Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7mtSaUXoGbA6Wdak_uj06Lyc8-c.roa
File: 7mtSaUXoGbA6Wdak_uj06Lyc8-c.roa (raw, json)
Hash identifier: aCFSpIGr0Q0LIi/hwzEEFfbAVoiTD8cr07RuHWNywgE=
Subject key identifier: EE:6B:52:69:45:E8:19:B0:3A:59:D6:A4:FE:E8:F4:E8:BC:9C:F3:E7
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A05DFB6A2EE9A27696E02D4BB13162B30C
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7mtSaUXoGbA6Wdak_uj06Lyc8-c.roa
Signing time: Tue 01 Sep 2026 17:19:12 +0000
ROA not before: Tue 01 Sep 2026 17:19:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.2.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.87.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
138.249.28.0/24 maxlen: 24
138.249.46.0/24 maxlen: 24
138.249.52.0/24 maxlen: 24
138.249.54.0/24 maxlen: 24
138.249.58.0/24 maxlen: 24
138.249.59.0/24 maxlen: 24
138.249.63.0/24 maxlen: 24
138.249.77.0/24 maxlen: 24
138.249.84.0/24 maxlen: 24
138.249.86.0/24 maxlen: 24
138.249.88.0/24 maxlen: 24
138.249.91.0/24 maxlen: 24
138.249.98.0/24 maxlen: 24
138.249.150.0/24 maxlen: 24
138.249.201.0/24 maxlen: 24
138.249.255.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.25.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
170.168.144.0/24 maxlen: 24
170.168.146.0/24 maxlen: 24
170.168.197.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:fb:6a:2e:e9:a2:76:96:e0:2d:4b:b1:31:62:b3:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 1 17:19:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ee6b526945e819b03a59d6a4fee8f4e8bc9cf3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:55:c9:96:4d:9b:8d:19:04:e1:9a:62:a1:92:
0f:e0:4e:05:51:54:ce:97:a7:96:f8:2f:a9:ab:3b:
9a:76:b1:e2:11:dc:36:91:47:52:7f:74:ac:4b:50:
af:7b:98:ad:33:78:22:14:54:87:70:6e:f7:0c:b9:
0b:69:11:43:ad:d2:de:76:11:47:76:05:4d:f9:ed:
63:3d:6c:a2:bd:78:a5:57:79:99:b0:23:5f:eb:a8:
c5:ba:c7:52:ff:17:eb:df:f5:44:61:69:64:e1:31:
36:f9:29:21:c3:1b:44:85:12:2a:7f:28:05:51:78:
44:36:6a:13:81:82:bd:76:3b:6e:d4:4f:db:52:c4:
da:3e:c5:13:b3:58:b3:9a:2e:02:91:d9:81:58:19:
30:0d:a3:fa:78:a3:c7:11:5b:4c:ec:45:88:e5:de:
d6:da:44:9f:5f:42:9d:6d:14:8e:84:ee:9e:db:6a:
e2:69:ab:71:f9:8f:0d:96:b3:bd:67:1d:84:a6:60:
c5:17:17:62:6e:62:29:2c:ac:16:23:eb:28:9e:13:
5b:27:30:59:7f:fe:98:e3:c7:3d:35:bd:cb:b6:e0:
40:d8:c8:e7:e9:52:2f:87:6a:66:78:b3:bb:01:c8:
18:d7:c1:6c:52:63:49:90:91:00:5a:a2:2f:5b:d3:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:52:69:45:E8:19:B0:3A:59:D6:A4:FE:E8:F4:E8:BC:9C:F3:E7
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/7mtSaUXoGbA6Wdak_uj06Lyc8-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.2.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.87.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
138.249.28.0/24
138.249.46.0/24
138.249.52.0/24
138.249.54.0/24
138.249.58.0/23
138.249.63.0/24
138.249.77.0/24
138.249.84.0/24
138.249.86.0/24
138.249.88.0/24
138.249.91.0/24
138.249.98.0/24
138.249.150.0/24
138.249.201.0/24
138.249.255.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.60.0/24
155.212.63.0/24
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.25.0-170.168.27.255
170.168.32.0/24
170.168.144.0/24
170.168.146.0/24
170.168.197.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:7a:46:df:4d:aa:3e:69:1d:37:f8:a8:4d:49:01:d8:65:57:
5a:ec:67:a5:6e:5b:f7:80:d0:5c:57:d2:1a:32:74:dc:58:97:
70:38:70:4d:c8:54:4a:d7:6a:4d:87:8c:89:83:88:f2:74:66:
c3:15:5a:23:3e:b4:db:c0:59:0e:50:92:58:9c:81:5f:db:34:
37:96:e3:3c:50:81:13:0f:d8:b0:a6:ca:73:15:be:b6:10:e5:
1d:21:cc:5c:70:2a:49:3e:c7:3c:69:eb:f6:b4:8a:3e:36:4f:
e6:a5:26:04:7c:c2:61:b4:0f:de:6f:15:71:da:87:25:4f:27:
1a:da:3d:fd:f4:67:c0:58:75:39:7e:79:88:4b:08:7e:80:10:
a4:da:e9:16:45:2e:fc:53:2c:7a:45:8c:8b:c0:b0:72:21:f0:
2b:6a:76:33:1f:53:10:86:fa:2e:a7:94:47:6b:91:1a:05:c2:
61:3c:a9:8c:26:96:9d:3b:c0:02:1c:d0:0a:0f:29:d9:ad:6b:
64:c9:77:d8:ee:59:79:c5:ca:18:3e:50:66:4e:14:79:87:79:
fa:99:44:1e:e3:e2:4e:e4:85:c0:85:87:0a:3d:a9:3c:4a:9b:
ec:90:c7:43:53:95:ca:1b:24:32:0f:3a:ea:16:58:b0:62:c2:
c4:7a:fa:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:46:14 2026 by rpki-client