Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ywR9gH1F0PpOZKegB621BiuyfHM.roa
File: ywR9gH1F0PpOZKegB621BiuyfHM.roa (raw, json)
Hash identifier: WDTlSi6oj6Emf/Zkaz3mbxQX1dD5hDKhstvcbB8/kXY=
Subject key identifier: CB:04:7D:80:7D:45:D0:FA:4E:64:A7:A0:07:AD:B5:06:2B:B2:7C:73
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01997073D62B556529D8BDD9E262245E71FC
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ywR9gH1F0PpOZKegB621BiuyfHM.roa
Signing time: Mon 22 Sep 2025 08:04:23 +0000
ROA not before: Mon 22 Sep 2025 08:04:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39855
IP address blocks: 168.199.0.0/24 maxlen: 24
168.199.1.0/24 maxlen: 24
168.199.2.0/23 maxlen: 24
168.199.4.0/24 maxlen: 24
168.199.5.0/24 maxlen: 24
168.199.6.0/23 maxlen: 24
168.199.8.0/24 maxlen: 24
168.199.9.0/24 maxlen: 24
168.199.10.0/23 maxlen: 24
168.199.12.0/24 maxlen: 24
168.199.13.0/24 maxlen: 24
168.199.14.0/23 maxlen: 24
168.199.16.0/24 maxlen: 24
168.199.17.0/24 maxlen: 24
168.199.22.0/23 maxlen: 24
168.199.24.0/24 maxlen: 24
168.199.25.0/24 maxlen: 24
168.199.26.0/24 maxlen: 24
168.199.27.0/24 maxlen: 24
168.199.28.0/24 maxlen: 24
168.199.29.0/24 maxlen: 24
168.199.30.0/24 maxlen: 24
168.199.31.0/24 maxlen: 24
168.199.32.0/24 maxlen: 24
168.199.33.0/24 maxlen: 24
168.199.34.0/24 maxlen: 24
168.199.35.0/24 maxlen: 24
168.199.36.0/24 maxlen: 24
168.199.37.0/24 maxlen: 24
168.199.38.0/24 maxlen: 24
168.199.39.0/24 maxlen: 24
168.199.40.0/24 maxlen: 24
168.199.41.0/24 maxlen: 24
168.199.42.0/24 maxlen: 24
168.199.43.0/24 maxlen: 24
168.199.44.0/24 maxlen: 24
168.199.45.0/24 maxlen: 24
168.199.46.0/24 maxlen: 24
168.199.47.0/24 maxlen: 24
168.199.48.0/23 maxlen: 24
168.199.50.0/24 maxlen: 24
168.199.51.0/24 maxlen: 24
168.199.52.0/23 maxlen: 24
168.199.54.0/24 maxlen: 24
168.199.55.0/24 maxlen: 24
168.199.56.0/23 maxlen: 24
168.199.58.0/24 maxlen: 24
168.199.59.0/24 maxlen: 24
168.199.60.0/23 maxlen: 24
168.199.62.0/24 maxlen: 24
168.199.63.0/24 maxlen: 24
168.199.96.0/24 maxlen: 24
168.199.97.0/24 maxlen: 24
168.199.98.0/24 maxlen: 24
168.199.99.0/24 maxlen: 24
168.199.100.0/24 maxlen: 24
168.199.101.0/24 maxlen: 24
168.199.102.0/24 maxlen: 24
168.199.103.0/24 maxlen: 24
168.199.104.0/24 maxlen: 24
168.199.105.0/24 maxlen: 24
168.199.106.0/24 maxlen: 24
168.199.107.0/24 maxlen: 24
168.199.108.0/24 maxlen: 24
168.199.109.0/24 maxlen: 24
168.199.110.0/24 maxlen: 24
168.199.111.0/24 maxlen: 24
168.199.112.0/23 maxlen: 24
168.199.114.0/24 maxlen: 24
168.199.115.0/24 maxlen: 24
