Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/d3Ee6uXJGFUsIS16nMnmEW1IOTs.roa
File: d3Ee6uXJGFUsIS16nMnmEW1IOTs.roa (raw, json)
Hash identifier: Cy9Hj2em0blMW/HUHgzzsLgV5kmojD/rU49EOA9VwYw=
Subject key identifier: 77:71:1E:EA:E5:C9:18:55:2C:21:2D:7A:9C:C9:E6:11:6D:48:39:3B
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019742BFD8CFCC91F06F7170074A536EBF1C
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/d3Ee6uXJGFUsIS16nMnmEW1IOTs.roa
Signing time: Fri 06 Jun 2025 00:59:18 +0000
ROA not before: Fri 06 Jun 2025 00:59:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.133.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:21:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:42:bf:d8:cf:cc:91:f0:6f:71:70:07:4a:53:6e:bf:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jun 6 00:59:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77711eeae5c918552c212d7a9cc9e6116d48393b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d4:00:97:0d:a2:49:95:03:0c:53:7d:4a:f7:
1c:fb:0f:b2:fa:9d:12:81:f0:45:9a:74:91:d9:19:
25:45:d2:b3:a8:7c:25:8b:4a:d4:17:8e:9d:84:9c:
32:25:6f:fa:a0:5c:93:47:07:ca:ee:c4:09:8b:cf:
e1:71:3e:e9:39:cb:a0:82:d6:0d:a5:63:fc:7f:f0:
a8:ea:7e:bc:8f:41:ba:dc:d3:8a:db:65:cc:56:36:
b0:41:9e:78:0e:c5:eb:9c:9b:93:31:c9:bd:01:a1:
a3:f5:72:6a:e4:fd:35:97:11:68:a9:69:30:9d:64:
fc:f5:33:5c:f9:a0:e4:0f:23:c7:22:85:ec:7a:18:
0e:81:dc:c1:d3:27:ae:b6:d4:fb:0c:6c:b1:bb:3a:
9b:e8:6f:bf:25:1d:9c:75:b4:4a:09:07:aa:d3:ae:
06:d6:b5:12:03:42:34:f7:48:b2:05:52:7c:2b:cb:
95:f5:71:04:65:7e:81:be:ed:f8:22:51:02:57:f6:
1c:d3:1f:9c:ad:9e:e8:35:3a:df:52:bb:28:65:e7:
5e:68:05:16:70:ed:34:2d:a4:d9:75:04:ad:89:0b:
12:8f:60:30:69:47:89:58:89:a8:bd:29:52:cd:e8:
17:d2:93:3e:15:2a:94:cc:09:e0:9c:34:b2:c2:25:
55:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:71:1E:EA:E5:C9:18:55:2C:21:2D:7A:9C:C9:E6:11:6D:48:39:3B
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/d3Ee6uXJGFUsIS16nMnmEW1IOTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.135.255
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.32.74.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
01:13:d2:dc:58:92:77:5b:93:b3:01:a7:ad:ba:b1:3b:ef:34:
03:2d:5c:b6:ff:5f:3e:a7:13:68:21:e0:66:06:b7:15:db:ed:
2d:f2:b3:10:91:25:6e:10:66:b1:08:77:12:d4:16:d3:72:7e:
3b:0e:e9:67:6c:de:d4:37:6b:9e:29:29:f5:11:9f:0e:1c:42:
96:7c:93:20:29:b5:c2:a3:b1:fb:34:ee:70:fe:7e:d4:8e:1b:
