Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7BiJdUAdAFQ8OVR73YRX9HrEpWU.roa
File: 7BiJdUAdAFQ8OVR73YRX9HrEpWU.roa (raw, json)
Hash identifier: EEOw/FthzeD722f0XgiePy2KiM5NwDtW6Nm+TRejuWI=
Subject key identifier: EC:18:89:75:40:1D:00:54:3C:39:54:7B:DD:84:57:F4:7A:C4:A5:65
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A048D279301F8291236F4D1702D4CFFCF2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7BiJdUAdAFQ8OVR73YRX9HrEpWU.roa
Signing time: Fri 28 Aug 2026 14:42:28 +0000
ROA not before: Fri 28 Aug 2026 14:42:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
134.49.91.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
173.209.12.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:d2:79:30:1f:82:91:23:6f:4d:17:02:d4:cf:fc:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 28 14:42:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ec188975401d00543c39547bdd8457f47ac4a565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:c1:31:95:8e:9b:8e:65:5c:8d:b3:32:cf:
d6:91:47:fd:fa:ab:51:e4:4b:ea:73:21:63:f4:27:
ec:63:db:c0:1d:20:f5:85:cb:1e:d8:7a:42:9b:c4:
04:dc:71:a0:04:e0:14:6a:2c:b1:f1:c4:f9:0b:09:
b8:a8:9f:6a:ef:98:6b:3e:14:b7:e8:58:29:45:4f:
47:92:05:f6:68:60:e1:35:9f:a5:38:8e:c6:13:eb:
4b:50:d1:7a:73:4e:bb:10:dd:ec:af:8f:0b:c8:7a:
f2:6f:04:aa:7b:ec:c4:1f:a2:8f:01:80:f0:62:94:
a7:df:53:df:4a:d8:f2:d3:c3:94:f9:cb:54:21:ea:
0e:db:02:74:86:a6:23:4c:87:dc:27:83:8e:19:ba:
ac:c4:23:b8:a0:6f:24:eb:9d:ec:b4:48:af:21:1c:
9e:d3:a2:79:ba:fe:e8:94:50:96:53:d3:99:b1:0e:
71:4b:c4:d1:90:80:61:27:20:f1:aa:ff:e5:56:30:
e5:cc:54:83:fe:7b:10:7e:8b:42:49:5a:d0:f2:87:
c8:c9:69:3e:aa:40:63:42:ed:a2:e5:71:ad:e2:44:
be:6b:1e:83:2d:0c:d0:8d:77:cc:b1:d2:c6:92:a4:
32:37:21:58:18:8f:7a:c2:bb:cb:13:09:e7:35:7c:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:18:89:75:40:1D:00:54:3C:39:54:7B:DD:84:57:F4:7A:C4:A5:65
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7BiJdUAdAFQ8OVR73YRX9HrEpWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
134.49.91.0/24
147.90.35.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.220.0/23
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
173.209.12.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:b3:16:fa:78:bb:57:35:61:5b:a8:08:94:d8:89:3a:31:e0:
38:57:bb:ac:05:64:ff:98:cd:f3:1b:42:80:93:ae:1a:d0:c1:
63:43:cc:1b:99:28:87:bb:67:8b:6d:83:72:f8:13:3d:76:ca:
14:64:a3:3a:15:99:d5:a5:7c:cb:9d:6d:e7:51:c9:24:33:86:
d5:a1:22:e5:93:d0:88:71:c0:dc:bc:70:be:2c:c1:97:19:9f:
3b:91:6e:07:0d:9f:02:b5:59:43:85:e8:1e:57:6b:55:de:90:
29:85:69:d5:54:b0:ed:cf:bc:1b:96:14:95:8e:6c:9b:21:bc:
24:0b:b6:61:5d:0f:d9:1a:1e:85:3c:0f:dd:2f:cf:1d:dc:10:
c4:d8:f3:65:df:a7:c8:4d:13:62:7f:7e:25:58:46:55:fc:36:
a4:60:b8:50:1c:62:39:c4:1c:5d:e3:29:6b:7f:54:c3:8c:8f:
cf:2e:ca:3d:78:91:22:99:24:55:8d:1f:69:a1:74:75:d9:48:
ea:f4:2e:ef:11:26:00:e4:05:c5:7b:d1:ac:6b:3d:ce:12:57:
1f:74:88:2b:e9:87:3b:b0:b0:0b:09:a2:a3:cc:4c:14:41:28:
5a:38:6d:7f:88:17:17:ce:cd:87:7c:0e:94:c7:58:5b:95:ec:
e8:36:f7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:58 2026 by rpki-client