Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cgZH3-UT7MtxueK6-1w10iMFF0A.roa
File: cgZH3-UT7MtxueK6-1w10iMFF0A.roa (raw, json)
Hash identifier: l+47MivjIYg1CPPubRAiEGugJXhNR0zgok+44GVhyjQ=
Subject key identifier: 72:06:47:DF:E5:13:EC:CB:71:B9:E2:BA:FB:5C:35:D2:23:05:17:40
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D0091850F0A0E10C3B35E53E050830856
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cgZH3-UT7MtxueK6-1w10iMFF0A.roa
Signing time: Wed 18 Mar 2026 10:50:29 +0000
ROA not before: Wed 18 Mar 2026 10:50:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Mar 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:91:85:0f:0a:0e:10:c3:b3:5e:53:e0:50:83:08:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 18 10:50:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=720647dfe513eccb71b9e2bafb5c35d223051740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:6e:1e:6c:69:8b:b8:a5:fc:93:e7:52:96:
7b:53:b5:5e:6c:f3:36:08:0a:10:59:96:4a:6d:f0:
1d:a7:e2:24:f3:94:38:1d:df:f2:1f:21:7a:ff:1a:
4b:5a:14:3d:44:14:0f:46:76:dd:9f:4b:ad:22:33:
ee:c2:8a:67:f7:69:04:5f:5b:1f:67:82:0d:2b:56:
8b:ca:26:d4:61:01:fd:3e:c8:13:c7:fa:0b:b5:e6:
14:3f:fa:8b:fe:8c:a4:ef:4d:b1:f3:29:17:a6:7b:
37:2f:a7:57:12:22:c1:50:db:1b:a4:72:b3:cd:4a:
20:a7:df:c9:24:de:c6:20:37:ed:4d:96:38:64:59:
ef:b4:7a:34:22:33:78:12:5b:7a:d5:ff:db:bf:48:
41:42:57:3d:52:5e:16:e6:22:18:1b:93:3a:59:c8:
00:65:cf:9e:c7:df:5e:b0:56:16:45:30:0f:86:66:
9d:67:32:a8:d1:d7:b1:3c:73:81:88:2b:28:e1:94:
a4:24:eb:8a:b2:21:38:15:44:72:bb:d4:d1:64:6a:
a6:c2:c5:40:c1:68:2e:fc:07:28:a5:69:eb:74:a2:
26:7c:7a:ec:6e:c3:1d:0b:ae:36:70:50:98:87:c7:
80:a6:92:ea:8d:ec:91:b1:78:d8:03:da:97:b1:9a:
80:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:06:47:DF:E5:13:EC:CB:71:B9:E2:BA:FB:5C:35:D2:23:05:17:40
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/cgZH3-UT7MtxueK6-1w10iMFF0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/24
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:b6:4c:45:1d:b0:a6:92:5c:aa:55:f0:58:eb:45:a2:82:86:
c0:e3:08:53:6c:de:92:9f:13:69:5a:f1:7f:64:b3:10:f4:55:
72:64:38:d8:e6:f4:ee:fa:26:78:ac:9a:d5:5d:99:44:9e:ca:
e2:58:91:77:81:b2:23:43:cf:85:2a:54:64:c8:47:b3:b8:8f:
66:e2:5b:60:ec:1d:7d:f0:18:0d:b4:7a:d8:41:a2:61:90:33:
09:c8:28:c2:54:22:67:6f:28:2f:aa:c5:c9:5c:37:90:fd:a9:
9e:f1:1a:2a:3e:54:ad:1f:13:cb:01:59:a7:05:34:4b:1f:d1:
