Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SKyZUQtcAHozGcgcQubgEJobBkU.roa
File: SKyZUQtcAHozGcgcQubgEJobBkU.roa (raw, json)
Hash identifier: E1QuXNA7pMe9BihnZB5eYCnUhq7s9Fek8ITQldaSdJ0=
Subject key identifier: 48:AC:99:51:0B:5C:00:7A:33:19:C8:1C:42:E6:E0:10:9A:1B:06:45
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 0198794BFAAF5E11F7E9D717CDCC23FF6DE4
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SKyZUQtcAHozGcgcQubgEJobBkU.roa
Signing time: Tue 05 Aug 2025 08:14:39 +0000
ROA not before: Tue 05 Aug 2025 08:14:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.32.74.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:4b:fa:af:5e:11:f7:e9:d7:17:cd:cc:23:ff:6d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Aug 5 08:14:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48ac99510b5c007a3319c81c42e6e0109a1b0645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ba:63:86:cf:c7:b2:dd:7e:cc:55:91:2c:a6:
7b:49:72:c5:1f:4c:18:4a:1c:de:5c:b4:cd:b8:92:
16:3d:e8:28:63:a2:fa:11:21:a5:70:d1:dc:fb:b8:
fe:2e:b5:55:48:79:62:db:47:a4:16:95:49:95:e0:
2c:ea:2d:b5:8e:35:2b:e2:0d:dd:40:90:73:a9:fa:
b8:94:40:e0:7d:44:e7:4e:dc:2b:73:4e:7b:3c:fa:
1e:9c:08:67:c5:2a:23:13:c3:6e:83:82:14:74:c7:
fd:c6:02:51:ad:af:da:e6:a4:0b:2e:91:da:ee:35:
2e:46:d6:67:ef:41:f0:b5:c6:fc:c7:55:7c:8e:88:
12:80:c8:92:8a:29:f7:0f:fb:8f:9f:be:92:47:69:
92:cf:2d:3b:1c:54:4a:af:8c:35:d9:18:b6:cf:a8:
90:8b:69:d6:a6:7f:53:11:9c:08:c0:be:79:68:20:
e8:b8:83:f2:6a:00:e1:b3:1f:4f:ee:7b:5b:aa:23:
bc:17:4c:55:4d:09:0d:2e:8a:b8:d9:d0:4b:64:af:
ed:d1:ba:2d:22:51:77:d2:df:3c:2a:3f:c7:4a:36:
92:17:49:36:e1:18:b3:05:52:d1:9f:4d:77:05:1f:
46:95:aa:4a:de:b4:73:73:e5:c5:7a:73:8c:1a:44:
17:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AC:99:51:0B:5C:00:7A:33:19:C8:1C:42:E6:E0:10:9A:1B:06:45
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SKyZUQtcAHozGcgcQubgEJobBkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.32.74.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:c4:9a:12:01:a5:b2:23:d3:f3:e3:53:71:42:e8:71:aa:3b:
79:61:f6:a7:66:fb:b1:6c:06:8a:b0:9e:da:74:27:0d:e7:7e:
89:a6:11:59:18:c4:1f:c6:33:ba:2b:31:35:13:1a:37:d1:7f:
27:d0:d0:e0:a2:0a:1b:b7:61:e4:32:94:27:02:f8:b7:3e:21:
3d:ab:97:eb:01:e6:04:40:9c:41:65:f6:d2:2e:69:64:f2:11:
0c:bb:5a:f7:17:39:99:fc:53:d1:b9:bd:30:d2:48:9d:9f:14:
ff:69:e5:2d:31:15:80:f3:d3:32:87:56:a4:cd:bd:37:4e:0b:
ee:be:1b:58:0d:0e:a7:aa:06:dc:f1:ef:b5:ae:59:86:26:f3:
35:4c:53:fc:6d:1f:69:62:e2:f5:4a:52:3a:5e:1b:83:6e:e7:
