Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fJMU6gkgUkfV0YhHxHQKBdxPivE.roa
File: fJMU6gkgUkfV0YhHxHQKBdxPivE.roa (raw, json)
Hash identifier: ZuyR5UGSBhr77y6mvqFKYtxMdZj8ni8e85djdDrAQ7c=
Subject key identifier: 7C:93:14:EA:09:20:52:47:D5:D1:88:47:C4:74:0A:05:DC:4F:8A:F1
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A05E8D6968335BBBAB8AB8ED447BC81F6E
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fJMU6gkgUkfV0YhHxHQKBdxPivE.roa
Signing time: Tue 01 Sep 2026 19:58:40 +0000
ROA not before: Tue 01 Sep 2026 19:58:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
136.176.160.0/24 maxlen: 24
147.90.19.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.195.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.216.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
147.90.241.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.188.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 10:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:8d:69:68:33:5b:bb:ab:8a:b8:ed:44:7b:c8:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Sep 1 19:58:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7c9314ea09205247d5d18847c4740a05dc4f8af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:ba:8f:bd:ac:14:39:d6:e7:8b:16:20:96:
0d:b9:9c:15:4e:43:c7:95:65:8b:2a:e2:1e:a3:6e:
29:b1:b0:f9:ef:d6:01:ca:43:52:81:eb:5c:e0:c4:
44:77:9c:4e:54:a9:c6:24:e7:bf:f7:4f:0f:ad:f0:
fd:3f:1d:7c:f4:3f:f1:97:d2:52:11:54:24:1d:e9:
af:6a:15:51:0d:7a:9c:77:92:62:6b:e6:cf:18:4c:
fe:5b:47:b4:55:c3:8f:38:ce:82:12:6e:2a:a8:86:
28:7b:91:05:bb:68:3d:26:bf:fa:69:14:c7:90:90:
8e:2c:cb:fe:bc:ed:26:30:fc:61:5a:41:34:5a:70:
6d:d5:12:76:b0:aa:24:42:b8:da:b3:cc:35:c0:06:
85:71:da:c0:71:fe:f6:3c:96:54:7a:57:99:42:31:
b0:8b:8e:f6:2b:94:3b:79:54:d2:2a:60:85:0c:9c:
bc:03:7b:4f:03:e1:bd:d4:8b:48:41:95:cc:15:f0:
c3:85:38:43:e3:8b:67:bc:cd:5a:26:45:6d:c4:f1:
eb:1e:b0:aa:fe:90:11:7c:93:e8:29:1e:d4:cd:e6:
11:50:3b:79:78:41:bf:c8:29:17:74:8e:52:f9:f1:
f9:cd:aa:74:1d:96:f6:b8:9b:93:01:37:ad:07:26:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:93:14:EA:09:20:52:47:D5:D1:88:47:C4:74:0A:05:DC:4F:8A:F1
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/fJMU6gkgUkfV0YhHxHQKBdxPivE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
136.176.160.0/24
147.90.19.0/24
147.90.45.0/24
147.90.195.0/24
147.90.209.0/24
147.90.216.0/24
147.90.227.0/24
147.90.236.0/24
147.90.241.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.188.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
de:10:77:f0:ce:39:8a:5b:d3:13:c5:c4:58:8b:84:d3:af:2d:
42:c1:08:60:7c:41:43:10:c1:b4:46:86:de:e9:5e:2e:c7:bb:
40:29:3e:ab:39:f7:d8:81:30:a2:60:57:e6:3e:b9:e7:d2:f3:
bb:01:f3:56:e0:3e:6f:a8:75:90:12:54:1a:64:68:fc:68:d1:
b4:3a:3e:ee:a8:ba:9e:4d:63:fe:91:e1:fd:5e:bb:71:1a:6d:
81:9e:a6:af:88:7d:c6:e8:2f:4b:f9:43:aa:82:f6:85:ec:c8:
64:0c:0e:62:d4:f9:84:eb:c6:ae:ce:1d:ef:0c:4e:ed:a6:72:
6b:80:ba:bf:43:42:57:04:23:03:c9:e2:20:7a:15:99:9d:dc:
6b:1a:4d:d9:14:e7:3f:67:ab:f9:c3:5f:0f:45:d3:f2:5c:ff:
e6:e7:38:b9:d1:1e:c1:15:19:a4:3c:93:54:3f:94:8c:cf:40:
f0:fd:fe:79:42:45:91:74:22:17:c5:9a:52:a1:db:99:f8:26:
28:c7:f9:f7:4d:f4:84:19:5f:a8:0e:0a:11:39:87:74:49:9e:
9a:85:16:50:71:e6:9c:6f:73:25:c2:57:a9:e3:f4:c1:2b:f0:
39:97:6b:9a:29:34:c2:11:6a:3b:6b:2d:95:72:e8:72:f7:43:
38:98:c9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 18:14:39 2026 by rpki-client