7b:fa:44:38:fc:8d:c8:2b:b5:52:33:d5:43:63:d5:0f:e2:89:
cd:7e:e2:9d:65:ae:37:5b:bd:f1:f3:a3:be:c3:c8:df:57:92:
7e:5c:dc:1e:7f:dd:30:d9:f9:1c:30:ff:d9:f1:ad:b1:25:5e:
e7:0a:f3:cf:d3:42:14:dd:2b:11:f8:ca:65:c9:a5:ae:30:33:
12:43:b5:ac:12:ed:7b:36:b4:a9:b2:2f:72:ff:37:85:f0:80:
4d:c7:87:b6:93:15:38:db:38:27:48:61:13:a1:8d:34:aa:7c:
ac:ff:b8:75:72:96:30:17:c2:1c:84:dd:9a:8a:7c:5a:cb:9f:
55:ff:3f:e6
-----BEGIN CERTIFICATE-----
MIIGxTCCBa2gAwIBAgISAZ0AkYUPCg4Qw7NeU+BQgwhWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwMzE4MTA1MDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjA2NDdkZmU1MTNlY2NiNzFiOWUyYmFmYjVjMzVkMjIzMDUxNzQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYNuHmxpi7il/JPnUpZ7U7VebPM2
CAoQWZZKbfAdp+Ik85Q4Hd/yHyF6/xpLWhQ9RBQPRnbdn0utIjPuwopn92kEX1sf
Z4INK1aLyibUYQH9PsgTx/oLteYUP/qL/oyk702x8ykXpns3L6dXEiLBUNsbpHKz
zUogp9/JJN7GIDftTZY4ZFnvtHo0IjN4Elt61f/bv0hBQlc9Ul4W5iIYG5M6WcgA
Zc+ex99esFYWRTAPhmadZzKo0dexPHOBiCso4ZSkJOuKsiE4FURyu9TRZGqmwsVA
wWgu/AcopWnrdKImfHrsbsMdC642cFCYh8eAppLqjeyRsXjYA9qXsZqADwIDAQAB
o4ID0TCCA80wHQYDVR0OBBYEFHIGR9/lE+zLcbniuvtcNdIjBRdAMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvY2daSDMtVVQ3TXR4dWVLNi0xdzEwaU1GRjBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB5QYIKwYBBQUHAQcBAf8EggHUMIIB0DCCAcwEAgABMIIB
xAMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQAPqmEAwQBPqmGMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVFf
MgMEA1FfOAMEAVQz6gMEAVwz6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUD
BANnPcAwDAMEAGd9TQMEBGd9QAMEAWfSxgMEAmfV1AMEAWf/TAMEApsCsDAMAwQB
mwK2AwQAmwK8AwQBmwLCAwQAmwLUMAwDBACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC
3gMEAZ6thgMEAp6tjDAMAwQDnq2YAwQAnq2eAwQAnq2lMAwDBACerfEDBACerfID
BACerfQDBAGnoBADBACnoB0wDAMEAKo+WQMEBao+QAMEAKo+ZAMEAao+ZjAMAwQB
qj5qAwQAqj5sAwQBqj5uAwQAqj6gMAwDBAWqPuADBAGqPuwDBAK5ImwDBAC5MzYD
BADA/dADBAHGNxwDBADLvKQDBADLvKcwDAMEAMu8qQMEAMu8qgMEAMu8rAMEANQ4
MjAMAwQA1E71AwQC1E74AwQA1f6uMA0GCSqGSIb3DQEBCwUAA4IBAQDitkxFHbCm
klyqVfBY60WigobA4whTbN6SnxNpWvF/ZLMQ9FVyZDjY5vTu+iZ4rJrVXZlEnsri
WJF3gbIjQ8+FKlRkyEezuI9m4ltg7B198BgNtHrYQaJhkDMJyCjCVCJnbygvqsXJ
XDeQ/ame8RoqPlStHxPLAVmnBTRLH9F7+kQ4/I3IK7VSM9VDY9UP4onNfuKdZa43
W73x86O+w8jfV5J+XNwef90w2fkcMP/Z8a2xJV7nCvPP00IU3SsR+MplyaWuMDMS
Q7WsEu17NrSpsi9y/zeF8IBNx4e2kxU42zgnSGEToY00qnys/7h1cpYwF8IchN2a
inxay59V/z/m
-----END CERTIFICATE-----
Generated at Sat Mar 21 06:43:15 2026 by rpki-client