Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pikAGlZR8Sr4u2TAB18uJ6RRz08.roa
File: pikAGlZR8Sr4u2TAB18uJ6RRz08.roa (raw, json)
Hash identifier: iZTcBEXLg8R3UlBNt6YAHbLeYV3+rcaxBtU4LpJm2Ek=
Subject key identifier: A6:29:00:1A:56:51:F1:2A:F8:BB:64:C0:07:5F:2E:27:A4:51:CF:4F
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019C9B38591B9ECD8FC50E188DD1413611A4
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pikAGlZR8Sr4u2TAB18uJ6RRz08.roa
Signing time: Thu 26 Feb 2026 18:31:27 +0000
ROA not before: Thu 26 Feb 2026 18:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202656
IP address blocks: 103.147.170.0/24 maxlen: 24
103.148.141.0/24 maxlen: 24
103.149.85.0/24 maxlen: 24
103.152.175.0/24 maxlen: 24
130.49.5.0/24 maxlen: 24
130.49.14.0/24 maxlen: 24
130.49.17.0/24 maxlen: 24
130.49.22.0/24 maxlen: 24
130.49.24.0/24 maxlen: 24
130.49.31.0/24 maxlen: 24
130.49.32.0/24 maxlen: 24
130.49.39.0/24 maxlen: 24
130.49.42.0/24 maxlen: 24
130.49.47.0/24 maxlen: 24
130.49.51.0/24 maxlen: 24
130.49.55.0/24 maxlen: 24
130.49.60.0/24 maxlen: 24
130.49.62.0/24 maxlen: 24
130.49.68.0/24 maxlen: 24
130.49.70.0/24 maxlen: 24
130.49.81.0/24 maxlen: 24
130.49.84.0/24 maxlen: 24
130.49.89.0/24 maxlen: 24
130.49.92.0/24 maxlen: 24
130.49.96.0/24 maxlen: 24
130.49.101.0/24 maxlen: 24
130.49.104.0/24 maxlen: 24
130.49.110.0/24 maxlen: 24
130.49.111.0/24 maxlen: 24
130.49.122.0/24 maxlen: 24
130.49.125.0/24 maxlen: 24
138.249.28.0/24 maxlen: 24
138.249.52.0/24 maxlen: 24
138.249.54.0/24 maxlen: 24
138.249.58.0/24 maxlen: 24
138.249.59.0/24 maxlen: 24
138.249.77.0/24 maxlen: 24
138.249.84.0/24 maxlen: 24
138.249.86.0/24 maxlen: 24
138.249.88.0/24 maxlen: 24
138.249.91.0/24 maxlen: 24
138.249.150.0/24 maxlen: 24
138.249.255.0/24 maxlen: 24
155.212.34.0/24 maxlen: 24
155.212.44.0/24 maxlen: 24
155.212.46.0/24 maxlen: 24
155.212.53.0/24 maxlen: 24
155.212.55.0/24 maxlen: 24
155.212.60.0/24 maxlen: 24
155.212.63.0/24 maxlen: 24
155.212.67.0/24 maxlen: 24
155.212.74.0/24 maxlen: 24
155.212.75.0/24 maxlen: 24
155.212.81.0/24 maxlen: 24
155.212.82.0/24 maxlen: 24
155.212.89.0/24 maxlen: 24
155.212.92.0/24 maxlen: 24
155.212.96.0/24 maxlen: 24
155.212.101.0/24 maxlen: 24
155.212.104.0/24 maxlen: 24
155.212.115.0/24 maxlen: 24
155.212.117.0/24 maxlen: 24
155.212.122.0/24 maxlen: 24
155.212.126.0/24 maxlen: 24
170.168.207.0/24 maxlen: 24
170.168.212.0/24 maxlen: 24
170.168.223.0/24 maxlen: 24
170.168.228.0/24 maxlen: 24
170.168.238.0/24 maxlen: 24
170.168.248.0/24 maxlen: 24
213.178.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9b:38:59:1b:9e:cd:8f:c5:0e:18:8d:d1:41:36:11:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Feb 26 18:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a629001a5651f12af8bb64c0075f2e27a451cf4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:27:3b:62:d3:c7:29:4e:46:e6:96:6c:0c:
5e:6d:5f:aa:32:c4:88:f0:be:06:22:7a:ae:ce:eb:
9a:5d:cb:2b:9d:20:a4:43:c1:4d:43:8e:2c:e1:ad:
84:eb:25:87:23:37:11:f6:63:a8:af:ce:1f:42:0f:
52:99:63:63:da:28:92:bd:f1:db:b7:73:7e:71:39:
e0:d8:bf:37:39:17:24:0f:91:95:aa:fd:7a:b0:a9:
98:4d:4a:e8:4b:bf:ec:5f:b6:fa:9c:5e:16:2f:0d:
36:00:e0:ef:59:3d:c9:9f:1f:84:52:9a:b3:50:01:
0f:81:ac:7f:67:ee:42:54:40:bc:95:82:94:38:ce:
2b:6e:f8:51:2d:2a:93:f7:bb:09:1c:86:d9:e6:18:
f3:50:f9:27:1d:6c:78:ee:64:34:e8:d3:94:87:fc:
91:83:de:7b:b2:37:7e:de:a7:c7:6f:07:67:c4:cd:
6a:4b:18:41:51:04:02:4a:23:4e:8e:5a:b2:12:a5:
90:7e:29:2b:4d:5b:77:33:27:11:1c:5a:c6:95:21:
2c:66:8d:69:cc:3a:be:77:62:f8:37:19:4e:64:43:
d7:4a:a8:23:d7:6d:2f:19:0a:2b:ab:93:0e:20:3f:
1f:58:fd:2a:50:88:eb:1a:ab:cc:f8:6a:4f:94:57:
ed:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:29:00:1A:56:51:F1:2A:F8:BB:64:C0:07:5F:2E:27:A4:51:CF:4F
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/pikAGlZR8Sr4u2TAB18uJ6RRz08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.147.170.0/24
103.148.141.0/24
103.149.85.0/24
103.152.175.0/24
130.49.5.0/24
130.49.14.0/24
130.49.17.0/24
130.49.22.0/24
130.49.24.0/24
130.49.31.0-130.49.32.255
130.49.39.0/24
130.49.42.0/24
130.49.47.0/24
130.49.51.0/24
130.49.55.0/24
130.49.60.0/24
130.49.62.0/24
130.49.68.0/24
130.49.70.0/24
130.49.81.0/24
130.49.84.0/24
130.49.89.0/24
130.49.92.0/24
130.49.96.0/24
130.49.101.0/24
130.49.104.0/24
130.49.110.0/23
130.49.122.0/24
130.49.125.0/24
138.249.28.0/24
138.249.52.0/24
138.249.54.0/24
138.249.58.0/23
138.249.77.0/24
138.249.84.0/24
138.249.86.0/24
138.249.88.0/24
138.249.91.0/24
138.249.150.0/24
138.249.255.0/24
155.212.34.0/24
155.212.44.0/24
155.212.46.0/24
155.212.53.0/24
155.212.55.0/24
155.212.60.0/24
155.212.63.0/24
155.212.67.0/24
155.212.74.0/23
155.212.81.0-155.212.82.255
155.212.89.0/24
155.212.92.0/24
155.212.96.0/24
155.212.101.0/24
155.212.104.0/24
155.212.115.0/24
155.212.117.0/24
155.212.122.0/24
155.212.126.0/24
170.168.207.0/24
170.168.212.0/24
170.168.223.0/24
170.168.228.0/24
170.168.238.0/24
170.168.248.0/24
213.178.152.0/24
Signature Algorithm: sha256WithRSAEncryption
81:88:c3:06:ec:c3:98:ee:70:2f:90:f2:83:8b:2f:61:7d:e5:
63:29:b3:17:ba:de:89:b2:f0:cb:5f:15:29:2d:83:95:f6:5e:
28:c4:08:e5:23:0d:8d:d4:57:9b:30:f0:9e:4d:9d:e0:ed:32:
87:be:d1:cf:71:2b:60:e4:75:35:f3:cc:05:78:94:93:8b:48:
b1:03:04:cf:d5:7c:5a:14:4d:5d:d9:34:c9:d1:d8:8b:be:1e:
a5:cb:90:84:7d:39:08:87:f3:c2:7f:79:14:f6:db:d2:7a:62:
75:0e:e5:38:0c:af:49:5d:ea:fb:e6:dd:11:53:85:a1:8a:f2:
b3:83:0d:27:ea:b6:5f:3c:c1:11:28:fa:eb:88:f6:61:28:67:
d3:49:35:f9:97:de:c7:9f:56:bf:dd:01:0e:3e:a6:4a:a6:ec:
d5:b7:98:65:fb:aa:af:0c:e5:8e:c3:d5:79:3d:a0:ba:8b:40:
ff:f2:46:4b:72:91:b0:9d:6d:c4:ed:60:0d:51:c4:69:f1:d0:
a9:fc:b5:96:b8:a3:3b:f3:18:e8:dd:73:16:4a:76:37:9e:5e:
2c:bc:ce:04:1e:9d:6d:98:92:91:ba:75:56:4c:b8:c6:b1:49:
c4:81:0f:7c:3e:3e:e1:82:7b:09:84:bc:64:7b:22:ea:5c:14:
4d:21:f7:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:41:16 2026 by rpki-client