Route Origin Authorization

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vwkXvAgHI8phMykav3ig5h5KqiY.roa
File:                     vwkXvAgHI8phMykav3ig5h5KqiY.roa (raw, json)
Hash identifier:          b0vH0LQ7bt3Y5JKIEWlJsM7PVIaH5cx6JuTaRTHI9DQ=
Subject key identifier:   BF:09:17:BC:08:07:23:CA:61:33:29:1A:BF:78:A0:E6:1E:4A:AA:26
Certificate issuer:       /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial:       01A0FB62511D0CEAA61CAEEBD56206F111A5
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vwkXvAgHI8phMykav3ig5h5KqiY.roa
Signing time:             Fri 02 Oct 2026 06:51:59 +0000
ROA not before:           Fri 02 Oct 2026 06:51:59 +0000
ROA not after:            Thu 01 Jul 2027 00:00:00 +0000
asID:                     212238
IP address blocks:        14.102.52.0/24 maxlen: 24
                          14.102.54.0/24 maxlen: 24
                          14.102.55.0/24 maxlen: 24
                          14.102.63.0/24 maxlen: 24
                          14.102.85.0/24 maxlen: 24
                          14.102.87.0/24 maxlen: 24
                          31.222.216.0/24 maxlen: 24
                          31.222.217.0/24 maxlen: 24
                          31.222.218.0/24 maxlen: 24
                          31.222.219.0/24 maxlen: 24
                          62.169.129.0/24 maxlen: 24
                          62.169.131.0/24 maxlen: 24
                          62.169.132.0/24 maxlen: 24
                          62.169.134.0/24 maxlen: 24
                          62.169.135.0/24 maxlen: 24
                          66.56.80.0/24 maxlen: 24
                          66.56.81.0/24 maxlen: 24
                          66.56.82.0/24 maxlen: 24
                          66.56.84.0/24 maxlen: 24
                          66.56.85.0/24 maxlen: 24
                          66.56.86.0/24 maxlen: 24
                          81.95.50.0/24 maxlen: 24
                          81.95.51.0/24 maxlen: 24
                          81.95.56.0/24 maxlen: 24
                          81.95.57.0/24 maxlen: 24
                          81.95.58.0/24 maxlen: 24
                          81.95.59.0/24 maxlen: 24
                          81.95.60.0/24 maxlen: 24
                          81.95.61.0/24 maxlen: 24
                          81.95.62.0/24 maxlen: 24
                          81.95.63.0/24 maxlen: 24
                          84.51.234.0/24 maxlen: 24
                          84.51.235.0/24 maxlen: 24
                          92.51.232.0/24 maxlen: 24
                          92.51.233.0/24 maxlen: 24
                          92.51.238.0/24 maxlen: 24
                          92.51.239.0/24 maxlen: 24
                          92.51.248.0/24 maxlen: 24
                          92.51.249.0/24 maxlen: 24
                          92.51.250.0/24 maxlen: 24
                          92.51.251.0/24 maxlen: 24
                          92.51.252.0/24 maxlen: 24
                          92.51.253.0/24 maxlen: 24
                          92.51.254.0/24 maxlen: 24
                          103.61.197.0/24 maxlen: 24
                          103.61.198.0/24 maxlen: 24
                          103.61.199.0/24 maxlen: 24
                          103.125.77.0/24 maxlen: 24
                          103.125.78.0/24 maxlen: 24
                          103.125.79.0/24 maxlen: 24
                          103.210.198.0/24 maxlen: 24
                          103.210.199.0/24 maxlen: 24
                          103.213.212.0/24 maxlen: 24
                          103.213.213.0/24 maxlen: 24
                          103.213.214.0/24 maxlen: 24
                          103.213.215.0/24 maxlen: 24
                          103.255.76.0/24 maxlen: 24
                          103.255.77.0/24 maxlen: 24
                          136.176.160.0/24 maxlen: 24
                          147.90.45.0/24 maxlen: 24
                          147.90.195.0/24 maxlen: 24
                          147.90.209.0/24 maxlen: 24
                          147.90.216.0/24 maxlen: 24
                          147.90.227.0/24 maxlen: 24
                          147.90.236.0/24 maxlen: 24
                          147.90.241.0/24 maxlen: 24
                          155.2.176.0/24 maxlen: 24
                          155.2.177.0/24 maxlen: 24
                          155.2.178.0/24 maxlen: 24
                          155.2.179.0/24 maxlen: 24
                          155.2.182.0/24 maxlen: 24
                          155.2.183.0/24 maxlen: 24
                          155.2.184.0/24 maxlen: 24
                          155.2.185.0/24 maxlen: 24
                          155.2.186.0/24 maxlen: 24
                          155.2.187.0/24 maxlen: 24
