Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Cfv6qRzx4KCG3lCxhHaw4KI-YQM.roa
File: Cfv6qRzx4KCG3lCxhHaw4KI-YQM.roa (raw, json)
Hash identifier: JcE47ROnLbCcB20E3A4ZTv2yK1IapvbymsOP4cCSHJE=
Subject key identifier: 09:FB:FA:A9:1C:F1:E0:A0:86:DE:50:B1:84:76:B0:E0:A2:3E:61:03
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0198F5727764BF34A40806D78E3619C41FA2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Cfv6qRzx4KCG3lCxhHaw4KI-YQM.roa
Signing time: Fri 29 Aug 2025 10:49:36 +0000
ROA not before: Fri 29 Aug 2025 10:49:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:f5:72:77:64:bf:34:a4:08:06:d7:8e:36:19:c4:1f:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 29 10:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09fbfaa91cf1e0a086de50b18476b0e0a23e6103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8a:2f:41:fa:72:5b:51:51:7c:76:e7:7d:98:
25:f8:12:ad:51:9f:65:7f:a2:95:69:16:45:40:68:
3b:72:08:26:22:53:a4:cc:e2:d7:40:9f:34:75:ea:
bc:b2:34:07:75:bc:e7:bb:93:cc:a3:30:73:7a:73:
de:02:2a:dc:94:d5:2b:8a:42:22:3c:30:32:26:51:
6a:96:80:6d:75:55:26:ed:46:d5:0a:39:12:7a:ce:
69:df:f9:04:83:f5:3b:f3:0d:cd:a8:2e:ee:76:27:
2a:ce:49:71:45:bd:e0:b8:fb:fd:97:5a:3e:22:0a:
ba:b4:4a:40:78:77:89:bb:c9:34:ba:bf:29:8f:df:
fb:19:fe:ee:df:c3:dd:9d:47:54:63:54:a7:ce:7f:
3a:20:9f:7d:29:78:a4:3e:bc:10:79:be:34:69:eb:
70:39:09:f4:e7:98:67:82:26:7d:6c:b0:48:cf:39:
08:ae:00:b9:a6:3b:db:d7:ec:25:6e:bc:42:45:b3:
a5:4e:cc:ce:bf:35:00:71:c8:5a:cd:c1:20:7d:40:
bd:9c:21:9b:8c:e9:52:be:44:dc:5d:fe:af:4f:1b:
07:bc:d2:21:f6:e7:1d:51:01:95:c3:ef:65:2b:d1:
5f:07:9a:30:87:a8:fa:a6:97:aa:9d:85:1b:c4:2c:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FB:FA:A9:1C:F1:E0:A0:86:DE:50:B1:84:76:B0:E0:A2:3E:61:03
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Cfv6qRzx4KCG3lCxhHaw4KI-YQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:0b:99:57:0c:e5:4e:0e:bb:07:32:f9:b8:69:56:58:6d:f5:
7f:b9:cf:58:79:4f:0e:64:fb:2a:59:34:e8:e5:05:04:67:58:
0a:af:95:ca:be:44:7f:b0:1c:14:9f:cc:51:e2:2b:85:83:06:
b7:4f:87:84:1b:85:2b:cf:74:33:92:50:28:55:81:a3:ce:36:
1b:94:3b:b1:2f:36:4a:25:a4:97:ca:9a:9e:d3:5d:1e:be:e7:
ca:46:f5:d7:4c:89:e0:41:6b:89:9c:80:73:df:e2:49:cd:01:
58:37:d6:b4:6c:e9:53:7a:57:fc:01:14:ad:15:a2:a2:c1:31:
d8:28:7a:02:74:e1:aa:09:50:02:fa:65:83:2a:81:5b:1f:82:
fa:53:72:24:23:38:37:aa:0b:5e:01:58:cd:9e:b0:a1:fe:ab:
c8:f8:0a:bb:50:52:31:a0:79:dd:c6:2a:85:c5:42:68:6e:24:
5e:ca:7c:bd:ed:84:17:a2:4d:bb:7b:02:35:df:b5:05:a5:2b:
46:57:07:ad:7f:d3:6c:89:d6:c5:8c:8d:8b:20:98:2d:ad:02:
0c:91:8e:00:d2:ee:2c:a1:66:9d:4b:ed:ae:db:fe:12:90:7d:
d3:fd:87:ec:35:0a:18:17:08:a9:4e:b2:ae:b3:f6:62:cb:11:
bf:95:6c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:56:36 2025 by rpki-client