168.199.116.0/23 maxlen: 24
168.199.118.0/24 maxlen: 24
168.199.119.0/24 maxlen: 24
168.199.120.0/23 maxlen: 24
168.199.122.0/24 maxlen: 24
168.199.123.0/24 maxlen: 24
168.199.124.0/23 maxlen: 24
168.199.126.0/24 maxlen: 24
168.199.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:70:73:d6:2b:55:65:29:d8:bd:d9:e2:62:24:5e:71:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Sep 22 08:04:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb047d807d45d0fa4e64a7a007adb5062bb27c73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d5:f0:d5:05:9d:df:05:98:e9:67:f6:2b:62:
90:30:51:50:f2:c0:8c:47:f4:f1:f0:d9:7c:cf:e3:
b6:4b:4a:00:60:86:40:9d:94:e6:63:d4:d6:3a:ef:
f5:b7:b9:4b:39:03:59:b9:24:e6:99:4b:bc:05:27:
a1:41:c0:2e:b8:3e:29:39:80:98:96:98:25:17:47:
68:02:b4:e6:48:fb:2e:53:66:11:ea:c3:e7:f0:18:
9e:28:e1:40:5b:a9:22:0d:40:80:67:2a:53:ff:4d:
44:a7:a1:72:c5:27:68:13:5f:04:15:8f:5b:71:78:
51:f0:6e:68:fb:56:d8:70:74:3e:00:22:48:d4:61:
36:12:15:e6:05:9e:2e:16:e9:f2:c5:a7:f1:34:a1:
62:74:15:8d:33:ab:9f:da:5a:36:36:7e:92:07:19:
18:cc:c4:2e:bd:74:0c:25:71:40:6a:22:35:d9:f9:
85:af:81:27:41:4a:18:48:0f:32:23:19:3a:bc:49:
c2:30:c2:3e:79:c8:e5:09:52:0f:f5:2f:76:db:9e:
38:d3:76:f4:23:2d:06:db:16:f1:28:5a:3b:2a:90:
cc:ca:b8:ae:68:76:89:5c:f7:00:19:a5:6c:d8:69:
04:78:a8:c8:d4:b7:9b:d8:30:bc:70:80:71:a8:66:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:04:7D:80:7D:45:D0:FA:4E:64:A7:A0:07:AD:B5:06:2B:B2:7C:73
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ywR9gH1F0PpOZKegB621BiuyfHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
168.199.0.0-168.199.17.255
168.199.22.0-168.199.63.255
168.199.96.0/19
Signature Algorithm: sha256WithRSAEncryption
86:80:c4:94:19:fc:ac:1b:7e:cc:91:dd:67:4d:a2:79:22:ae:
e2:b3:53:89:f8:ad:19:4e:d6:6f:ff:46:3a:69:9d:ee:e5:08:
7a:03:8b:1b:40:37:6f:2d:e3:42:79:77:3f:dd:4b:0d:5f:30:
a3:4f:72:ca:9a:22:f6:31:e5:a3:dc:7a:76:65:ae:ac:a9:8f:
30:79:04:b6:cc:36:b9:c5:fe:39:df:58:11:38:95:bf:b3:20:
07:62:e8:e1:61:1e:76:7a:2e:f6:1e:45:8a:b9:4e:6a:55:83:
2b:fc:68:79:6a:bd:d0:49:a0:b8:06:eb:51:80:ff:af:77:2e:
89:a2:bb:14:7b:97:ba:c5:c4:bd:de:d4:c9:08:15:54:93:4e:
a6:19:4d:65:31:54:0f:67:29:1c:0c:01:16:2c:dd:2e:88:10:
e9:49:aa:06:ed:c9:54:b5:ec:cc:0c:24:62:60:0a:99:23:44:
b8:37:dc:a3:7c:18:39:d8:46:f8:4c:ee:e9:4f:c5:84:17:4b:
49:6f:58:0c:d0:88:a9:8b:66:d3:56:c4:c8:f1:2a:78:99:85:
a2:1c:d4:29:f4:7f:76:43:8d:bc:a6:de:c7:8a:3a:a9:41:94:
3b:56:c5:91:3f:46:d2:20:21:99:f1:f9:45:43:ea:1a:e4:fd:
5f:d2:9b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:04:55 2025 by rpki-client