Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0i-a6sJuz4HmEcsxDJy0yV87aBo.roa
File: 0i-a6sJuz4HmEcsxDJy0yV87aBo.roa (raw, json)
Hash identifier: VCSVdB7upuA+hM4Es90M0JjESNkfGsCbDHTmkAZFGzk=
Subject key identifier: D2:2F:9A:EA:C2:6E:CF:81:E6:11:CB:31:0C:9C:B4:C9:5F:3B:68:1A
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DD2846CF6A4ED74B3F3248E102FEB354E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0i-a6sJuz4HmEcsxDJy0yV87aBo.roa
Signing time: Tue 28 Apr 2026 05:16:27 +0000
ROA not before: Tue 28 Apr 2026 05:16:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d2:84:6c:f6:a4:ed:74:b3:f3:24:8e:10:2f:eb:35:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 28 05:16:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d22f9aeac26ecf81e611cb310c9cb4c95f3b681a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:a8:31:5f:2a:92:0c:03:b3:75:86:ba:a3:
2f:d4:12:76:0a:82:17:9e:bb:ec:fd:59:43:e1:0a:
2c:92:07:af:ec:c6:9a:f9:20:a8:05:55:08:cb:0d:
57:e2:4a:f9:fc:5f:77:f3:c3:6e:98:27:64:4b:a9:
7b:26:88:ec:fb:59:4b:7d:34:e8:d6:8d:cd:60:78:
22:05:14:2a:da:ab:3f:d1:98:16:86:9f:ae:ee:89:
3f:c8:d0:1f:36:fa:da:95:41:b7:90:3c:e0:4a:e5:
cc:7b:ad:b8:5c:d8:d5:fd:56:e8:9d:07:4c:25:be:
d8:a0:33:4e:16:14:80:a4:37:31:c8:a5:e5:70:f2:
a2:ec:0d:0d:ac:fb:c4:58:e5:3b:9e:f6:4c:5a:40:
ae:ff:ad:7c:cc:b3:fd:31:d1:25:b8:47:d8:b0:19:
1f:66:5c:22:30:46:0a:a1:fc:c7:95:45:c8:db:f0:
e7:79:a5:68:ad:d1:5c:8e:af:01:e5:b8:b0:35:21:
0c:9f:97:de:53:3c:f9:76:af:d1:ee:0a:21:dd:a2:
f6:ec:c8:1d:86:c4:b0:83:29:c9:ce:39:d7:3d:8c:
50:aa:ce:5b:22:bd:dc:fc:a2:29:d0:45:b9:3d:30:
7c:25:47:04:b8:74:c2:88:c8:2d:a2:18:a5:f7:8f:
3d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:9A:EA:C2:6E:CF:81:E6:11:CB:31:0C:9C:B4:C9:5F:3B:68:1A
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/0i-a6sJuz4HmEcsxDJy0yV87aBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
84:08:b0:5f:d5:e8:1a:d1:7a:d9:e1:c9:ea:03:02:30:7f:68:
c1:07:03:06:ae:c5:62:43:92:d0:d4:ee:c0:42:5d:d1:bf:b3:
1d:9b:e5:fe:fb:29:f3:93:a0:72:8d:14:f3:5b:91:1f:0d:75:
1c:b6:b8:b7:0d:94:77:6a:1a:f4:b1:fa:bc:4b:d3:67:ce:cf:
c8:a5:19:3c:21:0f:30:b5:3f:99:27:09:0d:06:b4:a0:ed:e6:
f1:99:e6:3e:75:86:b0:d6:84:3d:a5:94:df:c8:5d:e9:9d:6f:
88:45:49:a0:10:40:e9:98:d3:b4:9d:df:c7:49:06:c9:b5:c3:
32:e8:8a:57:3f:ae:74:f9:e8:1b:56:d0:89:e2:6d:83:55:01:
e2:08:79:2e:81:47:29:94:8e:4e:b6:6e:00:8a:bc:a8:03:13:
2e:82:33:0b:94:e0:7f:bc:b7:ea:e7:e2:47:86:d3:4c:9e:be:
a4:2f:2d:c3:07:c8:5c:7d:b0:ba:0b:95:31:01:92:9b:ab:42:
82:45:ab:a2:21:2c:14:1a:88:2c:53:e3:14:bb:af:c4:16:92:
13:8c:ac:38:1f:68:78:82:28:e8:a2:c0:5d:52:73:f0:ef:08:
3d:84:62:54:9c:e3:a5:9c:5c:76:bb:f8:5d:21:a6:83:d2:87:
43:b0:9f:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:15:54 2026 by rpki-client