Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/q0v9xLBgr75QZWxQbxIDsm_5auE.roa
File: q0v9xLBgr75QZWxQbxIDsm_5auE.roa (raw, json)
Hash identifier: qOcGp9/tV8D5cBFVGmxsTN9zUnDfYAT6E1ABiK0+n00=
Subject key identifier: AB:4B:FD:C4:B0:60:AF:BE:50:65:6C:50:6F:12:03:B2:6F:F9:6A:E1
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F236866EFC04BF65DB02B0BA3E6D9D18D
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/q0v9xLBgr75QZWxQbxIDsm_5auE.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 152.234.162.0/24 maxlen: 24
152.234.163.0/24 maxlen: 24
152.234.166.0/24 maxlen: 24
152.234.172.0/24 maxlen: 24
177.1.50.0/24 maxlen: 24
177.1.53.0/24 maxlen: 24
177.1.58.0/24 maxlen: 24
177.177.209.0/24 maxlen: 24
177.177.210.0/24 maxlen: 24
177.177.211.0/24 maxlen: 24
177.177.212.0/24 maxlen: 24
177.177.215.0/24 maxlen: 24
177.177.216.0/24 maxlen: 24
177.177.219.0/24 maxlen: 24
177.177.222.0/24 maxlen: 24
177.177.223.0/24 maxlen: 24
177.202.194.0/24 maxlen: 24
177.202.198.0/24 maxlen: 24
177.202.202.0/24 maxlen: 24
177.203.48.0/24 maxlen: 24
177.203.50.0/24 maxlen: 24
177.203.52.0/24 maxlen: 24
177.203.53.0/24 maxlen: 24
177.203.56.0/24 maxlen: 24
177.203.59.0/24 maxlen: 24
177.203.62.0/24 maxlen: 24
177.203.63.0/24 maxlen: 24
179.66.176.0/24 maxlen: 24
179.66.178.0/24 maxlen: 24
179.66.180.0/24 maxlen: 24
179.66.181.0/24 maxlen: 24
179.66.184.0/24 maxlen: 24
179.66.187.0/24 maxlen: 24
179.66.188.0/24 maxlen: 24
179.66.190.0/24 maxlen: 24
179.66.191.0/24 maxlen: 24
179.236.32.0/24 maxlen: 24
179.236.34.0/24 maxlen: 24
179.236.36.0/24 maxlen: 24
179.236.37.0/24 maxlen: 24
179.236.40.0/24 maxlen: 24
179.236.43.0/24 maxlen: 24
179.236.46.0/24 maxlen: 24
179.252.208.0/24 maxlen: 24
179.252.210.0/24 maxlen: 24
179.252.212.0/24 maxlen: 24
179.252.213.0/24 maxlen: 24
179.252.219.0/24 maxlen: 24
179.252.220.0/24 maxlen: 24
179.252.222.0/24 maxlen: 24
179.255.176.0/24 maxlen: 24
179.255.178.0/24 maxlen: 24
179.255.181.0/24 maxlen: 24
186.240.178.0/24 maxlen: 24
186.240.184.0/24 maxlen: 24
186.240.191.0/24 maxlen: 24
187.5.224.0/24 maxlen: 24
187.5.226.0/24 maxlen: 24
187.5.227.0/24 maxlen: 24
187.5.228.0/24 maxlen: 24
187.5.229.0/24 maxlen: 24
187.5.231.0/24 maxlen: 24
187.5.232.0/24 maxlen: 24
187.5.235.0/24 maxlen: 24
187.5.236.0/24 maxlen: 24
187.5.238.0/24 maxlen: 24
187.5.239.0/24 maxlen: 24
187.52.196.0/24 maxlen: 24
187.52.201.0/24 maxlen: 24
187.52.202.0/24 maxlen: 24
187.126.34.0/24 maxlen: 24
187.126.36.0/24 maxlen: 24
187.126.42.0/24 maxlen: 24
200.225.164.0/24 maxlen: 24
200.225.170.0/24 maxlen: 24
200.225.173.0/24 maxlen: 24
200.225.178.0/24 maxlen: 24
200.225.179.0/24 maxlen: 24
200.225.181.0/24 maxlen: 24
200.225.185.0/24 maxlen: 24
200.225.188.0/24 maxlen: 24
201.4.100.0/24 maxlen: 24
201.4.104.0/24 maxlen: 24
201.4.106.0/24 maxlen: 24
201.4.109.0/24 maxlen: 24
201.4.115.0/24 maxlen: 24
201.4.117.0/24 maxlen: 24
201.4.118.0/24 maxlen: 24
201.4.121.0/24 maxlen: 24
201.4.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:66:ef:c0:4b:f6:5d:b0:2b:0b:a3:e6:d9:d1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab4bfdc4b060afbe50656c506f1203b26ff96ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:09:bf:a2:dd:1d:32:6d:93:ff:a3:97:d5:
58:97:bd:a6:8c:1f:d2:b9:9c:71:56:88:06:8a:2b:
cc:5b:4d:ec:07:cc:78:a8:e7:78:c6:ea:eb:5f:b9:
b7:2d:ee:c8:09:2b:5b:29:9f:df:4f:bc:c0:9e:64:
37:1a:db:4a:94:db:7d:a3:60:52:36:76:77:10:84:
7c:33:6e:0c:87:0f:30:92:a8:50:33:da:88:d1:c0:
ba:40:93:87:e0:5b:2d:b5:67:01:a4:a7:9b:a9:ee:
ad:c3:ba:67:ef:2b:ae:59:a9:56:09:d9:b8:9b:04:
fe:43:5d:90:c2:09:24:a3:b6:10:87:22:50:cb:7b:
ca:f8:04:92:d8:b7:4f:e3:c8:40:27:8e:ec:3b:e5:
5b:07:cf:2d:2f:c0:3b:46:c6:52:51:ea:bc:ca:a8:
73:44:3b:a0:4a:20:91:f7:fc:0b:e6:76:b7:78:87:
5b:c8:a1:eb:2b:52:b9:b1:25:4f:d6:1b:45:60:12:
97:42:15:8c:c9:22:15:f0:7b:19:eb:3e:95:76:76:
12:b0:38:9f:f6:06:45:94:a2:2f:48:85:ed:0c:3b:
46:dd:84:ce:51:af:17:6e:92:d3:00:7e:48:5a:dc:
a4:07:be:6b:40:c6:6e:24:b3:5f:e4:7a:d4:57:fd:
f2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4B:FD:C4:B0:60:AF:BE:50:65:6C:50:6F:12:03:B2:6F:F9:6A:E1
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/q0v9xLBgr75QZWxQbxIDsm_5auE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.234.162.0/23
152.234.166.0/24
152.234.172.0/24
177.1.50.0/24
177.1.53.0/24
177.1.58.0/24
177.177.209.0-177.177.212.255
177.177.215.0-177.177.216.255
177.177.219.0/24
177.177.222.0/23
177.202.194.0/24
177.202.198.0/24
177.202.202.0/24
177.203.48.0/24
177.203.50.0/24
177.203.52.0/23
177.203.56.0/24
177.203.59.0/24
177.203.62.0/23
179.66.176.0/24
179.66.178.0/24
179.66.180.0/23
179.66.184.0/24
179.66.187.0-179.66.188.255
179.66.190.0/23
179.236.32.0/24
179.236.34.0/24
179.236.36.0/23
179.236.40.0/24
179.236.43.0/24
179.236.46.0/24
179.252.208.0/24
179.252.210.0/24
179.252.212.0/23
179.252.219.0-179.252.220.255
179.252.222.0/24
179.255.176.0/24
179.255.178.0/24
179.255.181.0/24
186.240.178.0/24
186.240.184.0/24
186.240.191.0/24
187.5.224.0/24
187.5.226.0-187.5.229.255
187.5.231.0-187.5.232.255
187.5.235.0-187.5.236.255
187.5.238.0/23
187.52.196.0/24
187.52.201.0-187.52.202.255
187.126.34.0/24
187.126.36.0/24
187.126.42.0/24
200.225.164.0/24
200.225.170.0/24
200.225.173.0/24
200.225.178.0/23
200.225.181.0/24
200.225.185.0/24
200.225.188.0/24
201.4.100.0/24
201.4.104.0/24
201.4.106.0/24
201.4.109.0/24
201.4.115.0/24
201.4.117.0-201.4.118.255
201.4.121.0-201.4.122.255
Signature Algorithm: sha256WithRSAEncryption
90:5b:37:93:14:60:7a:62:17:52:8c:08:b1:a3:63:01:b5:68:
ad:07:3e:2b:7d:e1:61:da:d7:f3:d3:00:6d:1c:33:37:d2:df:
8e:ec:07:86:a4:25:48:dd:99:b8:ab:bf:38:86:51:c7:26:cb:
b5:d6:7a:14:25:cb:81:49:de:4e:3f:20:90:ac:76:45:3c:52:
2c:ce:b2:ca:76:a9:6b:59:94:00:e4:a2:9f:74:13:73:e1:a2:
57:b4:f9:e5:1e:96:fb:82:3e:a6:c9:49:e9:48:8a:11:3d:af:
6a:e8:48:74:61:10:8c:91:89:fb:55:40:39:bc:28:30:bf:ce:
18:1e:43:fe:5d:4b:fc:66:13:85:c5:fc:ff:8a:ca:08:93:d5:
f0:7d:2c:ff:95:82:61:96:0d:91:9e:42:91:04:de:7a:5e:92:
a6:15:f2:db:15:ad:8b:4c:ce:2a:44:7f:a0:61:22:58:5f:79:
20:11:e6:5f:ce:8c:7b:73:ca:2d:0c:ac:cb:c3:1e:dd:e1:75:
6e:06:92:f5:25:d2:55:85:07:3b:f2:42:d4:39:a4:27:24:d6:
c7:24:d4:1b:ea:02:c1:80:13:12:4f:cf:04:4d:20:9d:60:aa:
4a:c5:5d:e6:80:0c:4f:6a:37:98:e2:18:8b:6b:20:c2:86:a5:
05:bd:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:33 2026 by rpki-client