Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GfeTVKT6QqRWrLzTEXKMmvGyTjE.roa
File: GfeTVKT6QqRWrLzTEXKMmvGyTjE.roa (raw, json)
Hash identifier: Fz9RtLxb0cCASF3ekBqVuQmlc+qfn2/OvuQuLALlIfo=
Subject key identifier: 19:F7:93:54:A4:FA:42:A4:56:AC:BC:D3:11:72:8C:9A:F1:B2:4E:31
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0595F4BA6D7487A57048A7D1D45F85075
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GfeTVKT6QqRWrLzTEXKMmvGyTjE.roa
Signing time: Mon 31 Aug 2026 19:50:12 +0000
ROA not before: Mon 31 Aug 2026 19:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 152.234.165.0/24 maxlen: 24
177.177.144.0/24 maxlen: 24
177.177.153.0/24 maxlen: 24
177.177.166.0/24 maxlen: 24
177.177.175.0/24 maxlen: 24
177.177.191.0/24 maxlen: 24
177.177.208.0/24 maxlen: 24
177.177.214.0/24 maxlen: 24
177.177.217.0/24 maxlen: 24
177.177.218.0/24 maxlen: 24
177.177.221.0/24 maxlen: 24
177.202.197.0/24 maxlen: 24
177.203.51.0/24 maxlen: 24
177.203.54.0/24 maxlen: 24
177.203.55.0/24 maxlen: 24
177.203.57.0/24 maxlen: 24
177.203.60.0/24 maxlen: 24
177.203.61.0/24 maxlen: 24
179.66.177.0/24 maxlen: 24
179.66.179.0/24 maxlen: 24
179.66.182.0/24 maxlen: 24
179.66.183.0/24 maxlen: 24
179.66.212.0/24 maxlen: 24
179.66.221.0/24 maxlen: 24
179.66.231.0/24 maxlen: 24
179.66.240.0/24 maxlen: 24
179.66.246.0/24 maxlen: 24
179.236.33.0/24 maxlen: 24
179.236.35.0/24 maxlen: 24
179.236.38.0/24 maxlen: 24
179.236.39.0/24 maxlen: 24
179.236.44.0/24 maxlen: 24
179.236.47.0/24 maxlen: 24
179.252.209.0/24 maxlen: 24
179.252.211.0/24 maxlen: 24
179.252.214.0/24 maxlen: 24
179.252.215.0/24 maxlen: 24
179.252.217.0/24 maxlen: 24
179.252.218.0/24 maxlen: 24
179.252.223.0/24 maxlen: 24
179.255.177.0/24 maxlen: 24
179.255.179.0/24 maxlen: 24
179.255.183.0/24 maxlen: 24
186.240.187.0/24 maxlen: 24
186.240.188.0/24 maxlen: 24
186.240.189.0/24 maxlen: 24
186.240.190.0/24 maxlen: 24
187.5.225.0/24 maxlen: 24
187.5.230.0/24 maxlen: 24
187.5.233.0/24 maxlen: 24
187.5.234.0/24 maxlen: 24
187.5.237.0/24 maxlen: 24
187.13.81.0/24 maxlen: 24
187.13.86.0/24 maxlen: 24
187.13.92.0/24 maxlen: 24
187.13.101.0/24 maxlen: 24
187.15.10.0/24 maxlen: 24
187.15.14.0/24 maxlen: 24
187.15.20.0/24 maxlen: 24
187.15.29.0/24 maxlen: 24
187.15.39.0/24 maxlen: 24
187.15.62.0/24 maxlen: 24
200.225.169.0/24 maxlen: 24
200.225.182.0/24 maxlen: 24
200.225.183.0/24 maxlen: 24
200.225.186.0/24 maxlen: 24
201.4.105.0/24 maxlen: 24
201.4.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:5f:4b:a6:d7:48:7a:57:04:8a:7d:1d:45:f8:50:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 31 19:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=19f79354a4fa42a456acbcd311728c9af1b24e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:00:7e:f3:c4:98:74:3a:a4:a8:2b:14:8c:b9:
1f:f6:e4:48:60:a6:8a:e8:e5:35:d4:84:f6:4d:89:
