Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/S8pee0tI47RLGYG2z8lxQYZeGSg.roa
File: S8pee0tI47RLGYG2z8lxQYZeGSg.roa (raw, json)
Hash identifier: cT4wTQJBvsAhYKRmyc8wsVdwVzMUKyfWkMNUd0N9/8E=
Subject key identifier: 4B:CA:5E:7B:4B:48:E3:B4:4B:19:81:B6:CF:C9:71:41:86:5E:19:28
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DAFCF3B41AD94038268C497890FE5D264
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/S8pee0tI47RLGYG2z8lxQYZeGSg.roa
Signing time: Tue 21 Apr 2026 11:31:27 +0000
ROA not before: Tue 21 Apr 2026 11:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.237.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Apr 2026 12:24:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:cf:3b:41:ad:94:03:82:68:c4:97:89:0f:e5:d2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 21 11:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bca5e7b4b48e3b44b1981b6cfc97141865e1928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:36:93:73:a3:0d:71:1e:54:e9:36:8f:9c:3d:
b3:32:b2:9e:ff:54:7d:f8:97:4a:e8:64:86:42:1d:
d5:e8:b8:77:70:dd:52:2b:32:39:44:56:f6:03:03:
0c:78:b6:b3:ff:ba:5f:20:1b:37:1f:4c:08:b2:c2:
b1:d7:40:6c:9f:8c:5a:5d:95:47:11:4e:40:f1:72:
9d:f8:be:19:8a:6c:e2:33:8c:9e:99:e7:35:d8:20:
5f:c5:cc:0a:09:ae:1d:4d:59:d7:25:8c:2f:a6:2e:
97:31:d3:18:fa:13:b5:d8:4a:0e:65:13:ee:28:4a:
89:18:a8:62:95:18:d4:a4:07:b8:f1:ca:a7:21:86:
90:36:ba:11:87:ab:2f:af:8b:1f:d1:47:3b:66:53:
30:c8:e7:e2:74:c4:9c:99:a8:f7:fb:03:cc:65:f6:
d4:10:ee:72:ac:0f:3b:ec:ab:de:1b:f6:1d:56:b6:
4d:00:0b:b2:94:1f:a6:b6:37:bf:07:4f:39:98:0d:
be:1b:4f:d2:65:d5:e6:07:51:76:cb:b1:8f:dc:a7:
7c:e2:6c:62:2a:01:77:9e:3c:64:22:d8:24:ef:5f:
db:3a:fd:75:7d:49:53:8e:b6:55:f2:ec:bd:70:de:
bc:42:c2:4a:de:52:23:9c:a9:b3:cc:b3:4b:c4:83:
17:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CA:5E:7B:4B:48:E3:B4:4B:19:81:B6:CF:C9:71:41:86:5E:19:28
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/S8pee0tI47RLGYG2z8lxQYZeGSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.237.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:6b:cd:31:b4:f2:ff:40:fa:f5:98:79:6b:49:05:b4:99:15:
75:0e:8a:95:ae:3f:23:85:e7:0b:80:a2:2b:7f:ff:9b:b7:80:
9f:2b:cb:6c:f0:a3:fb:c1:b8:71:b2:88:f8:2b:ae:67:72:fd:
0f:a5:a1:d6:b5:6c:d7:1b:7e:bc:d4:e7:41:98:3e:91:3a:08:
34:e4:92:9f:c0:0e:3c:59:d5:40:42:31:e3:46:19:31:ec:2d:
81:f4:24:e1:ca:b8:ef:c3:cf:9e:c3:c0:06:2d:e1:f0:c7:d0:
c2:37:5f:88:2a:76:0d:14:48:12:4a:b1:70:8e:c5:c8:8d:a9:
83:7f:1e:e2:73:e6:7e:71:5a:ed:45:a5:5a:f7:75:c2:a7:9c:
53:18:c3:fd:cb:36:1a:39:93:7b:64:7c:1c:a7:97:91:be:16:
93:49:ca:ed:0c:1a:a1:fa:7f:ff:76:50:10:9e:25:1c:ef:60:
fb:93:98:2a:9b:bc:a0:63:b1:18:4b:95:de:19:5e:d0:df:1c:
1a:30:15:a1:f3:2b:79:9a:7d:39:72:ed:95:a1:50:7d:70:d7:
69:b7:89:e7:3d:b4:4b:f6:a3:0b:9d:67:ff:5a:c6:3b:5f:64:
bb:98:07:69:82:e0:40:61:25:45:d5:ee:15:7f:bf:31:84:cf:
6b:67:de:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 24 20:30:45 2026 by rpki-client