Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sSmIEwM116qyO6yNlCjAZdoGSKw.roa
File: sSmIEwM116qyO6yNlCjAZdoGSKw.roa (raw, json)
Hash identifier: vlOtk0f6SuA+lEmRkz89qUIt8AJz7jsVHCaYvxJjJsU=
Subject key identifier: B1:29:88:13:03:35:D7:AA:B2:3B:AC:8D:94:28:C0:65:DA:06:48:AC
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D76F8A732BE2BFEE1D8259171D4812D44
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sSmIEwM116qyO6yNlCjAZdoGSKw.roa
Signing time: Fri 10 Apr 2026 10:38:20 +0000
ROA not before: Fri 10 Apr 2026 10:38:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 14.102.52.0/24 maxlen: 24
14.102.54.0/24 maxlen: 24
14.102.55.0/24 maxlen: 24
14.102.63.0/24 maxlen: 24
14.102.85.0/24 maxlen: 24
14.102.87.0/24 maxlen: 24
31.222.216.0/24 maxlen: 24
31.222.217.0/24 maxlen: 24
31.222.218.0/24 maxlen: 24
31.222.219.0/24 maxlen: 24
62.169.129.0/24 maxlen: 24
62.169.131.0/24 maxlen: 24
62.169.132.0/24 maxlen: 24
62.169.134.0/24 maxlen: 24
62.169.135.0/24 maxlen: 24
66.56.80.0/24 maxlen: 24
66.56.81.0/24 maxlen: 24
66.56.82.0/24 maxlen: 24
66.56.84.0/24 maxlen: 24
66.56.85.0/24 maxlen: 24
66.56.86.0/24 maxlen: 24
81.95.50.0/24 maxlen: 24
81.95.51.0/24 maxlen: 24
81.95.56.0/24 maxlen: 24
81.95.57.0/24 maxlen: 24
81.95.58.0/24 maxlen: 24
81.95.59.0/24 maxlen: 24
81.95.60.0/24 maxlen: 24
81.95.61.0/24 maxlen: 24
81.95.62.0/24 maxlen: 24
81.95.63.0/24 maxlen: 24
84.51.234.0/24 maxlen: 24
84.51.235.0/24 maxlen: 24
92.51.232.0/24 maxlen: 24
92.51.233.0/24 maxlen: 24
92.51.238.0/24 maxlen: 24
92.51.239.0/24 maxlen: 24
92.51.248.0/24 maxlen: 24
92.51.249.0/24 maxlen: 24
92.51.250.0/24 maxlen: 24
92.51.251.0/24 maxlen: 24
92.51.252.0/24 maxlen: 24
92.51.253.0/24 maxlen: 24
92.51.254.0/24 maxlen: 24
103.61.197.0/24 maxlen: 24
103.61.198.0/24 maxlen: 24
103.61.199.0/24 maxlen: 24
103.125.77.0/24 maxlen: 24
103.125.78.0/24 maxlen: 24
103.125.79.0/24 maxlen: 24
103.210.198.0/24 maxlen: 24
103.210.199.0/24 maxlen: 24
103.213.212.0/24 maxlen: 24
103.213.213.0/24 maxlen: 24
103.213.214.0/24 maxlen: 24
103.213.215.0/24 maxlen: 24
103.255.76.0/24 maxlen: 24
103.255.77.0/24 maxlen: 24
155.2.176.0/24 maxlen: 24
155.2.177.0/24 maxlen: 24
155.2.178.0/24 maxlen: 24
155.2.179.0/24 maxlen: 24
155.2.182.0/24 maxlen: 24
155.2.183.0/24 maxlen: 24
155.2.184.0/24 maxlen: 24
155.2.185.0/24 maxlen: 24
155.2.186.0/24 maxlen: 24
155.2.187.0/24 maxlen: 24
155.2.188.0/24 maxlen: 24
155.2.194.0/24 maxlen: 24
155.2.195.0/24 maxlen: 24
155.2.212.0/24 maxlen: 24
155.2.215.0/24 maxlen: 24
155.2.216.0/24 maxlen: 24
155.2.217.0/24 maxlen: 24
155.2.221.0/24 maxlen: 24
155.2.222.0/24 maxlen: 24
