Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/52EbtlKUjNB1KSq87bIHIn3Z0NQ.roa
File: 52EbtlKUjNB1KSq87bIHIn3Z0NQ.roa (raw, json)
Hash identifier: XWcEY7EDlet2As8yBV/Fg6LK49gHT6GELMcnJ+4D9jI=
Subject key identifier: E7:61:1B:B6:52:94:8C:D0:75:29:2A:BC:ED:B2:07:22:7D:D9:D0:D4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019E403FB5AD9349AD7F36EBA0D954418D58
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/52EbtlKUjNB1KSq87bIHIn3Z0NQ.roa
Signing time: Tue 19 May 2026 12:39:37 +0000
ROA not before: Tue 19 May 2026 12:39:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 14:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:3f:b5:ad:93:49:ad:7f:36:eb:a0:d9:54:41:8d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 19 12:39:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e7611bb652948cd075292abcedb207227dd9d0d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f8:61:52:b2:9e:d3:ff:b5:8f:a4:d7:86:e0:
6d:22:3b:c9:fc:f0:c1:da:29:6e:11:65:3e:17:a0:
ad:f8:11:bb:ab:d4:4f:21:87:05:39:b4:47:ab:49:
f0:e4:20:4c:29:42:cf:94:ea:d1:b0:80:4c:58:e5:
cf:03:dd:1e:25:a0:55:b0:13:3d:d8:a6:25:b4:be:
70:ca:2c:d2:bb:60:de:99:40:93:0c:65:83:18:97:
9f:ba:c1:46:1e:6c:91:3d:4d:88:d6:0d:86:db:c9:
f9:a6:78:22:0c:44:31:8a:bd:c0:4b:47:e1:08:5d:
ab:e7:63:18:8c:c5:a5:f3:21:3d:c5:1a:23:ff:ae:
e6:d1:37:62:09:78:83:f2:56:e7:0d:76:f2:08:22:
48:77:2b:df:30:61:3f:d4:39:d3:98:5c:f4:2f:23:
56:04:5f:40:aa:5d:e6:d5:36:75:fc:c8:c7:08:0e:
90:42:4c:92:d3:bd:61:0f:47:8d:d7:7f:2f:1b:f5:
e5:49:44:7e:64:f2:80:50:85:d6:19:e3:f9:d3:8c:
75:66:eb:97:ec:7b:75:aa:61:c3:41:2a:9a:a0:0c:
cf:87:97:e0:52:e6:b4:f0:f0:62:e7:67:fa:2c:5c:
c9:2d:0f:81:0c:28:6c:68:f9:5b:71:5d:36:29:6e:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:61:1B:B6:52:94:8C:D0:75:29:2A:BC:ED:B2:07:22:7D:D9:D0:D4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/52EbtlKUjNB1KSq87bIHIn3Z0NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.45.0/24
147.90.209.0/24
147.90.227.0/24
147.90.236.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:1a:b9:bb:e4:39:5f:c1:33:51:74:33:69:6d:e3:80:d0:67:
13:9a:30:a6:01:9e:70:49:56:0c:e9:da:11:7a:75:dc:fe:40:
b3:2b:ee:55:10:da:8f:33:3a:9e:83:36:ef:f5:7b:1e:12:fc:
7d:41:f9:81:af:78:0d:88:a9:57:d7:3d:f6:f0:89:df:1b:eb:
29:c7:98:c6:55:95:2d:0b:e9:3a:11:4f:2e:c2:55:ee:c1:7c:
b9:e6:09:40:c3:92:13:37:0f:08:19:1d:31:e9:6e:bd:2e:31:
5f:3b:d1:e8:df:05:bc:28:ac:08:de:04:ba:0d:42:c2:bc:0a:
a2:44:17:dc:11:05:27:f9:a4:58:97:ef:b7:fa:11:00:01:18:
73:c0:2b:be:91:8e:d2:42:ef:4b:5f:f1:a6:1e:d3:33:79:8c:
19:08:53:6c:de:2f:c8:70:46:7e:a8:10:96:a3:fe:d7:0c:6b:
f8:38:11:4f:4e:f8:ac:18:86:00:d6:3a:18:f1:86:91:1e:56:
6e:dd:ab:1e:28:d3:9e:1d:51:e2:5f:0f:af:e8:06:a2:04:21:
bc:9c:8e:7f:58:1d:1e:c3:50:e0:9b:b7:46:47:1d:ad:d4:a2:
58:a4:0d:4e:c4:5d:c8:3d:7f:69:01:f6:e5:23:3e:83:29:e7:
92:70:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 00:46:29 2026 by rpki-client