Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YxBKUq8U4tPQyTj4ZGewmyl20P8.roa
File: YxBKUq8U4tPQyTj4ZGewmyl20P8.roa (raw, json)
Hash identifier: oJZvZFELggaUL6X9qLuU1cv4Gz2+bscfRfMu2V9z7GE=
Subject key identifier: 63:10:4A:52:AF:14:E2:D3:D0:C9:38:F8:64:67:B0:9B:29:76:D0:FF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A181E96877528BBF6B4645BC92F2CFC2AC
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YxBKUq8U4tPQyTj4ZGewmyl20P8.roa
Signing time: Wed 28 Oct 2026 09:48:39 +0000
ROA not before: Wed 28 Oct 2026 09:48:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
136.176.160.0/24 maxlen: 24
147.90.31.0/24 maxlen: 24
147.90.33.0/24 maxlen: 24
147.90.43.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.46.0/24 maxlen: 24
147.90.49.0/24 maxlen: 24
147.90.195.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.216.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
147.90.241.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.188.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:e9:68:77:52:8b:bf:6b:46:45:bc:92:f2:cf:c2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 28 09:48:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=63104a52af14e2d3d0c938f86467b09b2976d0ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:30:97:c7:b1:cd:48:20:aa:4a:f4:27:c3:ce:
f2:1a:d1:97:72:d2:97:f1:aa:e7:41:1e:f1:b1:93:
9d:07:0e:40:62:0c:31:2f:24:37:74:98:e3:17:c4:
bf:e2:35:df:f6:79:b6:e6:7d:1d:de:64:2f:29:e6:
2f:b5:3f:95:51:5e:da:1b:2c:47:7e:02:08:ed:62:
a8:d9:85:5d:09:d3:50:a7:7f:47:56:2d:5f:9a:4b:
0b:19:02:87:b3:75:23:b5:7e:ff:ba:d2:1b:63:09:
49:31:53:e8:53:28:c0:4b:05:b4:43:8c:cd:d3:18:
c5:88:35:1f:52:82:b3:1a:ba:09:d8:10:5a:bb:3a:
c6:1e:d0:55:e0:15:2f:5e:e8:e9:5d:24:72:4b:20:
d7:26:7a:9f:ec:22:20:ec:41:31:25:a3:a6:a0:b6:
97:ab:14:49:9f:3d:19:d1:5b:10:1b:13:24:a4:49:
0a:0a:25:80:2b:59:75:2b:ae:25:c0:73:b6:92:bc:
38:c3:43:43:27:02:b7:32:d0:d1:7f:c3:70:e3:03:
ef:ee:73:67:d7:fe:3c:a1:c9:da:9b:8b:b2:8c:d5:
a1:a1:50:0d:af:1b:73:5d:b7:39:cd:b1:6c:6a:a3:
ec:24:1b:58:80:a9:a3:55:55:f0:22:7e:0f:c2:cb:
96:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:10:4A:52:AF:14:E2:D3:D0:C9:38:F8:64:67:B0:9B:29:76:D0:FF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/YxBKUq8U4tPQyTj4ZGewmyl20P8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
136.176.160.0/24
147.90.31.0/24
147.90.33.0/24
147.90.43.0/24
147.90.45.0-147.90.46.255
147.90.49.0/24
147.90.195.0/24
147.90.209.0/24
147.90.216.0/24
147.90.227.0/24
147.90.236.0/24
147.90.241.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.188.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:86:42:0f:0d:e8:8e:0e:c9:b8:e8:3f:86:33:27:3f:21:4f:
dc:55:75:63:a8:79:1a:13:34:3a:67:5a:8f:b0:55:ed:c8:af:
a4:68:fc:f7:5d:c7:b9:e9:c8:04:78:ff:19:0a:7d:d2:c4:08:
fb:b4:a2:ec:b0:f2:9e:e7:b5:40:e9:9b:7b:d8:c4:8d:fe:5d:
61:3f:cb:ec:1b:38:7f:34:84:38:d3:41:47:f1:be:b3:a0:f4:
d0:55:7f:e1:40:ee:c1:d4:5f:53:6d:09:a5:1c:22:24:d4:e6:
2c:df:f0:cc:3d:01:1e:76:69:78:ca:ff:03:ac:fc:88:91:54:
b4:e2:7c:82:11:8f:a1:d1:ff:b9:a4:4d:41:a2:2c:76:7b:64:
53:99:1d:84:e1:0b:42:e4:b8:76:eb:af:c2:07:0f:df:c7:8a:
a5:08:98:76:86:a1:0d:ca:d0:bc:3c:fd:bd:e6:cd:d5:6e:80:
1e:2e:87:2d:4b:4d:8d:ea:3c:13:3a:7e:d5:89:84:dd:2d:d3:
d3:c8:f0:53:9b:e8:ff:c5:01:57:33:8c:0a:ab:fe:80:61:eb:
ab:37:15:91:9e:91:10:1f:71:49:f5:ee:fe:37:49:a9:26:22:
f9:f6:ba:fa:e6:19:88:f4:ac:8c:d3:7f:17:29:31:ed:b3:79:
48:f9:c9:0b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 04:16:25 2026 by rpki-client