Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wA3AiTZvC_yt3ozztNOhqxRnIlY.roa
File: wA3AiTZvC_yt3ozztNOhqxRnIlY.roa (raw, json)
Hash identifier: fbRiWf3V/pBdjjoEKUk9IcxedcTXSU4VlGlycHQUMEY=
Subject key identifier: C0:0D:C0:89:36:6F:0B:FC:AD:DE:8C:F3:B4:D3:A1:AB:14:67:22:56
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F9443214BE562901C4E2019136B3D96E2
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wA3AiTZvC_yt3ozztNOhqxRnIlY.roa
Signing time: Fri 24 Jul 2026 13:14:15 +0000
ROA not before: Fri 24 Jul 2026 13:14:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.186.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:43:21:4b:e5:62:90:1c:4e:20:19:13:6b:3d:96:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 24 13:14:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c00dc089366f0bfcadde8cf3b4d3a1ab14672256
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0e:a0:a0:ed:05:46:39:99:8f:ba:30:d5:96:
d3:d9:af:cf:46:b6:4b:7c:e7:75:e6:a9:06:e5:41:
7a:56:7a:4a:e0:ed:8f:86:6f:0b:49:a0:b7:3c:de:
6f:97:d0:cc:73:6d:68:8a:58:42:66:d1:c8:b6:72:
77:cf:b6:a4:42:d0:bc:ce:30:f6:af:15:1d:3b:9e:
fc:86:ed:07:c4:48:63:27:ea:d4:5f:f1:cf:6a:96:
fd:43:2a:c1:c8:23:ad:b7:38:89:e0:54:ca:1c:40:
21:a2:68:66:00:72:36:5a:b5:a8:7e:2a:0c:28:a3:
26:ff:3e:19:f5:c8:10:f7:6a:f6:3a:3e:25:4d:c3:
9b:56:92:16:af:42:95:46:83:bb:ea:79:28:46:40:
d5:fa:7e:09:69:f8:ad:96:e4:b8:4b:f4:f5:96:13:
93:e1:2d:d6:06:6c:ce:e6:f2:7d:0d:e2:bf:94:70:
f2:cf:f5:0c:e3:15:12:8e:5a:31:ab:59:3b:69:07:
24:cd:f8:bc:c0:52:e8:d1:23:df:7f:db:f8:94:69:
5a:59:84:d9:f3:52:78:9b:cb:48:94:ef:27:f6:8f:
79:37:10:1c:2b:12:86:ed:af:39:b6:de:eb:7c:d5:
34:ee:e8:4f:d8:ba:a7:5d:5f:32:49:5e:7f:0a:3d:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:0D:C0:89:36:6F:0B:FC:AD:DE:8C:F3:B4:D3:A1:AB:14:67:22:56
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wA3AiTZvC_yt3ozztNOhqxRnIlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
147.90.35.0/24
147.90.160.0-147.90.181.255
147.90.186.0/24
147.90.190.0/24
147.90.220.0/23
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8f:1f:04:c9:a2:99:7e:80:04:3d:58:fb:c4:dd:60:8a:fa:
df:2f:14:23:e9:3a:9f:02:12:3f:62:b7:69:14:24:70:ae:34:
c6:46:fc:1d:56:b7:b0:4f:35:61:72:39:30:43:d5:ac:76:ab:
c1:7a:0d:67:ef:44:e9:9e:76:2e:37:ea:b0:8f:5e:95:f5:b1:
06:f4:6e:1e:4c:64:45:9a:62:f9:0a:7b:93:5f:82:b3:f2:0c:
0c:0e:dd:fa:42:34:7b:31:96:5a:80:b4:89:76:48:0e:09:22:
49:52:96:39:50:cf:33:1d:d8:b2:f0:62:c1:b4:d9:c9:59:f0:
3d:58:c8:34:c4:9b:49:17:f3:f2:62:66:d1:fd:ab:70:a6:17:
6d:a2:90:74:97:ac:22:3e:b4:45:32:7b:6a:db:bb:45:41:8f:
61:96:2e:d5:2e:5f:79:7b:ff:b5:02:aa:50:c5:63:cc:60:03:
d2:26:f4:c8:b0:19:08:3c:4c:30:23:83:8a:2b:e2:6e:c0:9c:
a4:ce:98:49:34:32:e9:8d:bf:f2:26:6b:76:b4:6d:bc:b4:64:
ec:c5:e9:af:a0:c6:4f:80:4b:2d:51:72:3e:fc:8b:a4:a9:69:
7b:09:52:df:57:51:8e:aa:78:6a:4e:b6:0d:83:a4:8f:e1:1c:
33:e6:97:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:19:44 2026 by rpki-client