                          155.2.188.0/24 maxlen: 24
                          155.2.194.0/24 maxlen: 24
                          155.2.195.0/24 maxlen: 24
                          155.2.212.0/24 maxlen: 24
                          155.2.215.0/24 maxlen: 24
                          155.2.216.0/24 maxlen: 24
                          155.2.217.0/24 maxlen: 24
                          155.2.221.0/24 maxlen: 24
                          155.2.222.0/24 maxlen: 24
                          158.173.134.0/24 maxlen: 24
                          158.173.135.0/24 maxlen: 24
                          158.173.140.0/24 maxlen: 24
                          158.173.141.0/24 maxlen: 24
                          158.173.142.0/24 maxlen: 24
                          158.173.143.0/24 maxlen: 24
                          158.173.152.0/24 maxlen: 24
                          158.173.153.0/24 maxlen: 24
                          158.173.154.0/24 maxlen: 24
                          158.173.155.0/24 maxlen: 24
                          158.173.156.0/24 maxlen: 24
                          158.173.157.0/24 maxlen: 24
                          158.173.158.0/24 maxlen: 24
                          158.173.165.0/24 maxlen: 24
                          158.173.188.0/24 maxlen: 24
                          158.173.241.0/24 maxlen: 24
                          158.173.242.0/24 maxlen: 24
                          158.173.244.0/24 maxlen: 24
                          158.173.245.0/24 maxlen: 24
                          167.160.16.0/24 maxlen: 24
                          167.160.17.0/24 maxlen: 24
                          167.160.29.0/24 maxlen: 24
                          170.62.89.0/24 maxlen: 24
                          170.62.90.0/24 maxlen: 24
                          170.62.91.0/24 maxlen: 24
                          170.62.92.0/24 maxlen: 24
                          170.62.93.0/24 maxlen: 24
                          170.62.94.0/24 maxlen: 24
                          170.62.95.0/24 maxlen: 24
                          170.62.100.0/24 maxlen: 24
                          170.62.102.0/24 maxlen: 24
                          170.62.103.0/24 maxlen: 24
                          170.62.106.0/24 maxlen: 24
                          170.62.107.0/24 maxlen: 24
                          170.62.108.0/24 maxlen: 24
                          170.62.110.0/24 maxlen: 24
                          170.62.111.0/24 maxlen: 24
                          170.62.160.0/24 maxlen: 24
                          170.62.224.0/24 maxlen: 24
                          170.62.225.0/24 maxlen: 24
                          170.62.226.0/24 maxlen: 24
                          170.62.227.0/24 maxlen: 24
                          170.62.228.0/24 maxlen: 24
                          170.62.229.0/24 maxlen: 24
                          170.62.230.0/24 maxlen: 24
                          170.62.231.0/24 maxlen: 24
                          170.62.232.0/24 maxlen: 24
                          170.62.233.0/24 maxlen: 24
                          170.62.234.0/24 maxlen: 24
                          170.62.235.0/24 maxlen: 24
                          170.62.236.0/24 maxlen: 24
                          170.62.237.0/24 maxlen: 24
                          185.34.108.0/24 maxlen: 24
                          185.34.109.0/24 maxlen: 24
                          185.34.110.0/24 maxlen: 24
                          185.34.111.0/24 maxlen: 24
                          185.51.54.0/24 maxlen: 24
                          192.253.208.0/24 maxlen: 24
                          198.55.28.0/24 maxlen: 24
                          198.55.29.0/24 maxlen: 24
                          203.188.164.0/24 maxlen: 24
                          203.188.167.0/24 maxlen: 24
                          203.188.169.0/24 maxlen: 24
                          203.188.170.0/24 maxlen: 24
                          203.188.172.0/24 maxlen: 24
                          212.56.50.0/24 maxlen: 24
                          212.78.245.0/24 maxlen: 24
                          212.78.246.0/24 maxlen: 24
                          212.78.247.0/24 maxlen: 24
                          212.78.248.0/24 maxlen: 24
                          212.78.249.0/24 maxlen: 24
                          212.78.250.0/24 maxlen: 24
                          212.78.251.0/24 maxlen: 24
                          213.254.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fb:62:51:1d:0c:ea:a6:1c:ae:eb:d5:62:06:f1:11:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
        Validity
            Not Before: Oct  2 06:51:59 2026 GMT
            Not After : Jul  1 00:00:00 2027 GMT
        Subject: CN=bf0917bc080723ca6133291abf78a0e61e4aaa26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:72:06:96:e8:1c:3d:e0:9e:cd:1b:52:72:
