Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Nn1ugqrOo-DLPuFfuRTKzIYlFTA.roa
File: Nn1ugqrOo-DLPuFfuRTKzIYlFTA.roa (raw, json)
Hash identifier: gH+Q1Nbzt0sQEZkopgmfflF8dd0ysDnGlv86WcIkIsY=
Subject key identifier: 36:7D:6E:82:AA:CE:A3:E0:CB:3E:E1:5F:B9:14:CA:CC:86:25:15:30
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0595F4BFD27F30D948A7E1E50458D8379
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Nn1ugqrOo-DLPuFfuRTKzIYlFTA.roa
Signing time: Mon 31 Aug 2026 19:50:12 +0000
ROA not before: Mon 31 Aug 2026 19:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 152.234.162.0/24 maxlen: 24
152.234.166.0/24 maxlen: 24
152.234.172.0/24 maxlen: 24
177.1.50.0/24 maxlen: 24
177.1.58.0/24 maxlen: 24
177.177.209.0/24 maxlen: 24
177.177.210.0/24 maxlen: 24
177.177.211.0/24 maxlen: 24
177.177.216.0/24 maxlen: 24
177.177.222.0/24 maxlen: 24
177.202.194.0/24 maxlen: 24
177.202.198.0/24 maxlen: 24
177.202.202.0/24 maxlen: 24
177.203.50.0/24 maxlen: 24
177.203.52.0/24 maxlen: 24
177.203.53.0/24 maxlen: 24
177.203.56.0/24 maxlen: 24
177.203.62.0/24 maxlen: 24
177.203.63.0/24 maxlen: 24
179.66.176.0/24 maxlen: 24
179.66.180.0/24 maxlen: 24
179.66.188.0/24 maxlen: 24
179.66.190.0/24 maxlen: 24
179.66.191.0/24 maxlen: 24
179.236.32.0/24 maxlen: 24
179.236.36.0/24 maxlen: 24
179.236.40.0/24 maxlen: 24
179.236.43.0/24 maxlen: 24
179.236.46.0/24 maxlen: 24
179.252.212.0/24 maxlen: 24
179.252.222.0/24 maxlen: 24
179.255.178.0/24 maxlen: 24
179.255.181.0/24 maxlen: 24
186.240.178.0/24 maxlen: 24
186.240.184.0/24 maxlen: 24
186.240.191.0/24 maxlen: 24
187.5.224.0/24 maxlen: 24
187.5.226.0/24 maxlen: 24
187.5.227.0/24 maxlen: 24
187.5.228.0/24 maxlen: 24
187.5.231.0/24 maxlen: 24
187.5.232.0/24 maxlen: 24
187.5.235.0/24 maxlen: 24
187.5.236.0/24 maxlen: 24
187.5.239.0/24 maxlen: 24
187.52.196.0/24 maxlen: 24
187.52.201.0/24 maxlen: 24
187.52.202.0/24 maxlen: 24
187.126.34.0/24 maxlen: 24
187.126.36.0/24 maxlen: 24
187.126.42.0/24 maxlen: 24
200.225.164.0/24 maxlen: 24
200.225.170.0/24 maxlen: 24
200.225.173.0/24 maxlen: 24
200.225.179.0/24 maxlen: 24
200.225.181.0/24 maxlen: 24
200.225.185.0/24 maxlen: 24
200.225.188.0/24 maxlen: 24
201.4.104.0/24 maxlen: 24
201.4.106.0/24 maxlen: 24
201.4.109.0/24 maxlen: 24
201.4.115.0/24 maxlen: 24
201.4.117.0/24 maxlen: 24
201.4.118.0/24 maxlen: 24
201.4.121.0/24 maxlen: 24
201.4.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:5f:4b:fd:27:f3:0d:94:8a:7e:1e:50:45:8d:83:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Aug 31 19:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=367d6e82aacea3e0cb3ee15fb914cacc86251530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e9:e9:ff:c2:86:e5:ca:d1:12:de:d6:c3:fe:
9c:cf:65:ce:82:61:29:45:87:7a:98:b8:d5:a3:06:
