Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XwXJd3oQYrJB33x5_Fy3U6yyVO8.roa
File: XwXJd3oQYrJB33x5_Fy3U6yyVO8.roa (raw, json)
Hash identifier: qg2iajbT6qcn/lK1jeTigPkfr98HWGbpeSYhpO3vwSM=
Subject key identifier: 5F:05:C9:77:7A:10:62:B2:41:DF:7C:79:FC:5C:B7:53:AC:B2:54:EF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019DFC8D9ED45C0364ED344C131E51ED1C8B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XwXJd3oQYrJB33x5_Fy3U6yyVO8.roa
Signing time: Wed 06 May 2026 09:10:32 +0000
ROA not before: Wed 06 May 2026 09:10:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:fc:8d:9e:d4:5c:03:64:ed:34:4c:13:1e:51:ed:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: May 6 09:10:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=5f05c9777a1062b241df7c79fc5cb753acb254ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:1a:77:6d:1e:dd:d3:6f:6e:a3:2a:c6:95:ec:
58:d5:26:eb:70:2c:bb:0a:0c:c6:77:19:e8:74:f4:
2a:1e:93:80:e4:98:f4:50:c7:33:c6:88:de:5d:c4:
65:a9:5d:35:3a:a2:ac:44:e4:25:63:29:f4:1a:27:
a8:4d:7c:a3:d9:1a:d1:95:b7:37:37:b3:68:99:17:
eb:6e:06:85:36:d0:cd:36:24:a8:0b:06:20:13:62:
c4:88:90:5b:46:7f:40:87:a2:2a:9f:dc:c2:2c:a7:
0e:76:6f:dd:f1:4e:e6:03:7b:cd:8b:91:05:99:c3:
f3:dd:28:3b:d9:76:8a:fd:f5:f2:2b:58:a6:eb:3d:
4a:5d:17:46:81:6b:90:36:43:34:b1:cf:33:84:3a:
6e:71:dd:8e:37:5a:f5:25:97:d1:1b:ce:19:fb:e9:
20:a3:ba:19:ab:e5:40:34:68:e3:e3:92:13:12:75:
76:f4:8d:5f:8f:91:80:eb:04:1c:3f:24:a1:9c:f0:
f1:fc:10:d9:ef:2e:4a:a6:c8:90:9d:88:e9:67:38:
41:5f:a4:b7:49:4d:d3:d7:99:9f:c4:27:0b:c8:0c:
92:88:84:24:74:6e:c8:41:09:73:ab:f3:b0:a2:b1:
b9:24:d8:ce:45:a8:f4:08:f8:b7:a2:7d:1a:0a:ce:
8e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:C9:77:7A:10:62:B2:41:DF:7C:79:FC:5C:B7:53:AC:B2:54:EF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/XwXJd3oQYrJB33x5_Fy3U6yyVO8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.236.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:a6:a2:05:3a:f2:cc:a6:f7:a2:cc:8b:d0:7d:32:86:45:5d:
3c:87:3e:67:35:38:20:4e:c4:59:ba:ae:1c:a2:89:26:0c:e0:
32:ee:90:13:bb:92:a3:d9:c5:48:c9:02:de:b7:c7:3c:24:76:
0f:44:a6:ca:ec:ca:3e:b0:d2:ab:67:0c:8e:aa:fd:c9:a9:d5:
18:69:7e:24:55:10:21:8b:f6:34:2d:6e:27:d2:59:86:aa:81:
45:6d:85:cb:14:5f:56:d5:6b:0c:0a:6b:4c:d4:eb:36:63:8a:
8a:a0:7d:94:f1:12:07:03:44:04:65:ca:77:d2:11:81:1e:8a:
d5:dd:41:95:49:78:a0:e1:b9:2b:f2:d1:11:2b:c3:b6:4d:2a:
96:63:a4:83:82:8d:99:cc:45:97:de:45:9f:bd:f3:88:62:5c:
ab:36:22:27:9a:8a:3a:43:2f:49:10:30:e8:2e:a8:f3:d7:f5:
3a:0d:86:0e:a3:21:3d:27:d4:c5:63:96:3f:08:f9:27:e2:5a:
32:32:1a:fe:7c:c7:bd:53:de:73:42:15:80:4e:a7:41:06:08:
a1:78:a6:38:89:3a:85:36:a3:13:bd:6b:84:b1:62:8a:3a:d7:
f8:0e:4d:0b:7d:e2:ba:ed:20:f2:aa:c9:3d:13:65:bd:56:93:
2c:a7:ba:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:47:09 2026 by rpki-client