158.173.134.0/24 maxlen: 24
158.173.135.0/24 maxlen: 24
158.173.140.0/24 maxlen: 24
158.173.141.0/24 maxlen: 24
158.173.142.0/24 maxlen: 24
158.173.143.0/24 maxlen: 24
158.173.152.0/24 maxlen: 24
158.173.153.0/24 maxlen: 24
158.173.154.0/24 maxlen: 24
158.173.155.0/24 maxlen: 24
158.173.156.0/24 maxlen: 24
158.173.157.0/24 maxlen: 24
158.173.158.0/24 maxlen: 24
158.173.165.0/24 maxlen: 24
158.173.241.0/24 maxlen: 24
158.173.242.0/24 maxlen: 24
158.173.244.0/24 maxlen: 24
158.173.245.0/24 maxlen: 24
167.160.16.0/24 maxlen: 24
167.160.17.0/24 maxlen: 24
167.160.29.0/24 maxlen: 24
170.62.89.0/24 maxlen: 24
170.62.90.0/24 maxlen: 24
170.62.91.0/24 maxlen: 24
170.62.92.0/24 maxlen: 24
170.62.93.0/24 maxlen: 24
170.62.94.0/24 maxlen: 24
170.62.95.0/24 maxlen: 24
170.62.100.0/24 maxlen: 24
170.62.102.0/24 maxlen: 24
170.62.103.0/24 maxlen: 24
170.62.106.0/24 maxlen: 24
170.62.107.0/24 maxlen: 24
170.62.108.0/24 maxlen: 24
170.62.110.0/24 maxlen: 24
170.62.111.0/24 maxlen: 24
170.62.160.0/24 maxlen: 24
170.62.224.0/24 maxlen: 24
170.62.225.0/24 maxlen: 24
170.62.226.0/24 maxlen: 24
170.62.227.0/24 maxlen: 24
170.62.228.0/24 maxlen: 24
170.62.229.0/24 maxlen: 24
170.62.230.0/24 maxlen: 24
170.62.231.0/24 maxlen: 24
170.62.232.0/24 maxlen: 24
170.62.233.0/24 maxlen: 24
170.62.234.0/24 maxlen: 24
170.62.235.0/24 maxlen: 24
170.62.236.0/24 maxlen: 24
170.62.237.0/24 maxlen: 24
185.34.108.0/24 maxlen: 24
185.34.109.0/24 maxlen: 24
185.34.110.0/24 maxlen: 24
185.34.111.0/24 maxlen: 24
185.51.54.0/24 maxlen: 24
192.253.208.0/24 maxlen: 24
198.55.28.0/24 maxlen: 24
198.55.29.0/24 maxlen: 24
203.188.164.0/24 maxlen: 24
203.188.167.0/24 maxlen: 24
203.188.169.0/24 maxlen: 24
203.188.170.0/24 maxlen: 24
203.188.172.0/24 maxlen: 24
212.56.50.0/24 maxlen: 24
212.78.245.0/24 maxlen: 24
212.78.246.0/24 maxlen: 24
212.78.247.0/24 maxlen: 24
212.78.248.0/24 maxlen: 24
212.78.249.0/24 maxlen: 24
212.78.250.0/24 maxlen: 24
212.78.251.0/24 maxlen: 24
213.254.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:f8:a7:32:be:2b:fe:e1:d8:25:91:71:d4:81:2d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 10 10:38:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b12988130335d7aab23bac8d9428c065da0648ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:30:22:7c:5b:2a:86:6b:a9:df:97:2e:fd:14:
3b:f3:6d:b5:d3:78:5d:4c:98:bf:2f:c2:6e:6a:94:
3f:bb:fb:a2:3f:23:80:2d:48:83:7e:89:d1:15:c9:
b1:00:29:33:43:b2:7a:48:69:d7:94:a6:60:b4:e3:
01:34:12:47:ef:d6:e8:be:4a:2b:4d:ab:36:85:eb:
22:9c:15:d9:ae:f2:63:d7:4e:c7:27:81:e2:b3:7b:
9f:0f:99:d0:a0:7d:cf:c7:73:98:4a:82:b0:79:f1:
53:0d:35:44:b4:cc:fc:40:1a:f4:68:f2:2f:2f:8f:
49:6d:be:34:63:a8:e4:bc:e1:5b:36:33:52:43:71:
a7:78:07:cf:11:45:ed:00:ad:8d:19:14:9b:bc:95:
da:d7:1d:f3:01:cc:91:ce:0b:21:15:fc:38:01:66:
66:00:e4:1a:36:6e:32:9f:7e:fd:e6:9c:07:c1:74:
13:45:b6:98:94:77:4a:85:9a:65:ee:0c:05:e5:f9:
41:23:24:56:27:7f:66:06:a5:15:de:ce:b4:2e:f3:
24:ac:06:f0:ad:af:e3:ca:a9:f5:fb:cb:d7:97:7f:
00:dd:5b:eb:20:6e:cf:37:49:42:ea:67:4d:0e:24:
3e:c5:b5:2a:b3:ae:29:71:14:7f:c5:fb:8f:a3:47:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:29:88:13:03:35:D7:AA:B2:3B:AC:8D:94:28:C0:65:DA:06:48:AC
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/sSmIEwM116qyO6yNlCjAZdoGSKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.52.0/24
14.102.54.0/23
14.102.63.0/24
14.102.85.0/24
14.102.87.0/24
31.222.216.0/22
62.169.129.0/24
62.169.131.0-62.169.132.255
62.169.134.0/23
66.56.80.0-66.56.82.255
66.56.84.0-66.56.86.255
81.95.50.0/23
81.95.56.0/21
84.51.234.0/23
92.51.232.0/23
92.51.238.0/23
92.51.248.0-92.51.254.255
103.61.197.0-103.61.199.255
103.125.77.0-103.125.79.255
103.210.198.0/23
103.213.212.0/22
103.255.76.0/23
155.2.176.0/22
155.2.182.0-155.2.188.255
155.2.194.0/23
155.2.212.0/24
155.2.215.0-155.2.217.255
155.2.221.0-155.2.222.255
158.173.134.0/23
158.173.140.0/22
158.173.152.0-158.173.158.255
158.173.165.0/24
158.173.241.0-158.173.242.255
158.173.244.0/23
167.160.16.0/23
167.160.29.0/24
170.62.89.0-170.62.95.255
170.62.100.0/24
170.62.102.0/23
170.62.106.0-170.62.108.255
170.62.110.0/23
170.62.160.0/24
170.62.224.0-170.62.237.255
185.34.108.0/22
185.51.54.0/24
192.253.208.0/24
198.55.28.0/23
203.188.164.0/24
203.188.167.0/24
203.188.169.0-203.188.170.255
203.188.172.0/24
212.56.50.0/24
212.78.245.0-212.78.251.255
213.254.174.0/24
Signature Algorithm: sha256WithRSAEncryption
51:8e:7e:e3:13:b6:88:4e:6f:a2:d8:f0:7d:b0:21:3b:63:db:
71:05:5a:13:21:86:3f:9c:3e:f4:d0:99:fb:63:ea:45:31:82:
3b:c1:4b:70:42:96:e9:d8:8e:80:9e:f1:4a:40:1a:65:eb:67:
ad:b2:af:c8:a8:3e:4f:8b:33:88:d0:35:2b:1f:6a:a1:4f:4e:
4c:99:43:b1:11:91:77:64:1f:26:dc:6c:5d:a3:80:d1:89:05:
cc:98:a8:2a:64:ee:84:54:c1:b8:f1:4a:c9:a2:fe:7a:bc:ba:
ce:ad:23:25:bd:c8:9c:20:47:0e:dc:1a:11:47:49:d8:5e:6d:
e6:70:58:77:80:c8:88:4e:65:09:6a:03:68:52:97:a7:1f:ec:
93:48:36:0a:c6:34:c8:59:3d:32:d9:f6:0a:69:a0:ff:55:60:
0a:48:5b:81:b1:98:a2:a5:83:7c:46:52:81:fa:0d:d5:80:b7:
74:27:87:4d:67:d3:d3:4a:77:a2:51:4a:66:10:61:aa:0b:bb:
40:36:93:53:16:2a:2a:2a:6c:af:e7:a6:7b:65:76:91:c2:de:
c9:70:8f:1d:58:0a:15:3e:9d:ea:f0:af:4d:99:76:6d:77:a5:
20:7d:35:8d:f3:7b:54:86:c8:6b:f6:0c:64:a3:8a:b3:cb:13:
70:71:db:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:51:16 2026 by rpki-client