36:d7:35:9c:a1:bd:fc:4c:d7:c9:15:c5:33:38:e7:
19:2b:92:4c:a8:33:77:1c:ef:5d:28:74:b9:18:b8:
79:47:80:2b:40:41:63:08:32:58:62:77:69:05:c0:
7b:51:58:e3:da:5f:df:cb:2b:df:3a:30:dc:94:11:
01:bb:ef:31:38:c0:94:6e:34:3d:2a:90:d7:17:ee:
ea:54:30:a8:21:cd:be:81:46:4a:2e:96:7f:84:eb:
d6:df:00:7d:b9:c3:b4:e9:f9:0f:6a:ff:95:92:bc:
cb:d1:14:e3:b0:65:5a:97:42:86:a9:05:29:34:34:
a8:fd:75:77:52:e1:cb:70:92:65:5e:0d:8b:4b:53:
74:e7:1b:ec:8c:33:58:66:49:75:8b:7f:95:33:46:
fd:09:98:e7:d9:62:59:58:a7:56:bb:f2:e0:4c:ab:
f7:6d:45:4a:aa:a4:71:fd:e7:f6:c3:37:b9:6a:91:
e5:3e:00:4a:a3:1e:34:6f:e2:5d:76:51:44:41:f6:
52:24:77:98:d4:7c:7e:28:32:3e:34:39:e2:62:32:
03:44:1d:24:1f:99:26:ec:6d:04:66:2b:d8:a0:b0:
ad:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:7D:6E:82:AA:CE:A3:E0:CB:3E:E1:5F:B9:14:CA:CC:86:25:15:30
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/Nn1ugqrOo-DLPuFfuRTKzIYlFTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.162.0/24
152.234.166.0/24
152.234.172.0/24
177.1.50.0/24
177.1.58.0/24
177.177.209.0-177.177.211.255
177.177.216.0/24
177.177.222.0/24
177.202.194.0/24
177.202.198.0/24
177.202.202.0/24
177.203.50.0/24
177.203.52.0/23
177.203.56.0/24
177.203.62.0/23
179.66.176.0/24
179.66.180.0/24
179.66.188.0/24
179.66.190.0/23
179.236.32.0/24
179.236.36.0/24
179.236.40.0/24
179.236.43.0/24
179.236.46.0/24
179.252.212.0/24
179.252.222.0/24
179.255.178.0/24
179.255.181.0/24
186.240.178.0/24
186.240.184.0/24
186.240.191.0/24
187.5.224.0/24
187.5.226.0-187.5.228.255
187.5.231.0-187.5.232.255
187.5.235.0-187.5.236.255
187.5.239.0/24
187.52.196.0/24
187.52.201.0-187.52.202.255
187.126.34.0/24
187.126.36.0/24
187.126.42.0/24
200.225.164.0/24
200.225.170.0/24
200.225.173.0/24
200.225.179.0/24
200.225.181.0/24
200.225.185.0/24
200.225.188.0/24
201.4.104.0/24
201.4.106.0/24
201.4.109.0/24
201.4.115.0/24
201.4.117.0-201.4.118.255
201.4.121.0-201.4.122.255
Signature Algorithm: sha256WithRSAEncryption
61:f0:14:43:d6:0f:1e:52:ba:18:bd:19:5b:65:58:7a:be:df:
9b:8c:af:ca:ca:b9:df:88:8b:61:97:01:0d:1c:d7:f0:1e:97:
75:7e:4f:fb:8d:68:c5:16:ad:2b:8e:3c:aa:65:90:7f:49:0d:
7f:e2:17:eb:e7:42:0e:85:55:2c:d8:84:cc:a1:06:36:e9:be:
c3:75:ef:a3:4a:ff:a6:e7:fc:de:70:fb:72:c5:01:aa:85:24:
5a:db:d4:af:ff:1e:cf:78:14:2d:ed:65:f3:6c:ce:bc:7b:5f:
45:e7:95:d4:92:a5:0c:9c:88:bc:75:e5:c1:63:a4:38:7f:09:
98:5d:e2:fc:6d:07:b9:8c:19:93:18:10:b1:1f:22:aa:a8:93:
84:94:cc:56:fa:77:3c:9b:76:ce:5a:23:db:ad:28:f0:be:84:
91:32:af:52:68:a8:f5:cc:cb:01:e0:ed:08:b2:06:c7:45:cd:
85:75:1b:25:cd:c0:28:ab:5c:e5:64:b3:82:2a:92:99:2e:cc:
50:89:6f:b7:43:f4:eb:e0:99:3e:34:21:95:84:15:5c:37:08:
68:d6:f6:ed:8f:11:a2:25:7a:5e:99:72:ec:2f:74:d8:af:95:
d8:eb:1e:93:f7:61:f7:84:29:1b:73:b7:c3:28:6e:02:93:ec:
a3:82:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:14 2026 by rpki-client