9c:fa:6e:4d:aa:aa:c9:02:2a:6c:ee:77:e9:36:f6:37:f0:c5:
38:9b:38:5e:c1:4d:87:2e:62:1b:63:1a:ea:40:28:02:e6:ce:
69:7a:95:eb:b2:96:93:d0:0b:ae:94:ad:6e:34:9c:ca:73:83:
a0:76:dc:7b:be:6f:58:00:d1:b8:14:15:0e:69:d2:90:0c:d7:
7e:cc:db:ba:2d:2f:d1:0b:d3:38:60:0e:e0:3b:b2:8e:db:28:
04:4b:e4:a6:1a:8f:9e:31:74:b9:ec:bc:8d:95:21:0e:44:6c:
76:45:55:a0:0a:14:b5:68:57:11:91:8b:55:5b:e6:9a:87:b7:
35:d2:25:13:70:08:a0:c7:88:41:a8:49:11:df:71:a4:6b:b7:
b2:0e:02:97:09:32:4c:ad:1b:ff:8a:2f:65:82:15:db:74:10:
b1:ac:5d:81
-----BEGIN CERTIFICATE-----
MIIGizCCBXOgAwIBAgISAZdCv9jPzJHwb3FwB0pTbr8cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwNjA2MDA1OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzcxMWVlYWU1YzkxODU1MmMyMTJkN2E5Y2M5ZTYxMTZkNDgzOTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9QAlw2iSZUDDFN9Svcc+w+y+p0S
gfBFmnSR2RklRdKzqHwli0rUF46dhJwyJW/6oFyTRwfK7sQJi8/hcT7pOcuggtYN
pWP8f/Co6n68j0G63NOK22XMVjawQZ54DsXrnJuTMcm9AaGj9XJq5P01lxFoqWkw
nWT89TNc+aDkDyPHIoXsehgOgdzB0yeuttT7DGyxuzqb6G+/JR2cdbRKCQeq064G
1rUSA0I090iyBVJ8K8uV9XEEZX6Bvu34IlECV/Yc0x+crZ7oNTrfUrsoZedeaAUW
cO00LaTZdQStiQsSj2AwaUeJWImovSlSzegX0pM+FSqUzAngnDSywiVVfQIDAQAB
o4IDlzCCA5MwHQYDVR0OBBYEFHdxHurlyRhVLCEtepzJ5hFtSDk7MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvZDNFZTZ1WEpHRlVzSVMxNm5Nbm1FVzFJT1RzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBqwYIKwYBBQUHAQcBAf8EggGaMIIBljCCAZIEAgABMIIB
igMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQDPqmAMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVFfMgMEA1Ff
OAMEAVQz6gMEAVwz6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUDBANnPcAw
DAMEAGd9TQMEBGd9QAMEAWfSxgMEAmfV1AMEAWf/TAMEApsCsDAMAwQBmwK2AwQA
mwK8AwQBmwLCAwQAmwLUMAwDBACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC3gMEAaeg
EAMEAKegHTAMAwQAqj5ZAwQFqj5AAwQAqj5kAwQBqj5mMAwDBAGqPmoDBACqPmwD
BAGqPm4DBACqPqAwDAMEBao+4AMEAao+7AMEArkibAMEAMD90AMEAcY3HAMEAMu8
pAMEAMu8pzAMAwQAy7ypAwQAy7yqAwQAy7ysAwQA1CBKAwQA1DgyMAwDBADUTvUD
BALUTvgDBADV/q4wDQYJKoZIhvcNAQELBQADggEBAAET0txYkndbk7MBp626sTvv
NAMtXLb/Xz6nE2gh4GYGtxXb7S3ysxCRJW4QZrEIdxLUFtNyfjsO6Wds3tQ3a54p
KfURnw4cQpZ8kyAptcKjsfs07nD+ftSOG5z6bk2qqskCKmzud+k29jfwxTibOF7B
TYcuYhtjGupAKALmzml6leuylpPQC66UrW40nMpzg6B23Hu+b1gA0bgUFQ5p0pAM
137M27otL9EL0zhgDuA7so7bKARL5KYaj54xdLnsvI2VIQ5EbHZFVaAKFLVoVxGR
i1Vb5pqHtzXSJRNwCKDHiEGoSRHfcaRrt7IOApcJMkytG/+KL2WCFdt0ELGsXYE=
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:30:32 2025 by rpki-client