Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3hw9L8Qdwefi6yOMuAnwiQ4hH-4.roa
File: 3hw9L8Qdwefi6yOMuAnwiQ4hH-4.roa (raw, json)
Hash identifier: iNUvEnP+pUdLa52pFXcL43zQw9AdYhG49mz6tvEaoLg=
Subject key identifier: DE:1C:3D:2F:C4:1D:C1:E7:E2:EB:23:8C:B8:09:F0:89:0E:21:1F:EE
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A05E47D4826D1C243381814D19FE20DE10
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3hw9L8Qdwefi6yOMuAnwiQ4hH-4.roa
Signing time: Tue 01 Sep 2026 18:42:40 +0000
ROA not before: Tue 01 Sep 2026 18:42:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 14.102.226.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
77.111.105.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
89.106.31.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
201.24.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:47:d4:82:6d:1c:24:33:81:81:4d:19:fe:20:de:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 1 18:42:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de1c3d2fc41dc1e7e2eb238cb809f0890e211fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5b:17:82:e3:6b:d9:16:98:58:37:11:3f:6f:
42:fe:1e:0f:18:eb:f8:84:00:fe:74:8f:0a:f4:50:
c6:a8:88:42:ab:4d:c7:53:81:8f:64:4b:29:e9:2c:
49:9c:d6:80:1f:49:81:63:a5:6d:ee:5b:fd:4d:4b:
54:56:52:12:b6:0f:48:66:f6:27:58:34:13:03:17:
51:d1:a3:38:a2:7b:53:6d:59:28:2e:d0:24:bd:39:
bc:cb:81:b7:6e:ec:7a:c6:d9:2f:8a:48:a0:27:53:
a4:b3:e1:dc:2c:77:2c:be:05:d1:90:4f:4a:cc:3a:
97:ef:c4:e6:a8:f9:37:98:cd:b0:b8:33:47:a7:e4:
d7:1d:03:84:9d:8b:56:5a:e1:5e:58:d0:bc:0a:2b:
ba:8d:6b:03:81:97:4c:f9:99:45:9e:bb:a1:bc:50:
e6:bd:6c:9d:62:dd:a0:95:4a:f0:03:e7:d3:46:1a:
8e:83:eb:1c:72:23:6f:b5:db:5f:a4:7e:5b:7a:2f:
26:f7:6c:03:0a:b4:68:76:3b:13:29:8a:21:6b:dc:
93:7d:e9:a9:4e:f5:73:94:1f:2d:6a:a6:ab:74:af:
45:f3:fc:20:86:6a:fd:9c:fa:36:b3:d3:44:7e:56:
8e:1b:bf:4d:b0:32:62:2f:8c:10:d9:77:ba:fe:eb:
86:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1C:3D:2F:C4:1D:C1:E7:E2:EB:23:8C:B8:09:F0:89:0E:21:1F:EE
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/3hw9L8Qdwefi6yOMuAnwiQ4hH-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
43.242.136.0/24
77.111.105.0/24
89.106.29.0/24
89.106.31.0/24
189.31.210.0/24
189.73.25.0-189.73.26.255
189.75.176.0/24
189.75.187.0-189.75.188.255
191.219.24.0/24
191.222.32.0/24
200.165.17.0/24
200.165.19.0/24
201.11.236.0/24
201.14.223.0/24
201.24.192.0/24
201.24.204.0/24
201.24.207.0/24
Signature Algorithm: sha256WithRSAEncryption
90:c5:d8:3d:dc:c8:eb:f7:b3:2f:61:58:36:2e:59:a1:e2:8f:
54:f3:5a:62:9b:b1:eb:b2:2b:ed:08:c9:9f:3c:6c:f7:34:1c:
e3:b3:28:b6:b7:b6:64:fb:f4:03:af:54:1b:1d:45:b4:2a:d5:
71:24:35:ae:c9:5a:ce:25:65:09:43:25:14:60:ae:af:2b:b9:
c3:57:b1:87:9e:f5:43:a7:64:1c:48:6e:13:b5:13:93:fc:50:
a9:18:ad:38:4e:c6:7f:a6:f6:42:39:bf:d2:b4:6f:2d:2c:3c:
b4:94:1a:99:50:4e:2f:6d:34:6a:c0:99:52:e2:83:d7:45:0a:
ff:29:81:4f:32:e4:26:ef:a7:af:44:90:5d:7a:4c:87:3e:0f:
74:b1:ed:51:27:0c:7c:93:22:a9:89:1a:37:e9:d6:eb:50:b1:
28:93:f5:c6:48:55:8d:cb:f9:2f:53:e8:cf:20:57:df:5b:3e:
98:87:df:97:de:21:32:76:38:17:df:54:dc:c5:6f:6f:d0:16:
b2:89:7b:5b:17:31:30:e5:51:f7:f8:f9:86:6e:e8:b5:cb:19:
28:4d:ef:07:47:ae:39:59:24:81:6f:19:25:52:4e:94:39:cd:
12:e2:5c:3b:a0:99:61:e5:7f:e3:b1:01:f7:4d:8d:8f:51:97:
ed:29:47:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:53:04 2026 by rpki-client