Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7_tmrwi9P36h-KVDArxaiQGwNkQ.roa
File: 7_tmrwi9P36h-KVDArxaiQGwNkQ.roa (raw, json)
Hash identifier: Jm5a0Fs7exueGI929SRlC5cZ28tRduW2lums9EXdfMc=
Subject key identifier: EF:FB:66:AF:08:BD:3F:7E:A1:F8:A5:43:02:BC:5A:89:01:B0:36:44
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 01A13093904FBD6EA1A6C8271F20858C67DC
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7_tmrwi9P36h-KVDArxaiQGwNkQ.roa
Signing time: Mon 12 Oct 2026 14:45:39 +0000
ROA not before: Mon 12 Oct 2026 14:45:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 137409
IP address blocks: 14.102.61.0/24 maxlen: 24
14.102.62.0/24 maxlen: 24
14.102.84.0/24 maxlen: 24
14.102.86.0/24 maxlen: 24
45.150.180.0/24 maxlen: 24
62.169.128.0/24 maxlen: 24
62.169.130.0/24 maxlen: 24
66.56.87.0/24 maxlen: 24
103.61.196.0/24 maxlen: 24
134.49.91.0/24 maxlen: 24
147.90.18.0/24 maxlen: 24
147.90.35.0/24 maxlen: 24
147.90.88.0/24 maxlen: 24
147.90.160.0/24 maxlen: 24
147.90.161.0/24 maxlen: 24
147.90.162.0/24 maxlen: 24
147.90.163.0/24 maxlen: 24
147.90.164.0/24 maxlen: 24
147.90.165.0/24 maxlen: 24
147.90.166.0/24 maxlen: 24
147.90.167.0/24 maxlen: 24
147.90.168.0/24 maxlen: 24
147.90.169.0/24 maxlen: 24
147.90.170.0/24 maxlen: 24
147.90.171.0/24 maxlen: 24
147.90.172.0/24 maxlen: 24
147.90.173.0/24 maxlen: 24
147.90.174.0/24 maxlen: 24
147.90.175.0/24 maxlen: 24
147.90.176.0/24 maxlen: 24
147.90.177.0/24 maxlen: 24
147.90.178.0/24 maxlen: 24
147.90.179.0/24 maxlen: 24
147.90.180.0/24 maxlen: 24
147.90.181.0/24 maxlen: 24
147.90.190.0/24 maxlen: 24
147.90.220.0/24 maxlen: 24
147.90.221.0/24 maxlen: 24
158.173.167.0/24 maxlen: 24
158.173.190.0/24 maxlen: 24
158.173.191.0/24 maxlen: 24
158.173.192.0/24 maxlen: 24
158.173.194.0/24 maxlen: 24
158.173.196.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
158.173.198.0/24 maxlen: 24
158.173.199.0/24 maxlen: 24
158.173.219.0/24 maxlen: 24
158.173.223.0/24 maxlen: 24
158.173.229.0/24 maxlen: 24
158.173.237.0/24 maxlen: 24
158.173.243.0/24 maxlen: 24
158.173.246.0/24 maxlen: 24
158.173.247.0/24 maxlen: 24
167.160.28.0/24 maxlen: 24
170.62.238.0/24 maxlen: 24
173.209.12.0/24 maxlen: 24
192.253.209.0/24 maxlen: 24
198.55.31.0/24 maxlen: 24
203.188.175.0/24 maxlen: 24
203.188.189.0/24 maxlen: 24
203.188.190.0/24 maxlen: 24
203.188.191.0/24 maxlen: 24
212.32.71.0/24 maxlen: 24
212.32.73.0/24 maxlen: 24
212.32.76.0/24 maxlen: 24
213.254.163.0/24 maxlen: 24
213.254.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:93:90:4f:bd:6e:a1:a6:c8:27:1f:20:85:8c:67:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Oct 12 14:45:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=effb66af08bd3f7ea1f8a54302bc5a8901b03644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dd:b0:6d:70:f6:5b:d9:f1:56:c0:7d:c2:f0:
