17:51 +0000
ROA not before: Thu 02 Jul 2026 15:17:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62240
IP address blocks: 152.234.160.0/24 maxlen: 24
152.234.161.0/24 maxlen: 24
152.234.164.0/24 maxlen: 24
152.234.167.0/24 maxlen: 24
152.234.168.0/24 maxlen: 24
152.234.169.0/24 maxlen: 24
152.234.171.0/24 maxlen: 24
152.234.173.0/24 maxlen: 24
152.234.174.0/24 maxlen: 24
152.234.175.0/24 maxlen: 24
177.1.48.0/24 maxlen: 24
177.1.49.0/24 maxlen: 24
177.1.51.0/24 maxlen: 24
177.1.52.0/24 maxlen: 24
177.1.55.0/24 maxlen: 24
177.1.56.0/24 maxlen: 24
177.1.57.0/24 maxlen: 24
177.1.59.0/24 maxlen: 24
177.1.61.0/24 maxlen: 24
177.1.62.0/24 maxlen: 24
177.1.63.0/24 maxlen: 24
177.202.192.0/24 maxlen: 24
177.202.193.0/24 maxlen: 24
177.202.195.0/24 maxlen: 24
177.202.196.0/24 maxlen: 24
177.202.199.0/24 maxlen: 24
177.202.200.0/24 maxlen: 24
177.202.201.0/24 maxlen: 24
177.202.203.0/24 maxlen: 24
177.202.205.0/24 maxlen: 24
177.202.206.0/24 maxlen: 24
177.202.207.0/24 maxlen: 24
186.240.176.0/24 maxlen: 24
186.240.177.0/24 maxlen: 24
186.240.179.0/24 maxlen: 24
186.240.180.0/24 maxlen: 24
186.240.181.0/24 maxlen: 24
186.240.182.0/24 maxlen: 24
186.240.185.0/24 maxlen: 24
186.240.186.0/24 maxlen: 24
187.52.192.0/24 maxlen: 24
187.52.193.0/24 maxlen: 24
187.52.195.0/24 maxlen: 24
187.52.197.0/24 maxlen: 24
187.52.199.0/24 maxlen: 24
187.52.200.0/24 maxlen: 24
187.52.203.0/24 maxlen: 24
187.52.205.0/24 maxlen: 24
187.52.206.0/24 maxlen: 24
187.52.207.0/24 maxlen: 24
187.126.32.0/24 maxlen: 24
187.126.33.0/24 maxlen: 24
187.126.35.0/24 maxlen: 24
187.126.37.0/24 maxlen: 24
187.126.39.0/24 maxlen: 24
187.126.40.0/24 maxlen: 24
187.126.41.0/24 maxlen: 24
187.126.43.0/24 maxlen: 24
187.126.45.0/24 maxlen: 24
187.126.47.0/24 maxlen: 24
200.225.160.0/24 maxlen: 24
200.225.161.0/24 maxlen: 24
200.225.162.0/24 maxlen: 24
200.225.163.0/24 maxlen: 24
200.225.165.0/24 maxlen: 24
200.225.167.0/24 maxlen: 24
200.225.168.0/24 maxlen: 24
200.225.174.0/24 maxlen: 24
200.225.175.0/24 maxlen: 24
200.225.176.0/24 maxlen: 24
200.225.177.0/24 maxlen: 24
200.225.184.0/24 maxlen: 24
200.225.187.0/24 maxlen: 24
200.225.189.0/24 maxlen: 24
200.225.190.0/24 maxlen: 24
200.225.191.0/24 maxlen: 24
201.4.96.0/24 maxlen: 24
201.4.97.0/24 maxlen: 24
201.4.98.0/24 maxlen: 24
201.4.99.0/24 maxlen: 24
201.4.101.0/24 maxlen: 24
201.4.103.0/24 maxlen: 24
201.4.110.0/24 maxlen: 24
201.4.111.0/24 maxlen: 24
201.4.112.0/24 maxlen: 24
201.4.113.0/24 maxlen: 24
201.4.114.0/24 maxlen: 24
201.4.120.0/24 maxlen: 24
