Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DG6g4YWIluGAM9bks7o8qibVbR0.roa
File: DG6g4YWIluGAM9bks7o8qibVbR0.roa (raw, json)
Hash identifier: zP3qgjhqU1+zTk+3Mdv8N9gXlUzRNQ2CzZKB2gzeteo=
Subject key identifier: 0C:6E:A0:E1:85:88:96:E1:80:33:D6:E4:B3:BA:3C:AA:26:D5:6D:1D
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A130FF963F7C3DE4AAED7F9A1DF34A574D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DG6g4YWIluGAM9bks7o8qibVbR0.roa
Signing time: Mon 12 Oct 2026 16:43:38 +0000
ROA not before: Mon 12 Oct 2026 16:43:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.60.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.215.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.217.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.219.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.31.223.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.20.0/24 maxlen: 24
189.73.21.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.73.28.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.73.31.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.219.16.0/22 maxlen: 24
191.219.20.0/23 maxlen: 24
191.219.22.0/24 maxlen: 24
191.222.244.0/23 maxlen: 24
191.222.246.0/24 maxlen: 24
191.222.251.0/24 maxlen: 24
191.222.252.0/23 maxlen: 24
191.222.254.0/24 maxlen: 24
200.102.81.0/24 maxlen: 24
200.102.82.0/23 maxlen: 24
200.102.84.0/22 maxlen: 24
200.181.88.0/22 maxlen: 24
200.181.94.0/23 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:ff:96:3f:7c:3d:e4:aa:ed:7f:9a:1d:f3:4a:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 12 16:43:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0c6ea0e1858896e18033d6e4b3ba3caa26d56d1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:aa:4e:25:07:10:84:d0:78:10:a0:04:46:
cb:0d:2a:e5:59:a6:52:b9:8a:83:97:b6:88:b1:cd:
95:4e:a6:dd:31:b0:45:82:9c:f2:21:3c:ae:fd:83:
24:44:94:3b:f0:ea:07:4d:15:dc:89:02:2a:2a:db:
32:3c:08:55:56:34:0d:1e:ec:ef:5f:1c:be:45:1d:
46:ae:d5:92:e4:c3:2f:85:3c:54:c6:89:f0:29:1f:
33:2b:54:5c:05:59:a3:15:a5:9d:83:21:9e:9f:84:
66:57:3e:95:a5:ce:cb:46:48:4b:ad:07:49:87:7f:
de:c9:2a:95:38:77:70:e3:b5:c6:3b:90:b8:23:95:
65:e0:35:ed:4e:76:3d:d4:73:c9:10:b3:b7:a4:e8:
d2:4e:67:5e:e9:3e:7f:5a:25:07:4f:ec:05:85:f5:
75:3f:72:6b:aa:6b:2f:44:58:e9:63:28:9c:dc:82:
48:5b:ca:27:9c:81:7e:f8:db:ff:06:47:e5:2f:88:
4e:47:e1:a0:ee:2f:18:31:c9:0e:dd:ef:a0:c3:28:
1d:d1:b9:0a:45:35:5f:b7:2c:53:9f:e4:88:9f:75:
63:11:6c:bb:24:ea:28:5e:46:f6:b5:05:4d:4a:6e:
2c:ce:40:58:57:ec:3c:84:4f:18:a7:83:cb:55:e2:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6E:A0:E1:85:88:96:E1:80:33:D6:E4:B3:BA:3C:AA:26:D5:6D:1D
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/DG6g4YWIluGAM9bks7o8qibVbR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.16.0/24
89.106.18.0/24
89.106.21.0/24
94.229.208.0/24
189.12.49.0/24
189.12.51.0/24
189.12.53.0/24
189.12.55.0-189.12.58.255
189.12.60.0/24
189.12.63.0/24
189.31.208.0-189.31.210.255
189.31.212.0/24
189.31.214.0-189.31.223.255
189.73.16.0-189.73.24.255
189.73.27.0-189.73.31.255
189.75.176.0/24
189.75.179.0-189.75.181.255
189.75.183.0-189.75.186.255
189.75.189.0-189.75.191.255
191.219.16.0-191.219.22.255
191.222.244.0-191.222.246.255
191.222.251.0-191.222.254.255
200.102.81.0-200.102.87.255
200.181.88.0/22
200.181.94.0/23
201.11.227.0-201.11.231.255
Signature Algorithm: sha256WithRSAEncryption
c7:76:81:61:40:6a:9b:7c:c0:bd:f9:1e:a0:a8:3b:9d:e4:16:
a2:6d:f9:da:8e:fb:4c:22:47:50:8c:77:0b:6e:56:91:d5:62:
21:6c:eb:23:be:a4:b8:0c:b6:3b:6a:1b:77:f9:95:5d:b2:5a:
5d:8d:97:74:23:e1:f0:9b:53:ce:71:4b:7f:70:b8:7e:7c:6c:
1a:ea:81:71:d1:2e:f1:dc:88:c1:cb:a4:ba:81:a2:03:f5:ab:
23:d7:a8:b9:a0:53:ed:8c:68:8d:22:4d:ed:51:da:9c:15:06:
96:f1:a7:20:cf:c8:7d:fd:c3:bf:46:10:52:55:ee:6b:73:8a:
c4:24:c6:9f:1a:cf:f1:85:84:7c:c2:62:04:12:22:73:b3:e0:
04:f3:88:b7:a2:1b:cb:73:c6:73:44:96:95:a2:b7:73:74:2b:
24:75:30:43:0d:8a:e5:43:f1:84:e0:d7:80:c9:d9:93:4d:7c:
f4:be:f6:b3:33:e6:9a:d8:6a:1a:52:e2:cf:77:42:97:0c:70:
4a:32:2f:fc:d9:ea:2e:e0:1f:73:dd:8d:3d:dd:e1:d1:9a:16:
bb:7c:8d:9e:43:9a:af:25:83:22:c6:c6:b5:ca:ed:9f:b8:bf:
52:79:12:21:eb:da:61:c9:c9:e0:c0:30:28:d3:22:b5:75:c5:
37:59:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:38 2026 by rpki-client