                    c4:68:5b:89:18:80:7f:05:fd:b8:31:77:18:08:97:
                    a4:03:06:dc:a2:92:8e:09:ff:1b:cb:46:53:46:10:
                    62:76:23:37:65:96:d2:4a:87:dd:00:e5:05:51:b1:
                    84:aa:ac:8f:90:00:d8:10:bd:6c:35:59:dd:c1:a1:
                    83:b1:ff:41:7a:5a:5b:f7:78:e8:d0:1f:e9:02:1e:
                    59:cb:c7:da:f8:ef:e2:02:57:34:f7:ef:c7:95:9d:
                    0e:ab:94:f5:9c:18:77:3f:4d:c2:24:11:22:f5:76:
                    b4:34:b4:4b:eb:ab:f7:d9:04:51:ff:0a:4c:10:84:
                    2d:9b:16:5e:c4:46:ec:45:8e:9d:c5:d3:6d:dd:d2:
                    1b:fc:8e:e8:b1:da:eb:69:38:c5:b9:ee:89:33:e2:
                    74:60:27:6c:73:36:dc:12:ec:78:8f:4b:9d:b3:56:
                    7b:29:33:f0:50:00:44:8e:85:1e:eb:2d:51:ec:8d:
                    6b:88:c1:1d:8b:a0:19:ba:5c:9c:46:13:3a:b0:e6:
                    0e:1c:18:e0:16:e7:8e:59:3e:35:54:ae:39:71:6b:
                    22:e0:26:fa:10:a7:19:ba:c7:ff:9c:32:8b:b9:4c:
                    b9:1a:30:4c:a3:a6:60:48:13:e2:57:d7:6e:3e:2c:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:09:17:BC:08:07:23:CA:61:33:29:1A:BF:78:A0:E6:1E:4A:AA:26
            X509v3 Authority Key Identifier:
                keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/vwkXvAgHI8phMykav3ig5h5KqiY.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.52.0/24
                  14.102.54.0/23
                  14.102.63.0/24
                  14.102.85.0/24
                  14.102.87.0/24
                  31.222.216.0/22
                  62.169.129.0/24
                  62.169.131.0-62.169.132.255
                  62.169.134.0/23
                  66.56.80.0-66.56.82.255
                  66.56.84.0-66.56.86.255
                  81.95.50.0/23
                  81.95.56.0/21
                  84.51.234.0/23
                  92.51.232.0/23
                  92.51.238.0/23
                  92.51.248.0-92.51.254.255
                  103.61.197.0-103.61.199.255
                  103.125.77.0-103.125.79.255
                  103.210.198.0/23
                  103.213.212.0/22
                  103.255.76.0/23
                  136.176.160.0/24
                  147.90.45.0/24
                  147.90.195.0/24
                  147.90.209.0/24
                  147.90.216.0/24
                  147.90.227.0/24
                  147.90.236.0/24
                  147.90.241.0/24
                  155.2.176.0/22
                  155.2.182.0-155.2.188.255
                  155.2.194.0/23
                  155.2.212.0/24
                  155.2.215.0-155.2.217.255
                  155.2.221.0-155.2.222.255
                  158.173.134.0/23
                  158.173.140.0/22
                  158.173.152.0-158.173.158.255
                  158.173.165.0/24
                  158.173.188.0/24
                  158.173.241.0-158.173.242.255
                  158.173.244.0/23
                  167.160.16.0/23
                  167.160.29.0/24
                  170.62.89.0-170.62.95.255
                  170.62.100.0/24
                  170.62.102.0/23
                  170.62.106.0-170.62.108.255
                  170.62.110.0/23
                  170.62.160.0/24
                  170.62.224.0-170.62.237.255
                  185.34.108.0/22
                  185.51.54.0/24
                  192.253.208.0/24
                  198.55.28.0/23
                  203.188.164.0/24
                  203.188.167.0/24
                  203.188.169.0-203.188.170.255
                  203.188.172.0/24
                  212.56.50.0/24
                  212.78.245.0-212.78.251.255
                  213.254.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:68:af:7a:35:92:d1:3e:25:e1:f1:a7:8d:9c:b4:66:8c:a5:
         ce:8e:b4:33:07:ef:b2:5c:0b:b7:b6:af:45:e0:46:98:dd:f0:
         20:4e:39:36:94:e0:f8:22:14:e6:0a:00:52:89:68:77:7d:01:
         7f:1d:f3:f8:a7:51:1d:75:7b:de:98:e8:02:1b:4e:aa:77:c2:
         91:91:06:fa:51:e3:2b:57:0a:ae:9e:3e:4f:26:2a:e4:32:f8:
         e0:b7:5d:97:60:43:bc:35:4b:8e:28:37:67:ad:15:a0:c8:29:
         9f:29:56:05:f7:8e:3b:4d:88:d4:72:8c:d8:d5:1d:f0:17:b4:
         13:2a:0b:ce:1a:2a:be:58:62:35:dc:81:5e:15:c9:c5:60:9d:
         d6:3a:b9:93:ff:e9:7f:d1:f0:b3:b1:10:81:6d:57:2d:77:2e:
         fd:3a:b3:48:95:b6:1e:0f:06:a4:a1:17:bd:bb:f1:d7:6a:d2:
         8f:1d:1d:1f:18:6f:26:dd:8b:13:46:71:b0:4f:04:c4:2c:85:
         d9:a3:6a:57:91:98:b9:60:8d:de:5a:06:31:46:aa:07:04:37:
         a0:b3:0e:4a:eb:3e:63:a6:2d:c1:9d:2e:3f:6a:af:2a:65:4a:
         0b:9e:76:2f:98:59:ba:25:82:6e:1e:3f:31:8a:e8:b5:54:a6:
         36:08:9e:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:44:53 2026 by rpki-client