Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Flt4LYtoTrAG2LOs8-YuEr6WZ9o.roa
File: Flt4LYtoTrAG2LOs8-YuEr6WZ9o.roa (raw, json)
Hash identifier: 8KzEmurUSZ3ueYn29FtWng0EEPgnYhrEvd+xqEddWoU=
Subject key identifier: 16:5B:78:2D:8B:68:4E:B0:06:D8:B3:AC:F3:E6:2E:12:BE:96:67:DA
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 019C9E454AC8AEB06C6086B366506EEA6A4B
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Flt4LYtoTrAG2LOs8-YuEr6WZ9o.roa
Signing time: Fri 27 Feb 2026 08:44:27 +0000
ROA not before: Fri 27 Feb 2026 08:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 2.56.178.0/24 maxlen: 24
45.12.114.0/24 maxlen: 24
45.12.115.0/24 maxlen: 24
45.15.130.0/24 maxlen: 24
45.15.147.0/24 maxlen: 24
45.128.49.0/24 maxlen: 24
45.128.53.0/24 maxlen: 24
45.136.114.0/24 maxlen: 24
141.98.188.0/24 maxlen: 24
141.98.189.0/24 maxlen: 24
141.98.190.0/24 maxlen: 24
141.98.191.0/24 maxlen: 24
171.22.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:45:4a:c8:ae:b0:6c:60:86:b3:66:50:6e:ea:6a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Feb 27 08:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=165b782d8b684eb006d8b3acf3e62e12be9667da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b8:4b:af:55:fc:39:4a:2d:84:57:66:22:56:
13:04:ba:c8:b6:41:21:81:c0:2d:6b:f6:b6:7d:57:
de:1c:be:97:13:67:ee:0c:71:75:e8:c7:98:d0:b2:
10:24:95:37:3b:e9:a3:19:4e:1f:cd:ed:ce:f3:7e:
07:32:07:b5:49:89:91:8a:85:96:11:b9:2b:2b:0d:
f7:ae:d1:e5:72:c1:44:60:60:e5:59:ad:70:97:cf:
5c:ba:11:c7:1e:90:b6:3a:cd:56:4d:5c:61:9f:5b:
a6:61:3c:59:9c:10:d7:18:72:1c:e2:2b:36:21:00:
f2:e1:5a:04:23:e9:eb:fb:b5:9f:60:0d:7c:ae:3a:
eb:bf:76:76:88:b6:16:78:82:bf:4e:ef:2b:e1:02:
a0:0c:f9:0a:13:71:94:ef:b6:1b:0b:0e:05:18:2d:
b9:8e:0a:e4:34:2c:08:ae:4d:34:e6:3b:c0:1f:2c:
71:86:57:45:20:3c:b0:18:59:73:60:1f:59:29:59:
ec:96:f5:49:e8:51:3e:8d:41:71:c3:3a:90:45:90:
98:c3:b9:1c:4b:81:cb:48:48:96:65:6d:07:67:31:
6e:29:90:8f:37:01:5d:46:1b:a2:b9:9e:06:b5:13:
8a:2b:70:c7:9c:98:6f:ef:43:43:53:4d:dc:4e:fc:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:78:2D:8B:68:4E:B0:06:D8:B3:AC:F3:E6:2E:12:BE:96:67:DA
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Flt4LYtoTrAG2LOs8-YuEr6WZ9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.178.0/24
45.12.114.0/23
45.15.130.0/24
45.15.147.0/24
45.128.49.0/24
45.128.53.0/24
45.136.114.0/24
141.98.188.0/22
171.22.119.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:b9:94:24:c4:19:06:a9:46:c5:d4:e3:4f:bc:8f:5d:7f:66:
87:03:9a:1b:f2:ec:56:bf:3a:02:39:9d:d2:dd:46:a7:2f:10:
d9:0f:c4:bb:82:fd:44:0a:28:9a:6b:10:73:04:1b:ca:6d:87:
31:79:75:7b:92:8b:ae:21:b2:32:7a:de:51:95:12:cb:dd:e8:
0c:71:a5:41:d2:d7:87:9c:b0:44:12:b9:4c:f9:1f:80:66:d7:
73:c7:c8:7d:66:4f:3a:1f:a8:0d:37:10:13:4e:0a:2c:a5:3c:
07:8f:b6:b9:90:7d:13:c0:d1:e1:c1:40:67:b3:03:f0:6a:ef:
8d:ee:e8:26:49:31:f2:6f:54:e8:85:c4:07:35:cf:ad:ee:12:
26:77:65:c4:10:d0:f4:63:a3:a0:64:42:78:c0:1b:39:7d:1c:
9b:a6:f6:4e:27:0b:a9:7d:7d:ef:4f:84:16:9f:ce:d3:d8:45:
23:fe:b1:55:60:f7:01:9e:29:50:da:bb:c7:a9:d4:1d:9d:1c:
20:b7:e2:3d:ee:cb:32:26:59:78:01:38:5b:d5:fe:09:7d:8d:
ed:72:ed:ff:a4:42:f0:56:cf:ed:db:4e:3a:96:cc:01:14:ae:
ad:ed:57:f8:52:55:e9:54:0a:b7:eb:42:70:f7:d3:0a:98:4d:
64:54:6d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:20:02 2026 by rpki-client