Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SuEeC02e6kSUiPm-1Bo-IlKXl6Q.roa
File: SuEeC02e6kSUiPm-1Bo-IlKXl6Q.roa (raw, json)
Hash identifier: PuL6xjJoK7v9D704nuz6fqv8aMQuMfDyoZHn9mO1auA=
Subject key identifier: 4A:E1:1E:0B:4D:9E:EA:44:94:88:F9:BE:D4:1A:3E:22:52:97:97:A4
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019FA2864076C004F4B3CFA6F71A80405148
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SuEeC02e6kSUiPm-1Bo-IlKXl6Q.roa
Signing time: Mon 27 Jul 2026 07:42:15 +0000
ROA not before: Mon 27 Jul 2026 07:42:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
147.90.45.0/24 maxlen: 24
147.90.209.0/24 maxlen: 24
147.90.227.0/24 maxlen: 24
147.90.236.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.188.0/24 maxlen: 24
158.173.226.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:86:40:76:c0:04:f4:b3:cf:a6:f7:1a:80:40:51:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Jul 27 07:42:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4ae11e0b4d9eea449488f9bed41a3e22529797a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:5f:56:60:53:c9:c9:de:6b:3a:03:4c:09:
16:88:87:ba:e5:05:f4:a7:94:26:fb:e9:67:b4:36:
f3:00:93:e1:6e:cf:9b:94:20:b9:52:91:2d:6d:58:
9c:cd:7c:f2:47:c7:d0:ee:04:0d:77:fc:ed:07:7b:
75:2f:c5:2b:b9:c7:bf:a7:12:7d:f6:df:a3:76:af:
dd:38:f2:ea:10:64:78:87:06:77:02:a6:92:a0:a3:
d8:0f:43:1d:9b:48:90:60:c1:89:20:84:4e:b3:77:
de:00:cd:50:dd:53:b0:c5:a1:2b:21:f1:f0:d3:60:
aa:5b:bd:5e:2f:8b:35:d0:a8:07:d3:e8:1f:2d:2c:
79:cc:d1:18:ea:5c:aa:41:c3:6b:c6:06:45:1f:69:
27:60:24:35:72:21:cf:10:08:d1:1a:fa:50:42:fb:
1a:68:42:e7:39:40:c1:b2:10:00:45:be:ec:4b:23:
ef:9a:af:98:5d:26:8b:01:66:66:47:4c:8f:25:ce:
e0:b9:1b:e6:70:63:e1:01:fb:a5:33:24:d5:c0:61:
27:9d:d5:2f:2c:8e:77:07:5f:fb:c0:3b:c6:a2:54:
cd:cf:81:ac:9a:0f:b8:1e:57:82:6a:59:de:43:a5:
21:c9:c6:ad:42:11:79:51:c2:20:d8:79:2c:2f:11:
e6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E1:1E:0B:4D:9E:EA:44:94:88:F9:BE:D4:1A:3E:22:52:97:97:A4
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/SuEeC02e6kSUiPm-1Bo-IlKXl6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
147.90.45.0/24
147.90.209.0/24
147.90.227.0/24
147.90.236.0/24
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.188.0/24
158.173.226.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0c:92:de:aa:00:7a:55:27:f2:f9:51:86:01:52:aa:fa:f2:
36:92:b5:00:4c:62:c5:08:06:86:98:05:21:f9:cd:6f:7b:8a:
30:3e:0f:44:89:ed:32:e3:d6:2a:92:69:5d:17:39:79:d6:50:
1a:9f:13:b3:af:6d:a5:b8:24:e0:ee:e7:8d:24:43:ca:d8:4c:
6a:a7:b4:0d:be:5c:f2:56:bb:6a:15:36:d1:d8:10:45:c3:30:
ba:16:b0:d7:b9:ce:aa:ab:00:55:14:c9:b7:d4:5b:0f:bd:3c:
ff:26:28:bf:58:88:ee:c3:ef:de:eb:2a:ac:ef:75:10:36:59:
fd:74:c4:06:79:44:ae:35:c7:96:51:98:86:c3:75:3d:28:e6:
43:6f:6e:77:cf:86:39:5f:3c:96:17:ad:0b:a0:12:57:5a:42:
1d:fd:de:2f:a8:e1:e9:d3:17:25:52:85:35:3b:f1:65:7d:db:
3b:9d:57:cc:5a:2d:c7:ba:81:19:53:52:75:d6:85:4b:d5:bc:
f5:2d:53:8f:db:8f:c4:dc:ef:fe:24:d2:e0:3d:75:5c:12:71:
26:cd:74:85:5a:2a:d6:e9:b7:26:46:60:49:89:26:4f:8d:46:
b2:db:6d:db:58:b9:5f:48:4d:1a:1a:ae:86:a2:23:ff:8d:d5:
59:96:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:11:48 2026 by rpki-client