Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa
File: eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa (raw, json)
Hash identifier: tKohV45mbquQ6A1OYA4BBMCrfZiBK3eEB8vOzL2T2gM=
Subject key identifier: 78:E7:3D:FE:D9:B4:9A:79:FD:97:12:7A:54:97:B2:2D:96:EA:B1:41
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01A01D92FFB6DE6762759B9089A527480FF1
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa
Signing time: Thu 20 Aug 2026 05:09:27 +0000
ROA not before: Thu 20 Aug 2026 05:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202958
IP address blocks: 37.140.243.0/24 maxlen: 24
46.226.123.0/24 maxlen: 24
77.246.247.0/24 maxlen: 24
86.107.198.0/24 maxlen: 24
86.107.199.0/24 maxlen: 24
89.126.200.0/24 maxlen: 24
89.126.201.0/24 maxlen: 24
89.126.202.0/24 maxlen: 24
89.126.203.0/24 maxlen: 24
89.126.204.0/24 maxlen: 24
89.126.205.0/24 maxlen: 24
89.126.206.0/24 maxlen: 24
89.126.207.0/24 maxlen: 24
89.207.248.0/24 maxlen: 24
89.207.249.0/24 maxlen: 24
89.207.250.0/24 maxlen: 24
89.207.251.0/24 maxlen: 24
89.207.252.0/24 maxlen: 24
89.207.253.0/24 maxlen: 24
89.207.254.0/24 maxlen: 24
89.207.255.0/24 maxlen: 24
91.243.71.0/24 maxlen: 24
93.115.14.0/24 maxlen: 24
185.98.4.0/24 maxlen: 24
185.100.66.0/24 maxlen: 24
185.113.133.0/24 maxlen: 24
185.116.192.0/24 maxlen: 24
185.116.193.0/24 maxlen: 24
185.116.194.0/24 maxlen: 24
185.116.195.0/24 maxlen: 24
185.121.80.0/24 maxlen: 24
185.121.81.0/24 maxlen: 24
185.121.82.0/24 maxlen: 24
185.121.83.0/24 maxlen: 24
185.125.88.0/24 maxlen: 24
185.125.89.0/24 maxlen: 24
185.125.90.0/24 maxlen: 24
185.125.91.0/24 maxlen: 24
185.249.194.0/24 maxlen: 24
185.249.195.0/24 maxlen: 24
188.244.115.0/24 maxlen: 24
194.4.56.0/24 maxlen: 24
194.4.57.0/24 maxlen: 24
194.4.58.0/24 maxlen: 24
194.4.59.0/24 maxlen: 24
194.146.40.0/24 maxlen: 24
194.146.41.0/24 maxlen: 24
194.146.42.0/24 maxlen: 24
194.146.43.0/24 maxlen: 24
213.109.146.0/24 maxlen: 24
2a06:941::/48 maxlen: 48
2a06:941:1::/48 maxlen: 48
2a06:941:2::/48 maxlen: 48
2a06:941:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 14:15:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:92:ff:b6:de:67:62:75:9b:90:89:a5:27:48:0f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Aug 20 05:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=78e73dfed9b49a79fd97127a5497b22d96eab141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:41:6b:c5:93:0e:78:79:cc:a3:b2:d6:00:50:
b2:5f:c8:ca:fa:e0:47:c4:9a:04:7e:f3:1c:ae:22:
21:5b:16:a5:e4:bd:d5:86:b6:65:f0:80:32:3f:e3:
5d:bd:ff:bc:37:1d:fa:40:1f:e7:ec:d4:39:38:68:
37:8f:f2:ed:60:04:ae:09:dc:dd:0a:d8:f3:e1:e2:
77:19:c0:58:16:4d:e9:66:df:3e:a2:a2:fb:4e:ef:
50:a9:57:77:4a:d8:60:8a:8b:3c:15:96:69:b7:84:
e1:6f:2e:da:5c:84:0a:60:8f:52:86:70:4d:eb:47:
c4:66:96:19:7a:90:21:64:74:71:fa:71:51:bb:10:
2b:81:cd:95:5f:4c:2c:7d:12:1a:16:69:9c:12:5f:
2c:63:00:e9:fa:1e:ee:6d:1f:24:96:96:4f:c9:ab:
39:1d:d2:41:00:11:a4:59:8d:f5:ae:f6:f7:14:82:
a2:88:3c:35:70:8d:e1:54:ac:b6:56:68:4e:ce:69:
19:22:62:c7:11:75:3f:a4:1c:4f:28:f9:9d:79:9f:
e6:64:7a:c4:b9:48:e8:f6:7c:1c:98:12:cb:c7:02:
54:0d:d8:4a:bc:99:da:3d:43:1d:1e:1d:27:ed:c5:
42:9f:95:3e:9c:5f:da:02:db:55:2d:5a:8c:3b:d6:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E7:3D:FE:D9:B4:9A:79:FD:97:12:7A:54:97:B2:2D:96:EA:B1:41
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/eOc9_tm0mnn9lxJ6VJeyLZbqsUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.243.0/24
46.226.123.0/24
77.246.247.0/24
86.107.198.0/23
89.126.200.0/21
89.207.248.0/21
91.243.71.0/24
93.115.14.0/24
185.98.4.0/24
185.100.66.0/24
185.113.133.0/24
185.116.192.0/22
185.121.80.0/22
185.125.88.0/22
185.249.194.0/23
188.244.115.0/24
194.4.56.0/22
194.146.40.0/22
213.109.146.0/24
IPv6:
2a06:941::/46
Signature Algorithm: sha256WithRSAEncryption
09:d0:f5:e6:38:84:1a:5d:25:b8:94:1d:bd:cc:4a:09:58:95:
63:ee:9d:61:61:50:75:e8:30:74:d7:7f:8f:6d:27:69:b0:b8:
8c:79:f9:41:cd:4e:2b:e1:39:56:64:43:e5:d3:b6:1e:8e:25:
3d:78:e3:26:09:68:11:7c:04:2f:cf:bf:80:15:4b:5d:63:f2:
23:45:a3:58:b7:5e:c8:0a:99:12:a6:49:e3:ff:13:4e:70:98:
d2:8a:6e:30:39:de:1c:c3:c2:38:52:74:2e:0c:89:48:ca:4d:
50:5d:8d:62:3a:72:3a:a8:98:44:26:ec:a4:e4:06:21:0d:96:
0a:7c:dd:28:97:20:0e:de:a2:58:c0:38:fd:aa:8d:7f:01:e7:
dd:50:b3:b2:38:fd:72:e8:a7:78:0a:b8:12:2a:be:30:88:34:
39:f8:09:b4:25:30:81:92:01:b2:df:de:d5:68:c9:64:90:ab:
b2:95:37:80:42:50:86:3a:92:12:ca:91:67:d6:52:88:94:a8:
ac:3d:de:52:67:43:c6:3d:50:39:42:12:12:1e:08:e2:f3:8d:
d2:98:30:2c:a7:b7:c3:95:b2:51:01:44:f9:9d:5a:f1:e7:b2:
66:88:7f:ae:00:30:db:4b:18:79:54:b8:69:8c:4b:cb:4f:76:
41:f3:c2:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 22:58:44 2026 by rpki-client