Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWgMfOU3KCIMFmtJDU-673oLhLs.roa
File: wWgMfOU3KCIMFmtJDU-673oLhLs.roa (raw, json)
Hash identifier: dUefmvDoXvG+EROxbli2Zyg+T2R47CzOpR8nHyjou6I=
Subject key identifier: C1:68:0C:7C:E5:37:28:22:0C:16:6B:49:0D:4F:BA:EF:7A:0B:84:BB
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A162B93596148C9D37EC9FEBBCCFBE7174
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWgMfOU3KCIMFmtJDU-673oLhLs.roa
Signing time: Thu 22 Oct 2026 08:27:47 +0000
ROA not before: Thu 22 Oct 2026 08:27:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
134.49.91.0/24 maxlen: 24
147.90.18.0/24 maxlen: 24
147.90.19.0/24 maxlen: 24
147.90.28.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.37.0/24 maxlen: 24
147.90.51.0/24 maxlen: 24
147.90.54.0/24 maxlen: 24
147.90.88.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.206.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
147.90.226.0/24 maxlen: 24
147.90.230.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
173.209.12.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:b9:35:96:14:8c:9d:37:ec:9f:eb:bc:cf:be:71:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 22 08:27:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c1680c7ce53728220c166b490d4fbaef7a0b84bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:11:74:d3:26:ef:13:58:aa:7c:9c:c3:7e:c5:
81:d7:d7:17:27:00:8c:0f:8a:25:bf:bb:9f:9b:4e:
cc:0d:e7:68:3b:5b:07:9b:ae:f1:e1:1d:d9:95:fb:
58:88:62:d7:ae:81:68:f1:f9:84:52:c9:1d:f3:5c:
29:ba:4c:10:2e:2f:58:a4:35:cc:2a:14:53:2a:da:
5d:26:5b:15:c2:48:02:51:02:bf:2f:38:83:25:3f:
15:59:6b:5d:0f:89:0e:0e:64:5b:f3:ab:f0:f5:02:
87:b5:67:d2:a2:cf:db:2c:33:8f:f4:3a:5a:b1:0d:
df:d1:0b:2c:7d:4c:8c:0a:34:31:3b:23:2b:36:a4:
34:c4:9d:0d:52:18:74:88:19:34:e0:41:5d:c1:d3:
a4:5e:0e:a5:6b:01:f9:6d:a6:77:c9:5b:01:26:53:
6b:16:ad:f8:59:1b:0e:ad:69:6f:f4:ef:93:2c:17:
01:62:3c:cb:45:ef:ca:55:75:71:89:1e:50:07:d2:
dc:f0:80:ed:99:67:61:53:9f:c8:54:83:4a:34:25:
eb:89:0d:9d:90:81:99:8f:e6:99:88:52:d9:05:60:
58:46:55:bd:bf:28:a9:34:5b:0a:55:61:d2:58:87:
af:ce:f4:1c:61:5a:ff:84:30:fa:be:6a:18:ce:23:
4b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:68:0C:7C:E5:37:28:22:0C:16:6B:49:0D:4F:BA:EF:7A:0B:84:BB
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/wWgMfOU3KCIMFmtJDU-673oLhLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
134.49.91.0/24
147.90.18.0/23
147.90.28.0/24
147.90.35.0/24
147.90.37.0/24
147.90.51.0/24
147.90.54.0/24
147.90.88.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.206.0/24
147.90.220.0/23
147.90.226.0/24
147.90.230.0/24
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
173.209.12.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4e:a1:b6:a9:ff:a7:23:dd:bf:0f:cf:96:db:37:58:3d:bf:
dd:95:37:ae:f0:fb:f6:d6:bf:7a:ca:2a:47:da:e3:f9:b1:4a:
c1:7b:52:8b:99:64:28:d6:e9:18:70:21:44:62:03:19:b2:03:
a7:69:cd:35:12:c2:32:9a:76:39:60:bd:76:2a:e5:66:87:05:
e7:1f:81:71:15:b7:45:69:cb:1c:a9:51:71:af:d7:9a:b3:82:
b4:11:bf:9b:10:a5:e5:40:1b:dc:9a:65:f3:cc:9b:3e:47:7f:
67:a6:42:24:06:bc:48:b2:6f:89:bc:f3:68:b5:35:fb:a0:70:
0c:c2:c6:b5:d7:b9:bc:1f:ad:c0:08:bb:42:bb:b6:c0:d5:58:
b2:34:e8:16:dc:3c:39:79:18:78:a3:e7:b0:dc:0b:bd:6a:59:
d8:c1:ad:da:3a:f1:8c:76:1f:96:07:b6:60:73:8f:24:c1:43:
8b:f9:92:c6:8e:e4:74:19:7c:23:b9:ef:b3:3d:23:ae:3c:96:
17:f8:ef:3a:97:17:4c:8f:c8:27:61:c5:23:9b:1a:4d:19:f0:
43:c1:3f:19:f7:b0:f7:c9:88:84:5f:76:2f:5c:69:ac:48:8f:
a9:15:6b:3c:78:d3:7d:3d:10:c2:73:52:71:6c:27:cd:15:6f:
5d:e2:f7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:43 2026 by rpki-client