Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u3Btjq4h4eIF5KESAtoaHKbKjn4.roa
File: u3Btjq4h4eIF5KESAtoaHKbKjn4.roa (raw, json)
Hash identifier: BgsqJY9NTY6Ia9YWlvETQePlCFXLHHVO3knfxdlZSnY=
Subject key identifier: BB:70:6D:8E:AE:21:E1:E2:05:E4:A1:12:02:DA:1A:1C:A6:CA:8E:7E
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FAC47CE18155D7F7F5D2E85346E9295AB
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u3Btjq4h4eIF5KESAtoaHKbKjn4.roa
Signing time: Wed 29 Jul 2026 05:10:14 +0000
ROA not before: Wed 29 Jul 2026 05:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.188.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:47:ce:18:15:5d:7f:7f:5d:2e:85:34:6e:92:95:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 29 05:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bb706d8eae21e1e205e4a11202da1a1ca6ca8e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:44:9f:0a:cf:3b:39:af:92:a8:9f:24:c0:c2:
c0:20:68:9d:cb:54:b8:b7:c8:2f:22:57:2d:31:4b:
51:18:9a:4c:8a:b5:e3:7c:a0:e5:2b:c8:93:ca:3d:
22:7c:de:d7:5d:6e:7f:5e:49:91:95:e3:40:3e:3b:
a7:4a:ec:6c:97:d7:42:40:b7:c6:d8:3f:fb:1d:20:
9f:8d:3a:16:31:0a:87:40:cd:70:db:a4:46:bb:eb:
fc:fb:63:60:ae:ec:8a:7e:d4:81:65:af:ba:c3:98:
b6:61:14:d5:4d:65:8b:0e:97:95:3f:ee:8c:24:9c:
a8:24:c3:f2:d5:db:7f:be:41:6b:00:f9:2c:ac:79:
77:4a:32:52:aa:6b:b5:69:b2:fe:c7:f9:0e:91:94:
2f:c4:47:90:2c:18:12:f8:79:d6:32:e9:2d:8e:97:
da:c9:3c:35:59:bf:6b:91:67:de:1a:5e:a9:8d:34:
31:b8:4e:8a:18:ff:39:ad:72:91:46:55:6a:d0:98:
5b:a6:0e:ea:a5:b7:e8:b4:8c:bf:89:ca:20:91:ab:
69:0d:59:4d:4c:b3:d9:cc:64:1b:ec:e2:48:0e:0f:
26:08:59:6a:f5:b0:fd:84:af:6f:ac:ab:ae:a0:eb:
a5:99:0a:a1:ee:31:d9:db:02:34:2b:36:c9:a7:26:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:6D:8E:AE:21:E1:E2:05:E4:A1:12:02:DA:1A:1C:A6:CA:8E:7E
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/u3Btjq4h4eIF5KESAtoaHKbKjn4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.45.0/24
147.90.209.0/24
147.90.227.0/24
147.90.236.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.188.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
79:d2:02:c8:14:e4:a8:4f:55:65:f4:cd:74:46:33:9a:00:1a:
76:58:97:88:b8:b8:4c:d0:f7:e4:58:37:0f:a1:05:05:cc:bb:
e3:b5:de:b0:90:99:d9:be:bd:57:45:3d:85:42:d2:4a:23:c8:
04:8e:14:23:5b:e9:a9:1a:67:dd:d1:2c:b6:51:b7:cd:e4:fc:
b9:44:97:47:1b:92:d8:b4:94:dd:91:72:c4:3d:0e:52:b4:91:
3f:0a:06:3e:6b:19:ef:9e:81:6d:ed:80:11:3f:2d:2f:8e:90:
42:08:54:53:c2:13:a9:f0:0d:b0:03:6b:14:d4:4a:50:9f:28:
c4:4d:73:0a:96:4f:80:8c:b8:98:1a:db:57:0a:f6:5f:d2:01:
78:a4:ee:8b:82:39:bb:35:2c:0b:c0:a2:83:7f:d3:3b:c5:a7:
b1:30:4c:a4:e7:9f:42:99:ec:63:55:da:d2:5d:ef:27:d7:d8:
f1:2b:7d:de:55:00:b1:de:20:93:c9:33:b3:ac:42:cb:ba:19:
32:56:ce:9f:6b:82:36:f7:32:be:07:77:3b:ed:38:a5:9d:5e:
c7:28:8f:58:9e:5e:7f:01:15:8b:20:40:74:0e:ae:80:a4:b3:
c3:12:f8:fc:cc:a9:6a:b4:85:0d:92:d4:a5:cb:a0:83:e4:33:
91:8a:ea:54
-----BEGIN CERTIFICATE-----
MIIG4zCCBcugAwIBAgISAZ+sR84YFV1/f10uhTRukpWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjYwNzI5MDUxMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjcwNmQ4ZWFlMjFlMWUyMDVlNGExMTIwMmRhMWExY2E2Y2E4ZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kSfCs87Oa+SqJ8kwMLAIGidy1S4
t8gvIlctMUtRGJpMirXjfKDlK8iTyj0ifN7XXW5/XkmRleNAPjunSuxsl9dCQLfG
2D/7HSCfjToWMQqHQM1w26RGu+v8+2NgruyKftSBZa+6w5i2YRTVTWWLDpeVP+6M
JJyoJMPy1dt/vkFrAPksrHl3SjJSqmu1abL+x/kOkZQvxEeQLBgS+HnWMuktjpfa
yTw1Wb9rkWfeGl6pjTQxuE6KGP85rXKRRlVq0Jhbpg7qpbfotIy/icogkatpDVlN
TLPZzGQb7OJIDg8mCFlq9bD9hK9vrKuuoOulmQqh7jHZ2wI0KzbJpybIYwIDAQAB
o4ID7zCCA+swHQYDVR0OBBYEFLtwbY6uIeHiBeShEgLaGhymyo5+MB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvdTNCdGpxNGg0ZUlGNUtFU0F0b2FIS2JLam40LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIICAwYIKwYBBQUHAQcBAf8EggHyMIIB7jCCAeoEAgABMIIB
4gMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQAPqmEAwQBPqmGMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVFf
MgMEA1FfOAMEAVQz6gMEAVwz6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUD
BANnPcAwDAMEAGd9TQMEBGd9QAMEAWfSxgMEAmfV1AMEAWf/TAMEAJNaLQMEAJNa
0QMEAJNa4wMEAJNa7AMEApsCsDAMAwQBmwK2AwQAmwK8AwQBmwLCAwQAmwLUMAwD
BACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC3gMEAZ6thgMEAp6tjDAMAwQDnq2YAwQA
nq2eAwQAnq2lAwQAnq28MAwDBACerfEDBACerfIDBAGerfQDBAGnoBADBACnoB0w
DAMEAKo+WQMEBao+QAMEAKo+ZAMEAao+ZjAMAwQBqj5qAwQAqj5sAwQBqj5uAwQA
qj6gMAwDBAWqPuADBAGqPuwDBAK5ImwDBAC5MzYDBADA/dADBAHGNxwDBADLvKQD
BADLvKcwDAMEAMu8qQMEAMu8qgMEAMu8rAMEANQ4MjAMAwQA1E71AwQC1E74AwQA
1f6uMA0GCSqGSIb3DQEBCwUAA4IBAQB50gLIFOSoT1Vl9M10RjOaABp2WJeIuLhM
0PfkWDcPoQUFzLvjtd6wkJnZvr1XRT2FQtJKI8gEjhQjW+mpGmfd0Sy2UbfN5Py5
RJdHG5LYtJTdkXLEPQ5StJE/CgY+axnvnoFt7YARPy0vjpBCCFRTwhOp8A2wA2sU
1EpQnyjETXMKlk+AjLiYGttXCvZf0gF4pO6Lgjm7NSwLwKKDf9M7xaexMEyk559C
mexjVdrSXe8n19jxK33eVQCx3iCTyTOzrELLuhkyVs6fa4I29zK+B3c77TilnV7H
KI9Ynl5/ARWLIEB0Dq6ApLPDEvj8zKlqtIUNktSly6CD5DORiupU
-----END CERTIFICATE-----
Generated at Tue Aug 4 07:39:07 2026 by rpki-client