Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa
File: Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa (raw, json)
Hash identifier: 3ZHSAL4bzQYAmn/XzcARd3JSpHYZITnPX09te0ZOJe8=
Subject key identifier: 16:2E:00:07:69:39:45:54:9D:31:BE:06:1E:0C:34:72:4C:A3:8A:0A
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23685EEA28E752B0952812A7EC4698A1
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44559
IP address blocks: 152.234.170.0/24 maxlen: 24
177.1.54.0/24 maxlen: 24
177.1.60.0/24 maxlen: 24
177.202.204.0/24 maxlen: 24
186.240.183.0/24 maxlen: 24
187.52.194.0/24 maxlen: 24
187.52.198.0/24 maxlen: 24
187.52.204.0/24 maxlen: 24
187.126.38.0/24 maxlen: 24
187.126.44.0/24 maxlen: 24
187.126.46.0/24 maxlen: 24
200.225.166.0/24 maxlen: 24
200.225.171.0/24 maxlen: 24
200.225.172.0/24 maxlen: 24
200.225.180.0/24 maxlen: 24
201.4.102.0/24 maxlen: 24
201.4.107.0/24 maxlen: 24
201.4.108.0/24 maxlen: 24
201.4.116.0/24 maxlen: 24
201.4.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:ea:28:e7:52:b0:95:28:12:a7:ec:46:98:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=162e0007693945549d31be061e0c34724ca38a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7b:20:f2:1f:41:b4:fe:cb:8f:c6:aa:32:70:
53:54:5a:0f:c3:ca:89:01:77:eb:33:17:70:55:57:
c3:28:46:bf:07:3a:8d:a7:e7:7f:48:e2:48:e1:11:
71:e7:f4:0f:4a:7b:b5:23:29:d0:bf:a9:1e:05:c2:
ef:35:ef:80:d8:8d:41:41:98:0b:f6:2b:a6:80:4e:
c3:ba:f0:04:ae:2e:39:6d:db:b5:d4:cf:26:98:98:
8e:03:ba:8c:7d:bf:65:bc:63:03:57:a4:20:9d:93:
17:39:17:6f:1d:9e:20:41:a2:90:1f:c2:5f:b6:3c:
17:b0:59:69:f0:d4:79:fc:08:7f:91:2b:b7:9b:ff:
5b:ca:4c:7e:23:54:1f:70:0a:c9:32:5d:3e:8e:73:
ba:c3:7a:d7:0e:d4:a8:cc:80:4e:74:5c:f9:fc:e2:
d6:7e:f8:54:93:43:82:d7:6d:6c:10:e6:60:75:69:
f3:37:29:1d:54:cb:6f:c2:62:e3:be:ee:05:18:fd:
c0:98:44:32:9d:9e:4e:9d:73:d7:46:d9:21:f6:18:
8d:d4:c0:17:6d:dd:06:8f:af:33:bc:09:fd:b7:97:
78:75:7b:3a:7d:52:75:b5:74:2f:55:28:88:f6:ea:
53:ee:e2:2d:44:bb:05:96:38:6a:fb:0b:76:b5:20:
a7:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2E:00:07:69:39:45:54:9D:31:BE:06:1E:0C:34:72:4C:A3:8A:0A
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.170.0/24
177.1.54.0/24
177.1.60.0/24
177.202.204.0/24
186.240.183.0/24
187.52.194.0/24
187.52.198.0/24
187.52.204.0/24
187.126.38.0/24
187.126.44.0/24
187.126.46.0/24
200.225.166.0/24
200.225.171.0-200.225.172.255
200.225.180.0/24
201.4.102.0/24
201.4.107.0-201.4.108.255
201.4.116.0/24
201.4.124.0/24
Signature Algorithm: sha256WithRSAEncryption
34:dc:97:f9:da:cc:47:62:9c:3f:6e:e6:ce:11:c9:88:1f:87:
e2:fa:52:e2:9b:1f:b0:53:fd:55:34:46:a0:54:67:f2:ca:af:
72:df:28:15:cb:3d:8f:1f:99:a2:d8:c8:4b:8d:c8:56:ec:0d:
d7:6b:7a:fb:ce:28:65:04:ec:95:b7:65:46:a4:ef:73:f1:02:
ef:77:c9:c0:ed:5d:2a:15:25:bc:96:52:7e:c0:00:10:53:f4:
fb:b0:1a:db:50:27:47:42:6e:19:f3:ec:45:4c:04:2f:62:17:
18:25:da:47:fd:41:6a:18:bf:3a:c1:a0:b8:51:34:f2:21:18:
70:ec:e8:1c:27:11:9d:6c:4f:af:2d:85:6b:15:56:55:60:e1:
33:cf:70:3c:8b:e1:ac:d5:90:45:c0:5c:62:40:d7:98:08:61:
0c:c4:fb:24:77:4c:47:67:bb:89:83:37:cd:49:fc:d3:89:4c:
d0:ad:e0:2b:67:8c:4f:d7:aa:cf:25:c6:99:5e:fb:28:83:83:
76:04:4a:59:cf:2f:fe:c8:f2:1d:e1:79:6c:51:45:c7:7c:2d:
d2:76:4a:91:68:0f:34:3d:5e:17:72:6c:6f:0e:87:da:fa:f9:
97:71:ec:15:53:91:0d:42:97:e2:28:44:4c:99:c3:e7:1b:5b:
63:a4:5f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:26:48 2026 by rpki-client