201.4.123.0/24 maxlen: 24
201.4.125.0/24 maxlen: 24
201.4.126.0/24 maxlen: 24
201.4.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:63:96:b8:28:43:a0:bb:05:5e:5d:d7:8b:8b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05cc48ef7a7c12b11e43486e9116a85a6d1f8630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:cb:ed:44:83:73:e6:ca:81:20:0e:0f:c9:
35:63:4c:ed:09:97:7e:33:63:1b:20:dc:de:26:a7:
b0:b8:46:ea:10:58:ee:f1:82:13:af:9d:93:96:50:
4b:ba:71:51:f4:1c:bc:45:c9:f5:6c:7c:ec:95:d7:
9f:4b:3b:f0:5e:48:55:b3:c0:f4:9d:69:3c:a4:03:
fc:4c:7d:f7:55:5c:a1:81:13:1c:52:69:e3:0e:ab:
5a:31:c2:42:ee:0e:9c:13:f8:fc:7c:86:a6:de:32:
be:b4:66:5f:88:3a:93:f0:0b:2c:69:3d:b8:0f:d5:
99:37:a9:9c:91:70:95:c5:cc:61:43:fc:6a:be:55:
5d:11:25:7e:87:cf:3e:00:71:83:96:51:c5:94:60:
31:15:64:c3:7e:31:1d:8e:7b:ba:76:b9:01:c6:73:
2f:45:af:61:2f:c4:b5:6d:18:b7:da:00:92:7c:2d:
8f:9b:d8:0e:b2:03:8c:d0:68:5b:f9:70:10:4b:8d:
4b:f6:9b:0e:da:e4:58:06:40:4c:2d:66:94:73:1f:
f3:09:48:06:c2:3f:e5:67:a7:41:bf:bc:31:1a:b0:
fb:68:35:fd:84:e3:e9:54:ea:0b:ef:e8:35:74:65:
ea:77:56:f4:ca:f9:7d:c5:a4:c8:2c:b3:e8:55:c6:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:CC:48:EF:7A:7C:12:B1:1E:43:48:6E:91:16:A8:5A:6D:1F:86:30
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/BcxI73p8ErEeQ0hukRaoWm0fhjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.160.0/23
152.234.164.0/24
152.234.167.0-152.234.169.255
152.234.171.0/24
152.234.173.0-152.234.175.255
177.1.48.0/23
177.1.51.0-177.1.52.255
177.1.55.0-177.1.57.255
177.1.59.0/24
177.1.61.0-177.1.63.255
177.202.192.0/23
177.202.195.0-177.202.196.255
177.202.199.0-177.202.201.255
177.202.203.0/24
177.202.205.0-177.202.207.255
186.240.176.0/23
186.240.179.0-186.240.182.255
186.240.185.0-186.240.186.255
187.52.192.0/23
187.52.195.0/24
187.52.197.0/24
187.52.199.0-187.52.200.255
187.52.203.0/24
187.52.205.0-187.52.207.255
187.126.32.0/23
187.126.35.0/24
187.126.37.0/24
187.126.39.0-187.126.41.255
187.126.43.0/24
187.126.45.0/24
187.126.47.0/24
200.225.160.0/22
200.225.165.0/24
200.225.167.0-200.225.168.255
200.225.174.0-200.225.177.255
200.225.184.0/24
200.225.187.0/24
200.225.189.0-200.225.191.255
201.4.96.0/22
201.4.101.0/24
201.4.103.0/24
201.4.110.0-201.4.114.255
201.4.120.0/24
201.4.123.0/24
201.4.125.0-201.4.127.255
Signature Algorithm: sha256WithRSAEncryption
aa:5c:36:7c:f2:25:2d:75:03:70:fc:bb:d7:b2:d7:de:33:32:
8e:20:23:7f:1a:32:ae:00:93:82:0d:af:b6:30:e8:30:e9:b8:
ec:ec:0c:19:09:10:50:b8:06:e5:03:41:4d:2a:f1:f6:2d:e6:
94:b5:e0:79:78:21:02:37:70:68:d5:c9:c1:be:59:5a:81:ba:
be:45:c1:8f:90:2a:b5:15:f7:ad:a7:78:82:21:35:e2:9b:3e:
d7:28:a8:97:4c:1e:81:9e:35:8a:b6:3d:7d:e2:1a:80:23:f6:
aa:e9:ef:a1:a8:8b:9c:2e:57:f9:cf:49:47:4d:1e:4c:79:26:
50:87:16:cf:e5:23:ee:5b:c9:ad:50:59:f7:63:ed:8e:f8:7e:
2e:f5:fa:af:a1:53:4b:5e:32:80:cf:32:03:4d:05:fa:51:83:
6b:89:2f:16:ea:ad:fb:41:8e:c6:2a:22:5a:70:98:4d:3a:3e:
aa:5a:e9:5e:7e:60:08:b7:16:b6:87:74:84:fe:cc:a2:1e:90:
b9:e9:d8:be:c0:50:91:16:d2:24:e3:81:76:19:c8:ec:e0:97:
c5:52:2a:29:a4:11:91:ee:19:f6:19:01:41:78:d9:92:df:72:
6a:9a:e2:d1:de:e3:dd:d3:db:5a:6c:2d:d5:5f:98:94:34:ff:
63:f4:af:2a
-----BEGIN CERTIFICATE-----
MIIGnzCCBYegAwIBAgISAZ8jaGOWuChDoLsFXl3Xi4smMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzAyMTUxNzUxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWNjNDhlZjdhN2MxMmIxMWU0MzQ4NmU5MTE2YTg1YTZkMWY4NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHvL7USDc+bKgSAOD8k1Y0ztCZd+
M2MbINzeJqewuEbqEFju8YITr52TllBLunFR9By8Rcn1bHzsldefSzvwXkhVs8D0
nWk8pAP8TH33VVyhgRMcUmnjDqtaMcJC7g6cE/j8fIam3jK+tGZfiDqT8AssaT24
D9WZN6mckXCVxcxhQ/xqvlVdESV+h88+AHGDllHFlGAxFWTDfjEdjnu6drkBxnMv
Ra9hL8S1bRi32gCSfC2Pm9gOsgOM0Ghb+XAQS41L9psO2uRYBkBMLWaUcx/zCUgG
wj/lZ6dBv7wxGrD7aDX9hOPpVOoL7+g1dGXqd1b0yvl9xaTILLPoVcZpywIDAQAB
o4IDqzCCA6cwHQYDVR0OBBYEFAXMSO96fBKxHkNIbpEWqFptH4YwMB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvQmN4STczcDhFckVlUTBodWtSYW9XbTBmaGpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvwYIKwYBBQUHAQcBAf8EggGuMIIBqjCCAaYEAgABMIIB
ngMEAZjqoAMEAJjqpDAMAwQAmOqnAwQBmOqoAwQAmOqrMAwDBACY6q0DBASY6qAD
BAGxATAwDAMEALEBMwMEALEBNDAMAwQAsQE3AwQBsQE4AwQAsQE7MAwDBACxAT0D
BAaxAQADBAGxysAwDAMEALHKwwMEALHKxDAMAwQAscrHAwQBscrIAwQAscrLMAwD
BACxys0DBASxysADBAG68LAwDAMEALrwswMEALrwtjAMAwQAuvC5AwQAuvC6AwQB
uzTAAwQAuzTDAwQAuzTFMAwDBAC7NMcDBAC7NMgDBAC7NMswDAMEALs0zQMEBLs0
wAMEAbt+IAMEALt+IwMEALt+JTAMAwQAu34nAwQBu34oAwQAu34rAwQAu34tAwQA
u34vAwQCyOGgAwQAyOGlMAwDBADI4acDBADI4agwDAMEAcjhrgMEAcjhsAMEAMjh
uAMEAMjhuzAMAwQAyOG9AwQGyOGAAwQCyQRgAwQAyQRlAwQAyQRnMAwDBAHJBG4D
BADJBHIDBADJBHgDBADJBHswDAMEAMkEfQMEB8kEADANBgkqhkiG9w0BAQsFAAOC
AQEAqlw2fPIlLXUDcPy717LX3jMyjiAjfxoyrgCTgg2vtjDoMOm47OwMGQkQULgG
5QNBTSrx9i3mlLXgeXghAjdwaNXJwb5ZWoG6vkXBj5AqtRX3rad4giE14ps+1yio
l0wegZ41irY9feIagCP2qunvoaiLnC5X+c9JR00eTHkmUIcWz+Uj7lvJrVBZ92Pt
jvh+LvX6r6FTS14ygM8yA00F+lGDa4kvFuqt+0GOxioiWnCYTTo+qlrpXn5gCLcW
tod0hP7Moh6QuenYvsBQkRbSJOOBdhnI7OCXxVIqKaQRke4Z9hkBQXjZkt9yapri
0d7j3dPbWmwt1V+YlDT/Y/SvKg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:12 2026 by rpki-client