Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Sgu81foAAH9yRWSzxy6LvlrUBu8.roa
File: Sgu81foAAH9yRWSzxy6LvlrUBu8.roa (raw, json)
Hash identifier: KLLeoDJjK+OtNZ7zUOFX5H5NsOyYDS+yaDPNeWcKCqc=
Subject key identifier: 4A:0B:BC:D5:FA:00:00:7F:72:45:64:B3:C7:2E:8B:BE:5A:D4:06:EF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A0AB451ABC9759F191EBA800ADA945A12D
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Sgu81foAAH9yRWSzxy6LvlrUBu8.roa
Signing time: Wed 16 Sep 2026 17:30:27 +0000
ROA not before: Wed 16 Sep 2026 17:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 5.180.84.0/22 maxlen: 24
107.150.169.0/24 maxlen: 24
107.150.173.0/24 maxlen: 24
124.198.140.0/22 maxlen: 24
124.198.148.0/22 maxlen: 24
124.198.152.0/21 maxlen: 24
136.176.164.0/22 maxlen: 24
158.173.136.0/22 maxlen: 24
162.218.177.0/24 maxlen: 24
162.218.178.0/24 maxlen: 24
163.47.104.0/22 maxlen: 24
167.160.1.0/24 maxlen: 24
167.160.2.0/24 maxlen: 24
185.192.213.0/24 maxlen: 24
185.192.214.0/24 maxlen: 24
185.203.149.0/24 maxlen: 24
185.203.150.0/24 maxlen: 24
185.212.173.0/24 maxlen: 24
185.212.174.0/24 maxlen: 24
202.49.244.0/22 maxlen: 24
202.50.124.0/22 maxlen: 24
203.188.176.0/22 maxlen: 24
203.188.184.0/22 maxlen: 24
203.188.188.0/24 maxlen: 24
212.32.51.0/24 maxlen: 24
212.32.70.0/24 maxlen: 24
212.32.77.0/24 maxlen: 24
212.32.78.0/23 maxlen: 24
212.56.51.0/24 maxlen: 24
212.56.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 11:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:45:1a:bc:97:59:f1:91:eb:a8:00:ad:a9:45:a1:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 16 17:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4a0bbcd5fa00007f724564b3c72e8bbe5ad406ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ab:d4:0c:d6:90:c9:e8:49:75:55:dd:92:72:
a3:b2:ed:d2:39:8f:1e:3b:47:8f:b5:82:31:bb:a3:
d8:8c:9a:04:7f:69:16:f3:1d:4c:dc:dc:a7:dc:52:
34:78:ae:ac:ca:c6:42:fd:e4:c2:a4:1a:3c:8d:03:
dc:80:71:93:38:08:98:d8:0e:fb:bc:ed:46:a9:84:
f9:5a:99:2a:71:e6:1f:6c:e8:62:8c:40:af:61:2d:
2a:56:cc:4c:a0:ff:b3:9c:53:8e:1d:6e:ec:ed:b9:
10:de:20:4a:a4:44:d8:d3:3f:b0:7d:0f:20:54:bf:
93:85:17:e3:98:0c:81:64:36:1f:9f:40:9b:9c:c1:
35:10:a4:5d:3a:b1:bb:0e:a8:5d:ef:fe:8f:29:d9:
e5:e2:b0:b5:37:7b:cd:11:2a:59:08:34:08:ad:2f:
91:78:19:2e:19:4f:e4:d2:ba:52:5a:8d:9d:fd:7f:
c6:74:f8:0b:c9:ab:ad:9e:9d:2a:ea:29:68:c6:79:
bf:5e:c5:4e:d9:fe:e0:42:3d:0e:1f:f3:46:f9:66:
f1:e8:24:d0:bb:1e:cb:b5:9c:a5:16:9b:14:b8:fe:
a6:d6:9c:55:63:7e:e4:75:72:a5:17:96:74:f3:ad:
f0:36:ba:6c:34:4f:69:7a:25:72:6c:e2:36:07:aa:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:0B:BC:D5:FA:00:00:7F:72:45:64:B3:C7:2E:8B:BE:5A:D4:06:EF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Sgu81foAAH9yRWSzxy6LvlrUBu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.84.0/22
107.150.169.0/24
107.150.173.0/24
124.198.140.0/22
124.198.148.0-124.198.159.255
136.176.164.0/22
158.173.136.0/22
162.218.177.0-162.218.178.255
163.47.104.0/22
167.160.1.0-167.160.2.255
185.192.213.0-185.192.214.255
185.203.149.0-185.203.150.255
185.212.173.0-185.212.174.255
202.49.244.0/22
202.50.124.0/22
203.188.176.0/22
203.188.184.0-203.188.188.255
212.32.51.0/24
212.32.70.0/24
212.32.77.0-212.32.79.255
212.56.51.0/24
212.56.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a2:3f:68:2d:f5:1f:eb:7b:ed:47:d0:4a:b5:1f:c8:8d:ea:
51:38:21:c4:a4:df:9b:d0:08:b2:3b:43:cc:2e:0e:9d:14:d2:
2d:c3:2d:9d:9e:75:34:9f:86:a8:c6:86:74:e3:a5:6e:c2:99:
5c:af:7a:73:dc:c1:c7:31:31:55:31:af:67:c8:db:b5:f2:81:
2a:00:94:75:55:81:ff:36:d5:06:79:03:9f:2a:2d:59:5d:87:
b1:2c:96:0e:34:ae:54:5f:d3:41:6d:29:a7:5a:bd:a6:f8:7e:
e3:c7:a2:6d:58:11:9a:02:e4:d4:e7:51:89:25:97:73:56:79:
1f:71:ee:80:db:e0:e1:26:09:16:9b:1c:ff:53:d3:a6:01:f5:
6b:77:21:a4:b0:58:79:38:3d:8c:d5:87:2e:aa:80:1b:b4:5f:
85:40:2d:d6:d9:2d:de:6b:f9:43:6a:6c:3f:cd:b5:a0:82:10:
34:30:7d:bd:dd:80:8b:af:5b:21:f3:a3:74:04:f1:2e:5e:59:
d3:75:89:07:93:7f:a3:2c:79:55:58:c8:95:5a:f9:b9:ea:7c:
57:03:ee:e1:29:51:88:b1:1c:ea:55:59:0a:16:86:df:1e:24:
57:4f:f3:92:35:97:ae:33:2e:eb:51:6b:1c:e2:12:a7:23:2b:
b2:61:42:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:22:25 2026 by rpki-client