0f:fb:72:cf:50:3f:0a:99:5b:e7:e0:b9:e1:9f:1e:
1c:27:16:48:38:6a:2f:cb:46:67:ff:0d:49:08:fb:
23:9f:26:c5:9e:30:c6:0f:7c:d6:f1:48:4e:e2:a0:
ea:b9:2c:e8:15:f0:e7:c5:1a:56:c4:a6:79:96:e3:
08:31:50:7d:5e:c0:de:42:11:42:67:9b:55:fd:a1:
ac:1a:72:bb:72:56:ad:e0:f8:9b:61:76:33:19:60:
cd:aa:1f:3c:d1:0c:34:62:d5:c8:1d:ae:c5:f4:36:
5a:15:b3:6e:7c:1d:86:29:d9:3f:5e:8c:25:a5:d3:
dd:e4:7c:09:98:2a:19:f2:db:61:b8:29:20:0e:13:
50:48:2b:36:7c:b0:17:ad:58:6d:d0:98:a0:b6:b0:
39:ab:2c:1d:8e:19:88:24:09:61:d7:ef:e8:54:c4:
31:46:3f:3b:dd:1f:58:14:75:cf:fd:77:b1:18:7f:
be:fc:c1:1d:b3:f9:c0:a2:83:ca:75:cf:70:e0:cd:
32:41:37:d7:5b:09:44:10:7a:b6:97:59:9c:78:07:
c1:bd:79:d7:47:e3:37:a7:ac:f0:a8:4d:83:f4:f2:
e6:6b:c4:ef:f1:50:f3:8b:6d:cf:cd:e7:89:af:f0:
70:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FB:66:AF:08:BD:3F:7E:A1:F8:A5:43:02:BC:5A:89:01:B0:36:44
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/7_tmrwi9P36h-KVDArxaiQGwNkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.61.0-14.102.62.255
14.102.84.0/24
14.102.86.0/24
45.150.180.0/24
62.169.128.0/24
62.169.130.0/24
66.56.87.0/24
103.61.196.0/24
134.49.91.0/24
147.90.18.0/24
147.90.35.0/24
147.90.88.0/24
147.90.160.0-147.90.181.255
147.90.190.0/24
147.90.220.0/23
158.173.167.0/24
158.173.190.0-158.173.192.255
158.173.194.0/24
158.173.196.0/22
158.173.219.0/24
158.173.223.0/24
158.173.229.0/24
158.173.237.0/24
158.173.243.0/24
158.173.246.0/23
167.160.28.0/24
170.62.238.0/24
173.209.12.0/24
192.253.209.0/24
198.55.31.0/24
203.188.175.0/24
203.188.189.0-203.188.191.255
212.32.71.0/24
212.32.73.0/24
212.32.76.0/24
213.254.163.0/24
213.254.175.0/24
Signature Algorithm: sha256WithRSAEncryption
be:c6:3d:ec:33:8c:79:b1:a6:40:6c:18:c2:9c:fa:67:2f:2d:
7f:37:38:e6:0a:e1:4a:d7:3c:76:81:9d:71:b9:77:8a:31:a4:
57:b5:5d:2c:f4:92:34:bd:91:4d:0a:21:c6:55:63:54:54:9f:
55:5e:b4:f1:45:ff:5d:96:05:a8:e4:e0:53:76:5e:49:80:56:
78:c8:4b:8c:3a:79:aa:95:2f:8a:54:b5:30:00:0f:58:24:19:
25:5f:6d:83:7d:23:24:92:47:97:bf:b8:28:b0:99:33:91:f6:
1e:f2:a5:3a:54:3d:c1:e9:51:cd:99:33:4d:a4:68:ea:d9:6a:
ae:87:ea:d1:62:a5:93:16:65:2d:e5:62:95:fb:0d:6b:23:4b:
cf:74:69:97:dc:3b:ac:3f:4d:b0:7c:cd:fc:fa:12:48:4f:d7:
0d:d8:30:46:ca:a0:38:f3:e0:7c:dd:98:dc:43:46:96:c1:e0:
34:c2:d5:87:dd:c5:fd:e8:a3:2d:43:70:8e:60:4b:1e:e8:bf:
41:32:13:9a:e8:ba:15:d3:6a:16:7b:ea:ba:72:4a:88:e9:c7:
a7:74:32:d7:fa:5f:8c:be:ee:60:40:e8:ff:3b:b1:24:f1:ca:
08:72:3c:2e:66:0e:30:53:bd:ef:ef:a3:a3:6d:24:dc:b3:18:
0b:76:e6:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:16:45 2026 by rpki-client