24:58:0f:25:21:bf:2e:6c:14:ef:22:31:e3:fb:6d:
8d:10:75:22:6c:29:2b:5e:80:0d:92:7d:54:40:0a:
c2:27:39:65:02:fa:d6:ea:31:c5:ea:bf:85:ca:fb:
d8:0e:8b:c3:fb:f7:30:cf:5b:ca:68:d7:59:7d:f0:
4e:65:7e:cf:3a:6a:22:33:02:1e:8f:46:5f:58:12:
53:53:cb:27:34:84:55:24:79:81:06:ce:9d:6c:41:
e7:c9:e4:b6:69:4d:a7:df:14:84:68:70:91:68:bd:
35:fa:c2:69:6c:f9:7a:df:c2:aa:51:e4:91:55:96:
3e:f6:de:2c:94:07:f0:bd:78:5c:94:70:76:af:ed:
6a:bc:0b:32:a1:27:7c:7e:3b:09:aa:a7:5d:5f:b5:
9e:f1:d3:26:02:07:f3:39:19:7f:63:c2:ea:49:0a:
59:53:35:3e:ab:bf:ab:7d:0b:fb:ec:0f:df:fb:0c:
b2:e2:64:3d:71:bc:2f:be:ee:60:5f:00:1d:f2:df:
a1:0e:79:78:77:c1:b6:1f:ba:43:6f:ba:d0:15:89:
f1:e3:96:3f:18:c5:69:14:fb:68:da:28:63:46:96:
46:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F7:93:54:A4:FA:42:A4:56:AC:BC:D3:11:72:8C:9A:F1:B2:4E:31
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/GfeTVKT6QqRWrLzTEXKMmvGyTjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.165.0/24
177.177.144.0/24
177.177.153.0/24
177.177.166.0/24
177.177.175.0/24
177.177.191.0/24
177.177.208.0/24
177.177.214.0/24
177.177.217.0-177.177.218.255
177.177.221.0/24
177.202.197.0/24
177.203.51.0/24
177.203.54.0/23
177.203.57.0/24
177.203.60.0/23
179.66.177.0/24
179.66.179.0/24
179.66.182.0/23
179.66.212.0/24
179.66.221.0/24
179.66.231.0/24
179.66.240.0/24
179.66.246.0/24
179.236.33.0/24
179.236.35.0/24
179.236.38.0/23
179.236.44.0/24
179.236.47.0/24
179.252.209.0/24
179.252.211.0/24
179.252.214.0/23
179.252.217.0-179.252.218.255
179.252.223.0/24
179.255.177.0/24
179.255.179.0/24
179.255.183.0/24
186.240.187.0-186.240.190.255
187.5.225.0/24
187.5.230.0/24
187.5.233.0-187.5.234.255
187.5.237.0/24
187.13.81.0/24
187.13.86.0/24
187.13.92.0/24
187.13.101.0/24
187.15.10.0/24
187.15.14.0/24
187.15.20.0/24
187.15.29.0/24
187.15.39.0/24
187.15.62.0/24
200.225.169.0/24
200.225.182.0/23
200.225.186.0/24
201.4.105.0/24
201.4.119.0/24
Signature Algorithm: sha256WithRSAEncryption
49:46:24:ff:50:13:d2:c1:f5:8f:ff:0e:e6:12:a3:80:3b:43:
6b:4c:af:cb:87:ea:38:cc:b4:22:cb:21:3d:5e:8a:91:23:0d:
47:c1:19:97:dc:34:50:99:dc:83:10:9c:41:22:17:ac:d6:4c:
c3:56:bb:f0:ab:e6:6b:2f:c4:cf:71:50:12:3b:8c:24:10:ee:
c7:1a:20:f2:99:f0:ea:9a:d7:56:d6:15:e0:c2:b0:10:2d:cc:
80:4a:cd:66:54:8e:12:f9:f4:c4:2c:d9:ef:e1:3d:05:0f:27:
74:e2:a4:57:28:fd:bf:28:33:db:21:27:0d:32:46:f5:63:23:
fe:54:ed:38:24:b1:b5:ed:65:46:78:be:f4:32:d7:e9:63:2a:
00:4f:b4:a2:58:8f:82:92:7f:50:c0:5d:6b:23:da:02:94:3c:
27:63:5a:6e:2f:39:c9:d7:e8:b1:cf:31:62:98:49:70:b4:ff:
b6:ea:7e:7d:46:89:48:ba:35:2f:39:37:8e:76:2b:14:2e:35:
7b:03:35:3e:5f:c7:33:5e:db:a3:e5:bb:ac:54:f1:bb:28:1b:
40:72:c9:c3:fc:49:a3:68:bf:a5:1d:7b:b2:dc:3a:03:d3:3b:
ff:8e:30:b1:bd:1c:42:fd:b4:a9:92:74:f5:46:c0:34:cc:c9:
80:e2:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:55:03 2026 by rpki-client