b4:f6:26:fd:e0:56:14:67:ea:54:b6:c7:66:ae:3a:b6:a8:46:
87:cf:a3:2d:d5:7d:6c:c5:23:ea:aa:51:59:65:37:07:65:0a:
a6:7f:bd:72:b7:eb:df:7d:a8:aa:fa:4c:7a:36:14:e4:cc:9a:
19:12:92:b8:a4:26:d7:f4:20:58:cd:54:a0:98:f2:9d:b3:f7:
02:62:f1:da:c6:05:bc:98:01:66:e1:06:14:c4:92:d1:13:13:
e3:b4:9d:e2
-----BEGIN CERTIFICATE-----
MIIGnTCCBYWgAwIBAgISAZh5S/qvXhH36dcXzcwj/23kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGE1ODA0N2YzN2JiYzA1Nzk0NGJiZjhjYWQ4NzQyODc5
NTkyZGEwHhcNMjUwODA1MDgxNDM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGFjOTk1MTBiNWMwMDdhMzMxOWM4MWM0MmU2ZTAxMDlhMWIwNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLpjhs/Hst1+zFWRLKZ7SXLFH0wY
ShzeXLTNuJIWPegoY6L6ESGlcNHc+7j+LrVVSHli20ekFpVJleAs6i21jjUr4g3d
QJBzqfq4lEDgfUTnTtwrc057PPoenAhnxSojE8Nug4IUdMf9xgJRra/a5qQLLpHa
7jUuRtZn70Hwtcb8x1V8jogSgMiSiin3D/uPn76SR2mSzy07HFRKr4w12Ri2z6iQ
i2nWpn9TEZwIwL55aCDouIPyagDhsx9P7ntbqiO8F0xVTQkNLoq42dBLZK/t0bot
IlF30t88Kj/HSjaSF0k24RizBVLRn013BR9GlapK3rRzc+XFenOMGkQXIwIDAQAB
o4IDqTCCA6UwHQYDVR0OBBYEFEismVELXAB6MxnIHELm4BCaGwZFMB8GA1UdIwQY
MBaAFPBKWAR/N7vAV5RLv4yth0KHlZLaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYt
ZjVmYjcxYjlhNTFmLzEvU0t5WlVRdGNBSG96R2NnY1F1YmdFSm9iQmtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8yYmE5N2UtNTk4Yi00OGRkLThkNTYtZjVmYjcxYjlhNTFm
LzEvOEVwWUJIODN1OEJYbEV1X2pLMkhRb2VWa3RvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBvQYIKwYBBQUHAQcBAf8EggGsMIIBqDCCAaQEAgABMIIB
nAMEAA5mNAMEAQ5mNgMEAA5mPwMEAA5mVQMEAA5mVwMEAh/e2AMEAD6pgTAMAwQA
PqmDAwQAPqmEAwQBPqmGMAwDBARCOFADBABCOFIwDAMEAkI4VAMEAEI4VgMEAVFf
MgMEA1FfOAMEAVQz6gMEAVwz6AMEAVwz7jAMAwQDXDP4AwQAXDP+MAwDBABnPcUD
BANnPcAwDAMEAGd9TQMEBGd9QAMEAWfSxgMEAmfV1AMEAWf/TAMEApsCsDAMAwQB
mwK2AwQAmwK8AwQBmwLCAwQAmwLUMAwDBACbAtcDBAGbAtgwDAMEAJsC3QMEAJsC
3gMEAZ6thgMEAp6tjAMEAaegEAMEAKegHTAMAwQAqj5ZAwQFqj5AAwQAqj5kAwQB
qj5mMAwDBAGqPmoDBACqPmwDBAGqPm4DBACqPqAwDAMEBao+4AMEAao+7AMEArki
bAMEAMD90AMEAcY3HAMEAMu8pAMEAMu8pzAMAwQAy7ypAwQAy7yqAwQAy7ysAwQA
1CBKAwQA1DgyMAwDBADUTvUDBALUTvgDBADV/q4wDQYJKoZIhvcNAQELBQADggEB
AKzEmhIBpbIj0/PjU3FC6HGqO3lh9qdm+7FsBoqwntp0Jw3nfommEVkYxB/GM7or
MTUTGjfRfyfQ0OCiChu3YeQylCcC+Lc+IT2rl+sB5gRAnEFl9tIuaWTyEQy7WvcX
OZn8U9G5vTDSSJ2fFP9p5S0xFYDz0zKHVqTNvTdOC+6+G1gNDqeqBtzx77WuWYYm
8zVMU/xtH2li4vVKUjpeG4Nu57T2Jv3gVhRn6lS2x2auOraoRofPoy3VfWzFI+qq
UVllNwdlCqZ/vXK36999qKr6THo2FOTMmhkSkrikJtf0IFjNVKCY8p2z9wJi8drG
BbyYAWbhBhTEktETE+O0neI=
-----END CERTIFICATE-----
Generated at Sun Aug 10 05:35:34 2025 by rpki-client