Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ofBlkkxUBE8JrdnmYQP38AgfEYg.roa
File: ofBlkkxUBE8JrdnmYQP38AgfEYg.roa (raw, json)
Hash identifier: A66aK4sW026E7WRUfV/32+zaPeBrMAE8znBcDybjTZo=
Subject key identifier: A1:F0:65:92:4C:54:04:4F:09:AD:D9:E6:61:03:F7:F0:08:1F:11:88
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1A0E78631184A49610D0A94D923731044
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ofBlkkxUBE8JrdnmYQP38AgfEYg.roa
Signing time: Tue 03 Nov 2026 10:14:50 +0000
ROA not before: Tue 03 Nov 2026 10:14:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.2.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.87.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
138.249.28.0/24 maxlen: 24
138.249.46.0/24 maxlen: 24
138.249.52.0/24 maxlen: 24
138.249.54.0/24 maxlen: 24
138.249.58.0/24 maxlen: 24
138.249.59.0/24 maxlen: 24
138.249.77.0/24 maxlen: 24
138.249.84.0/24 maxlen: 24
138.249.86.0/24 maxlen: 24
138.249.88.0/24 maxlen: 24
138.249.91.0/24 maxlen: 24
138.249.120.0/24 maxlen: 24
138.249.121.0/24 maxlen: 24
138.249.122.0/24 maxlen: 24
138.249.124.0/24 maxlen: 24
138.249.150.0/24 maxlen: 24
138.249.201.0/24 maxlen: 24
138.249.214.0/24 maxlen: 24
138.249.221.0/24 maxlen: 24
138.249.232.0/24 maxlen: 24
138.249.240.0/24 maxlen: 24
138.249.255.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.25.0/24 maxlen: 24
170.168.26.0/24 maxlen: 24
170.168.27.0/24 maxlen: 24
170.168.32.0/24 maxlen: 24
170.168.144.0/24 maxlen: 24
170.168.146.0/24 maxlen: 24
170.168.197.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a0:e7:86:31:18:4a:49:61:0d:0a:94:d9:23:73:10:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 3 10:14:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a1f065924c54044f09add9e66103f7f0081f1188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:89:8e:1f:91:13:18:fc:98:09:ac:1f:c4:ef:
36:c1:b2:c6:4d:f4:93:a1:ee:68:0d:0a:69:6c:da:
ab:71:60:6e:05:11:21:ee:c7:fd:f1:ed:a5:16:a8:
97:f1:71:11:ef:57:f7:67:17:0f:f9:c0:9b:b1:20:
7c:44:1f:74:d8:c7:73:17:49:ff:6f:5f:b6:d6:a3:
94:4b:95:7a:2f:d3:69:63:fe:39:66:31:e0:99:49:
17:dc:01:4d:0a:6e:69:86:85:ad:cd:df:ff:cc:b8:
48:44:87:77:b8:6b:45:fa:6d:9e:e3:75:c7:d5:cf:
02:fe:30:75:d0:86:f6:95:87:ac:af:af:86:5f:b7:
01:1c:c2:09:66:b0:3a:5e:bd:0e:79:ac:70:cc:64:
85:de:93:70:d4:1e:8a:16:8d:93:6a:44:5e:56:46:
92:fe:9e:18:f0:0e:fb:84:dc:04:e3:db:a9:51:be:
f3:93:f7:b9:ab:c2:ac:4c:15:52:70:0c:9d:3b:cb:
ed:ba:43:47:52:72:26:e5:06:ab:25:87:d1:a3:4e:
8d:b5:46:cf:be:b8:4f:9c:9a:c1:a1:e1:3a:6a:f5:
91:36:be:c1:94:93:d0:64:cc:58:37:ea:5d:9f:e1:
ab:96:0e:b1:a2:55:4c:55:22:87:16:cd:79:f9:c4:
6a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:65:92:4C:54:04:4F:09:AD:D9:E6:61:03:F7:F0:08:1F:11:88
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/ofBlkkxUBE8JrdnmYQP38AgfEYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.2.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.87.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
138.249.28.0/24
138.249.46.0/24
138.249.52.0/24
138.249.54.0/24
138.249.58.0/23
138.249.77.0/24
138.249.84.0/24
138.249.86.0/24
138.249.88.0/24
138.249.91.0/24
138.249.120.0-138.249.122.255
138.249.124.0/24
138.249.150.0/24
138.249.201.0/24
138.249.214.0/24
138.249.221.0/24
138.249.232.0/24
138.249.240.0/24
138.249.255.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.60.0/24
155.212.63.0/24
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.25.0-170.168.27.255
170.168.32.0/24
170.168.144.0/24
170.168.146.0/24
170.168.197.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
65:52:0b:81:9b:aa:b9:f6:b0:9a:4e:1e:56:27:af:3f:54:5e:
a6:0d:75:7a:c1:92:38:52:26:d8:7b:31:1a:d0:38:a9:aa:b9:
95:33:33:a9:73:1e:d5:3f:74:e8:2e:e5:64:83:8f:cc:63:a8:
2c:20:e6:59:cf:bf:25:3d:b1:4c:cf:53:30:1c:84:0e:af:1c:
ca:b6:e9:29:26:c0:c0:15:75:a4:55:94:18:29:2e:e3:e3:19:
ce:5e:4e:0c:15:d0:7c:7e:7e:33:9b:83:47:5d:5d:d6:96:2a:
b3:5b:03:33:e4:84:50:1f:6d:5c:c8:20:50:88:c9:e2:43:e5:
16:38:04:32:91:de:3e:22:6d:1d:6b:48:f8:cf:9e:c9:f2:3b:
8a:33:79:c6:75:0d:38:8c:82:20:01:0b:70:da:57:45:fb:4b:
b4:51:6a:6d:63:4b:95:e3:b0:10:b5:2b:f9:88:db:0c:04:06:
89:f3:24:e5:ac:65:f4:d1:0b:f8:8e:e6:4b:c5:e7:36:55:e0:
e2:c1:4c:6c:f8:b2:88:57:3f:37:95:45:d0:3b:b3:fd:e1:40:
6c:cc:9b:4d:4e:ac:f2:08:3c:9d:d3:e2:c4:ec:86:d7:6e:71:
c8:d3:8b:9b:63:7f:71:b8:fe:99:96:c6:f9:db:f9:51:00:15:
bb:38:eb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:43:16 2026 by rpki-client