Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fd44tsp7sBFFLMrprukaCygBAo.roa
File: 7fd44tsp7sBFFLMrprukaCygBAo.roa (raw, json)
Hash identifier: tR5dMqyWPAR8XsDn6Yoj/gJ5gDoUA9s80pZewnKs9Xw=
Subject key identifier: ED:F7:78:E2:DB:29:EE:C0:45:14:B3:2B:A6:BB:A4:68:2C:A0:04:0A
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A17FC25995B588B82EB0A197B16B2A86A3
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fd44tsp7sBFFLMrprukaCygBAo.roa
Signing time: Tue 27 Oct 2026 23:46:45 +0000
ROA not before: Tue 27 Oct 2026 23:46:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21769
IP address blocks: 14.102.224.0/20 maxlen: 20
43.242.136.0/22 maxlen: 22
45.127.248.0/22 maxlen: 22
45.151.140.0/22 maxlen: 22
74.112.152.0/21 maxlen: 21
74.112.156.0/22 maxlen: 24
77.111.96.0/20 maxlen: 20
85.208.8.0/22 maxlen: 22
89.106.0.0/19 maxlen: 19
89.106.27.0/24 maxlen: 24
94.229.208.0/20 maxlen: 20
103.41.44.0/22 maxlen: 22
103.41.44.0/23 maxlen: 24
103.47.56.0/22 maxlen: 22
103.47.56.0/24 maxlen: 24
103.63.28.0/22 maxlen: 22
103.71.61.0/24 maxlen: 24
103.84.212.0/22 maxlen: 22
103.84.213.0/24 maxlen: 24
103.102.132.0/22 maxlen: 22
124.158.100.0/22 maxlen: 22
124.158.100.0/24 maxlen: 24
124.158.112.0/22 maxlen: 22
185.195.212.0/22 maxlen: 22
185.195.220.0/22 maxlen: 22
185.196.188.0/22 maxlen: 22
185.199.116.0/22 maxlen: 22
194.36.32.0/22 maxlen: 22
194.93.4.0/22 maxlen: 22
205.237.88.0/21 maxlen: 21
2a09:1e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:c2:59:95:b5:88:b8:2e:b0:a1:97:b1:6b:2a:86:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 27 23:46:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=edf778e2db29eec04514b32ba6bba4682ca0040a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:c2:1f:8a:de:f3:28:b4:d5:f5:5a:a1:54:
46:52:bc:a1:4d:15:fd:8c:4c:4c:72:2c:09:6c:d0:
06:6e:4a:19:00:c3:d2:2c:25:2c:20:a8:b9:27:f5:
8b:c8:1b:51:c2:19:ed:23:95:5e:cf:c0:4b:9a:5b:
15:c9:f5:5d:65:ad:98:0d:6d:36:42:13:68:ea:b7:
7f:cd:2c:a8:9c:e2:08:7a:7c:72:35:75:16:76:3c:
c9:db:66:95:cf:46:53:eb:5f:c9:d4:3b:37:44:a0:
ee:ea:5d:31:12:a8:fe:96:cd:4e:2d:3a:06:7f:a7:
1d:75:d9:c8:66:d9:23:a6:65:e6:8f:8c:62:68:cb:
fc:dc:ae:17:a3:03:9a:31:5b:6d:87:19:df:03:df:
cf:e7:0e:ea:21:67:fd:9b:02:46:40:57:c7:9e:83:
01:07:56:3c:65:9e:6a:27:3d:7d:7b:64:dc:85:af:
4e:16:f9:4d:c5:c8:3c:08:bc:f9:f3:65:6d:f5:8f:
75:c9:1d:69:e0:0b:28:fd:f4:f0:e9:f3:ce:ea:49:
c5:2f:4a:24:eb:6c:15:a4:47:54:4c:16:0a:af:5b:
8e:23:5f:1a:67:52:42:d2:a6:dc:dd:a6:11:66:cc:
4c:07:65:f1:ec:ac:a2:c7:f4:58:ce:28:2b:ce:66:
6d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:F7:78:E2:DB:29:EE:C0:45:14:B3:2B:A6:BB:A4:68:2C:A0:04:0A
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7fd44tsp7sBFFLMrprukaCygBAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.224.0/20
43.242.136.0/22
45.127.248.0/22
45.151.140.0/22
74.112.152.0/21
77.111.96.0/20
85.208.8.0/22
89.106.0.0/19
94.229.208.0/20
103.41.44.0/22
103.47.56.0/22
103.63.28.0/22
103.71.61.0/24
103.84.212.0/22
103.102.132.0/22
124.158.100.0/22
124.158.112.0/22
185.195.212.0/22
185.195.220.0/22
185.196.188.0/22
185.199.116.0/22
194.36.32.0/22
194.93.4.0/22
205.237.88.0/21
IPv6:
2a09:1e80::/29
Signature Algorithm: sha256WithRSAEncryption
7e:2d:4e:e3:a7:0f:2b:58:e6:38:0e:42:8a:c2:53:53:97:19:
1c:cd:d1:43:7a:b1:cf:03:da:09:03:61:fa:38:00:b5:8b:8f:
df:44:07:3d:c2:ab:1b:b2:fc:0c:34:ed:98:a8:fc:51:50:12:
e7:4a:b6:41:a6:94:9f:03:ff:64:83:07:a6:58:2b:00:12:24:
de:f8:65:c1:7b:cc:72:13:80:1b:f2:9f:31:c0:90:86:e3:fc:
bd:5d:54:35:2b:b1:ee:52:68:50:e2:2e:b7:85:47:7c:13:4c:
40:18:59:f1:e0:68:77:ac:50:be:3e:61:de:b6:59:ff:51:80:
99:0d:85:7f:a6:8e:1b:e1:37:c7:12:11:42:8e:cb:51:9b:86:
10:c7:21:27:28:b3:dc:df:26:74:c5:33:f9:d9:71:ba:6c:10:
fb:50:76:06:ad:3a:86:5e:a5:20:80:8f:be:d6:8d:81:71:2a:
31:c6:0b:78:88:b3:4d:14:bf:93:69:24:4c:ff:e2:0e:8d:57:
95:6d:4d:f3:c5:86:a4:d2:7d:44:fd:4e:98:a3:65:df:3c:6c:
a4:87:51:ee:f9:38:a1:5b:6f:75:06:a7:14:35:4e:4c:3e:75:
a3:e3:b9:60:0b:da:7c:a4:6f:09:db:d4:46:d0:85:2d:8f:36:
26:41:ec:0c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:43 2026 by rpki-client