Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Z4vxC6K9qC3bTHFRKwyQYhTfr88.roa
File: Z4vxC6K9qC3bTHFRKwyQYhTfr88.roa (raw, json)
Hash identifier: Qiu0LJaJpx0Q0j9vmpuD2/QZ+ZVS1boK8laXmNCOC6w=
Subject key identifier: 67:8B:F1:0B:A2:BD:A8:2D:DB:4C:71:51:2B:0C:90:62:14:DF:AF:CF
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019F5C7ED93E5373043C20326EF9E09CF5E7
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Z4vxC6K9qC3bTHFRKwyQYhTfr88.roa
Signing time: Mon 13 Jul 2026 17:20:44 +0000
ROA not before: Mon 13 Jul 2026 17:20:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.188.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:7e:d9:3e:53:73:04:3c:20:32:6e:f9:e0:9c:f5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 13 17:20:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=678bf10ba2bda82ddb4c71512b0c906214dfafcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:5d:24:13:87:02:22:32:67:a5:32:4f:9e:
e0:2a:e7:f4:b1:ce:2c:40:4c:c9:73:09:e3:2a:de:
7d:f8:3e:aa:bf:1a:2d:72:5c:a4:0e:ca:89:a2:b2:
97:7b:1b:66:9f:eb:47:fb:80:81:9a:0f:06:62:20:
40:3b:a6:c3:c6:cb:d0:95:be:77:4c:7e:57:04:0a:
b5:46:5b:1f:37:fb:f1:9d:db:76:62:97:fa:57:8a:
a2:25:d0:01:7a:6a:2e:c7:68:a1:15:3f:61:42:03:
80:45:35:11:28:e3:f3:ae:eb:01:d9:60:87:8c:88:
f9:b6:f7:5d:2d:49:db:af:54:bf:02:12:d2:8a:dd:
a7:91:f7:6b:bd:72:bd:81:8c:c6:6f:c0:4f:cf:2c:
a9:e3:8b:c1:46:c5:f4:a3:7d:18:05:9a:f1:cf:84:
c3:e3:2b:26:a5:c4:4e:f1:85:c6:76:87:38:6d:9a:
84:1a:08:36:08:e4:9e:c4:a6:44:6b:23:4a:08:74:
4c:65:00:09:2c:78:d1:33:48:eb:6e:5f:70:51:fa:
02:82:a8:79:8e:25:b7:b1:cd:c0:7b:7a:17:58:56:
58:1d:04:04:b2:e6:a0:e2:3a:9e:5e:c3:d9:cd:06:
8a:31:42:e9:3c:a9:68:ae:9c:24:74:37:36:8a:8d:
8d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:8B:F1:0B:A2:BD:A8:2D:DB:4C:71:51:2B:0C:90:62:14:DF:AF:CF
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/Z4vxC6K9qC3bTHFRKwyQYhTfr88.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.45.0/24
147.90.209.0/24
147.90.227.0/24
147.90.236.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.188.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
85:1c:d5:be:17:a7:59:3d:1c:54:ff:d1:8c:c7:d3:3e:53:4d:
f0:dc:3e:22:64:2f:06:68:18:68:b3:b2:5f:10:2f:67:e5:36:
df:2b:20:36:40:dd:82:93:ca:a3:67:a9:0c:8e:4b:65:a8:75:
0a:a7:6c:9f:2c:de:af:d7:42:db:38:93:cd:c9:9c:cb:da:b6:
88:7b:14:43:ca:9b:c4:9c:f8:67:86:73:73:fa:4f:3a:0b:b8:
3f:d4:33:e2:1b:c1:b6:71:0f:9a:1b:f6:b9:e6:21:07:aa:93:
3f:7c:32:56:ee:37:bc:f6:ba:d8:06:1e:0e:8c:e5:0b:8c:28:
18:bf:e4:69:e4:b2:f6:3a:5d:16:eb:4e:38:4d:be:20:87:bd:
ac:6c:8f:a2:4c:26:0e:f7:38:c1:3b:be:92:c9:9e:35:4c:83:
c2:13:be:76:09:e7:5e:e0:26:20:e5:e2:8e:e1:d8:83:a5:2d:
32:35:ff:a2:45:16:5e:50:de:1f:f0:db:32:89:eb:dd:d0:27:
60:fd:16:48:0a:59:b8:ef:f8:4f:d0:94:98:aa:3d:d8:dd:6f:
00:51:f0:45:69:61:4d:0a:42:93:0f:ef:4a:3e:18:29:9b:ab:
1d:6d:11:99:3a:a3:fd:fd:cb:7b:d5:e2:8a:53:7f:9e:34:50:
ae:c3:34:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:36 2026 by rpki-client