Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/y4vJzpUeZco9BhOzQu4-MQzZAV8.roa
File: y4vJzpUeZco9BhOzQu4-MQzZAV8.roa (raw, json)
Hash identifier: 1QExtewjl/dnPI3r6batGqalGl7Kd3gGIDazaireA5g=
Subject key identifier: CB:8B:C9:CE:95:1E:65:CA:3D:06:13:B3:42:EE:3E:31:0C:D9:01:5F
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019CC22E618C75738511B6B5742B006CAD61
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/y4vJzpUeZco9BhOzQu4-MQzZAV8.roa
Signing time: Fri 06 Mar 2026 08:05:45 +0000
ROA not before: Fri 06 Mar 2026 08:05:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Mar 2026 06:19:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c2:2e:61:8c:75:73:85:11:b6:b5:74:2b:00:6c:ad:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Mar 6 08:05:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cb8bc9ce951e65ca3d0613b342ee3e310cd9015f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:d0:3e:21:08:bb:0c:83:21:56:e3:62:32:
8f:0e:22:52:c6:f8:98:6f:ba:45:96:ec:47:8e:b9:
53:f7:38:57:39:0f:fe:c3:c2:f3:b4:a6:32:bb:cb:
ae:c7:9d:32:f6:f8:65:f8:22:05:c5:1e:85:c1:13:
f9:3e:88:ae:f1:5e:e6:d2:fe:a9:20:ec:a7:9a:ed:
ec:04:ae:cb:6b:62:56:6f:f6:e2:4c:c7:f2:b2:ab:
dc:ee:a2:74:c9:dc:26:e2:c1:ba:bd:c1:4b:b0:3f:
ec:a0:c4:00:a9:22:62:0d:7c:28:d2:35:fd:0d:ca:
4f:77:c2:5e:77:cf:6a:35:0d:f8:6c:60:df:52:34:
44:a8:db:c6:52:e5:ef:84:9e:2d:b2:9e:3b:25:ca:
26:d9:fc:d3:98:dc:c3:4c:00:b5:bc:c8:77:56:27:
36:1a:a6:d8:93:25:92:22:52:df:e6:6d:ea:5e:40:
51:a5:40:b1:25:4e:91:b6:9a:91:96:00:9e:49:03:
f8:7a:b3:d4:87:e5:d2:60:fb:37:f3:b7:2a:04:92:
88:ba:7d:51:a1:f9:34:6f:e7:de:c2:df:36:79:a3:
ad:a2:cc:8d:28:fb:85:16:b8:71:4d:e7:9b:39:53:
1c:d0:7e:ac:8a:5d:09:fc:43:ed:38:4b:02:cf:f7:
b7:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8B:C9:CE:95:1E:65:CA:3D:06:13:B3:42:EE:3E:31:0C:D9:01:5F
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/y4vJzpUeZco9BhOzQu4-MQzZAV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
de:df:f1:f3:6c:27:12:99:6f:91:42:86:c1:3e:00:eb:c2:24:
44:bd:be:6b:8a:a1:ab:57:ed:83:0e:5e:f2:43:9b:41:eb:2c:
4e:78:14:af:bc:2c:61:97:92:db:1e:d3:84:34:76:30:9e:82:
4e:92:3c:1b:aa:0c:ee:ca:54:b3:aa:ba:5d:38:89:3a:77:2e:
84:55:f4:c4:94:2c:a4:fb:66:b5:15:99:e2:29:03:2c:1f:23:
54:02:53:3a:ce:8c:f1:5f:03:04:41:10:dc:b9:66:f0:20:55:
06:0b:f9:92:0b:68:3c:2e:4d:05:5d:b2:95:58:1e:6c:3d:c0:
b8:b8:1a:9d:72:90:be:3a:e6:be:89:71:25:da:3c:d8:2e:c5:
98:2a:f4:ec:f7:6c:b8:36:f9:c5:f5:8f:7d:20:15:a6:5f:4a:
ff:e9:ef:61:90:29:42:c1:96:25:cf:63:31:da:f6:21:fe:3f:
fa:e9:3f:9c:4a:d5:83:a7:90:5d:df:39:59:c0:65:13:82:96:
f2:6e:e3:38:31:a8:1c:e9:06:e0:d2:17:65:0a:58:1c:70:c3:
e8:f7:b1:04:1a:61:46:4d:c9:bd:f4:50:e3:07:18:8d:aa:19:
f2:57:cb:c7:57:8a:26:5f:5f:80:f8:3e:85:9c:c2:e5:eb:36:
a1:e7:b9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 10 09:17:44 2026 by rpki-client