Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KeLrg9Xa8F085CWMGM_JsfwoyCY.roa
File: KeLrg9Xa8F085CWMGM_JsfwoyCY.roa (raw, json)
Hash identifier: eF/7bIqI3mB7m+RInnqJSIPcWhfb39WQps0RQgjESFc=
Subject key identifier: 29:E2:EB:83:D5:DA:F0:5D:3C:E4:25:8C:18:CF:C9:B1:FC:28:C8:26
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F310C18AFEE58BDB378BB2CDB73965BC1
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KeLrg9Xa8F085CWMGM_JsfwoyCY.roa
Signing time: Sun 05 Jul 2026 06:51:43 +0000
ROA not before: Sun 05 Jul 2026 06:51:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:0c:18:af:ee:58:bd:b3:78:bb:2c:db:73:96:5b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 5 06:51:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=29e2eb83d5daf05d3ce4258c18cfc9b1fc28c826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8f:b6:3d:dd:96:fc:e1:46:21:7d:fd:83:b5:
25:e5:92:ba:30:06:ff:6e:1a:26:f0:14:0c:22:76:
36:c3:90:85:74:4b:ec:6c:55:55:8d:25:7f:ba:7f:
8b:c0:bb:93:cd:2f:c4:66:3b:14:f5:0b:9d:e0:63:
60:b6:47:50:4d:8c:60:ac:96:f2:6b:6d:1f:53:f6:
5c:48:5a:f8:7d:29:5e:0c:31:62:11:51:c5:da:ec:
38:1b:e2:d8:bc:fd:40:fb:4d:2b:fb:e1:2f:f5:66:
1d:82:c0:a2:66:d1:de:a3:28:82:2a:58:67:3d:6a:
d3:0d:79:b3:d6:a6:02:2b:39:15:ba:c2:53:32:97:
8c:f7:0a:f7:c5:13:b2:73:a2:de:da:5e:ac:0f:92:
0a:50:21:de:55:ac:b0:05:1a:00:43:40:76:c3:75:
d0:95:eb:de:98:3f:34:e5:6f:71:da:2c:e2:69:bc:
fc:ea:72:d2:e7:c7:0c:92:45:eb:b9:d9:db:5a:e0:
e8:4f:35:87:80:d6:88:02:15:9d:98:48:c3:9c:cf:
67:76:46:57:81:0e:8e:75:83:ed:a5:10:0d:4c:24:
d3:21:6f:8f:1f:2a:6c:36:e7:32:26:48:b8:5e:ae:
cb:ea:3a:be:83:7d:ba:b4:fb:db:ab:b8:91:93:7d:
7d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E2:EB:83:D5:DA:F0:5D:3C:E4:25:8C:18:CF:C9:B1:FC:28:C8:26
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/KeLrg9Xa8F085CWMGM_JsfwoyCY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
147.90.35.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.220.0/23
158.173.167.0/24
158.173.192.0/24
158.173.194.0/24
158.173.196.0/22
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:27:fc:8a:0a:cc:ea:41:2d:f1:c0:7f:b0:8f:ec:b2:53:b6:
fa:fb:4b:e7:fe:55:5b:46:05:14:e0:fb:51:14:29:0f:93:47:
4f:02:0f:4f:c1:6f:16:f4:a3:11:87:ca:9f:f3:64:73:70:16:
a1:74:76:a8:6e:91:3f:68:e8:ad:57:a8:a7:59:5a:91:bd:42:
17:aa:33:d6:fc:e2:28:c9:39:ed:1f:1d:56:48:28:98:bb:f2:
32:b2:81:df:00:fd:6e:ce:9f:7b:9e:6f:d7:cd:9c:f1:ec:83:
c0:b7:a7:b5:05:0a:dd:e1:4c:42:83:7d:1f:cb:f3:09:60:a3:
b9:7a:33:54:60:2f:7b:8e:b2:38:07:86:79:0b:d0:b2:9e:a1:
b6:77:78:27:52:29:db:d0:d2:f7:5a:79:30:4d:fc:55:15:cd:
b8:ea:e0:8a:0d:35:e1:67:27:78:a9:03:0e:ac:d7:36:98:ec:
b7:5b:00:4d:ba:6d:2b:d3:1a:76:f2:18:ae:04:fb:27:38:1c:
2c:d6:24:00:c3:11:06:0e:9d:02:8d:59:67:33:a8:87:a6:19:
f6:86:da:5a:ca:72:c1:08:87:b4:7a:a3:b7:e2:52:28:3d:90:
17:08:0c:03:40:6e:94:dc:c0:aa:93:7a:fb:d4:23:65:e5:14:
34:cb:09:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client