Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3XsaYcraTO3kyTtDI_M7FCT-Rsc.roa
File: 3XsaYcraTO3kyTtDI_M7FCT-Rsc.roa (raw, json)
Hash identifier: HwSQanAg+M7NTfcUQF9EKWQCehhu9D0Mbb2RQo0DO7A=
Subject key identifier: DD:7B:1A:61:CA:DA:4C:ED:E4:C9:3B:43:23:F3:3B:14:24:FE:46:C7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A10BD6EA82546C610BBA83A8B5B471847B
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3XsaYcraTO3kyTtDI_M7FCT-Rsc.roa
Signing time: Mon 05 Oct 2026 11:33:16 +0000
ROA not before: Mon 05 Oct 2026 11:33:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
134.49.91.0/24 maxlen: 24
147.90.18.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
173.209.12.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0b:d6:ea:82:54:6c:61:0b:ba:83:a8:b5:b4:71:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 5 11:33:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dd7b1a61cada4cede4c93b4323f33b1424fe46c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3f:c0:49:a2:95:93:2c:bf:f1:d9:51:b5:ff:
e9:24:3c:d8:41:04:6f:9e:cc:d4:64:42:c1:d6:54:
4c:5e:0e:9b:75:55:86:68:e4:21:48:36:e5:d0:af:
a6:66:16:09:b7:ec:9c:13:78:c4:c4:f2:62:f6:89:
ae:11:6a:5a:87:c7:bb:c1:dd:e7:57:30:b1:dd:8f:
b2:96:a7:20:c8:2f:44:c6:ca:ad:9d:26:24:b0:bf:
d6:ee:75:3e:60:8f:54:1c:0b:f6:ca:39:dc:16:d5:
bc:27:b4:e3:a0:6c:e5:20:2f:f2:f1:07:d9:0a:f9:
d9:f1:ce:6d:e4:d8:89:be:d7:d2:22:0c:a4:2f:e4:
44:1f:24:00:7a:f9:c3:32:f0:74:c4:8f:9e:90:66:
32:48:5a:4c:17:e7:c0:e4:28:84:74:d2:72:38:46:
ff:10:52:3c:b0:05:09:61:96:f3:e5:4a:15:8f:5c:
61:53:28:b2:77:68:8c:38:26:56:09:3d:3f:59:46:
ef:20:40:cf:cd:00:6e:b3:65:df:57:4d:d5:ea:a6:
be:64:aa:3d:8f:c6:d2:6a:d0:73:1e:e8:ab:31:36:
92:76:ff:66:61:39:c1:8b:81:8a:aa:11:fd:a6:1f:
20:09:bf:22:0d:f0:8b:5f:3a:7a:06:64:4e:39:1a:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:1A:61:CA:DA:4C:ED:E4:C9:3B:43:23:F3:3B:14:24:FE:46:C7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/3XsaYcraTO3kyTtDI_M7FCT-Rsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
134.49.91.0/24
147.90.18.0/24
147.90.35.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.220.0/23
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
173.209.12.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:07:86:41:fd:79:df:b6:96:40:4b:fa:4f:dd:39:87:d4:b6:
1f:3d:10:eb:44:bd:2b:ae:3a:e1:2e:78:35:a5:1b:4a:36:cf:
fc:a7:bc:a5:4b:ca:f4:1a:b7:8e:1c:bf:49:77:5f:04:c6:9c:
10:58:82:92:82:0d:ae:ea:6a:4d:cc:4d:52:8c:8e:52:73:ac:
d6:89:c6:70:c4:15:56:13:a4:49:f8:f6:ba:57:83:31:9a:13:
2e:33:8c:d5:9e:e6:af:73:e9:fb:17:e3:76:af:0f:c8:ad:fc:
07:09:ff:00:62:fd:97:75:30:47:d5:10:1e:bf:0a:89:62:b2:
06:52:e7:1f:97:35:11:26:9b:d3:5a:4a:d1:c1:bf:ac:6c:78:
79:21:8c:48:99:26:ed:16:75:c0:5e:6d:5c:e2:a5:16:6e:54:
fe:ac:40:f6:19:ec:2f:de:ef:25:55:7b:7c:c2:1a:7b:47:fa:
0f:77:e8:49:cb:08:a7:c9:6a:27:28:84:22:c8:96:93:1d:b0:
22:8d:de:40:fb:d9:92:fe:23:a6:cb:61:9a:30:e6:de:4f:ac:
cc:3b:81:51:14:de:2d:10:d2:e1:34:b7:0c:51:cd:69:fd:d4:
6b:ec:e8:e6:9a:17:43:5d:37:bc:2e:ed:0b:da:46:68:a6:0e:
51:72:77:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 23:39:48 2026 by rpki-client