Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_hjnGglNwQ4O99vQkmfCLc5iCU.roa
File: P_hjnGglNwQ4O99vQkmfCLc5iCU.roa (raw, json)
Hash identifier: z70394q/fjDVF8Xuk8iMHLBMG7/QMBPJ3Q3AHh5SfHM=
Subject key identifier: 3F:F8:63:9C:68:25:37:04:38:3B:DF:6F:42:49:9F:08:B7:39:88:25
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0AADFE4548DB48D0736D97E4D34F392B1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_hjnGglNwQ4O99vQkmfCLc5iCU.roa
Signing time: Wed 16 Sep 2026 15:39:54 +0000
ROA not before: Wed 16 Sep 2026 15:39:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.59.0/24 maxlen: 24
189.12.60.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.215.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.217.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.219.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.73.28.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.73.31.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.21.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.80.0/21 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.93.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.18.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:df:e4:54:8d:b4:8d:07:36:d9:7e:4d:34:f3:92:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 16 15:39:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3ff8639c68253704383bdf6f42499f08b7398825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:e8:a1:56:f1:e4:8e:07:28:59:47:0f:b2:
a0:24:31:b6:66:b4:7f:fc:17:4e:90:37:be:12:c7:
cf:31:30:68:74:e3:55:b9:08:d1:bd:8e:fc:73:48:
a8:f4:6f:26:cf:f6:b3:c0:38:45:2f:c7:0c:c0:7b:
a2:5e:f6:3b:99:f9:83:93:04:f6:54:2f:dc:30:e9:
49:3a:17:60:01:e5:f3:5a:8d:4a:5c:90:8d:30:0a:
9f:17:16:2d:6e:fe:eb:00:59:91:7c:48:43:3f:5d:
66:59:fe:01:3c:b8:08:32:0c:b0:68:2a:d5:e0:ff:
d7:ff:b6:26:d8:51:46:fa:57:43:9f:01:b0:04:d2:
ad:2a:3d:9d:77:ad:80:12:8b:0d:ba:58:4a:19:29:
e1:f0:91:3b:34:3c:5f:44:66:ca:21:fd:78:ee:ae:
84:e7:bd:17:98:92:03:88:e2:9c:83:f0:5e:37:bc:
24:17:c3:03:de:23:12:b9:d1:31:44:e1:0c:6a:4c:
0b:f5:3c:c8:06:1b:ea:5d:dd:81:bd:59:54:76:93:
44:aa:06:8f:65:eb:92:d5:4f:69:09:6c:7e:46:88:
ff:1c:57:92:15:cf:83:f1:30:de:0e:08:71:86:4b:
ae:8b:26:ff:37:4e:e2:54:ff:43:d4:08:4b:5c:44:
7d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F8:63:9C:68:25:37:04:38:3B:DF:6F:42:49:9F:08:B7:39:88:25
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/P_hjnGglNwQ4O99vQkmfCLc5iCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
89.106.2.0/24
89.106.28.0/23
94.229.209.0/24
94.229.213.0/24
94.229.222.0/24
103.102.133.0/24
189.12.49.0/24
189.12.53.0/24
189.12.55.0-189.12.63.255
189.31.208.0/23
189.31.212.0/24
189.31.214.0-189.31.222.255
189.73.16.0/22
189.73.22.0-189.73.24.255
189.73.27.0-189.73.31.255
189.75.179.0-189.75.181.255
189.75.183.0-189.75.186.255
189.75.188.0/22
191.44.16.0-191.44.30.255
191.217.160.0-191.217.171.255
191.217.175.0/24
191.219.16.0/21
191.222.33.0/24
191.222.36.0/24
191.222.38.0-191.222.40.255
191.222.42.0-191.222.47.255
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.80.0/20
200.102.176.0-200.102.184.255
200.102.188.0/22
200.165.16.0/24
200.165.18.0/24
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.80.0-200.181.91.255
200.181.94.0/23
201.11.227.0-201.11.229.255
201.11.231.0-201.11.234.255
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0/23
201.24.192.0/24
201.24.196.0/24
Signature Algorithm: sha256WithRSAEncryption
66:6a:94:f9:4d:e9:d6:2b:98:fb:85:a7:12:b1:ae:d2:9b:0d:
c1:79:e0:f0:bc:28:c9:55:80:9d:37:ff:82:50:cc:1b:f4:04:
ff:62:df:ce:4a:d6:a8:ea:e0:4c:e7:ce:28:0b:0c:b4:96:51:
d1:55:37:8b:14:72:a0:fa:d7:6e:cb:f2:89:10:68:a8:4b:4a:
82:dd:9c:97:84:93:77:a9:8b:35:43:19:15:bd:cb:01:be:9a:
cb:1f:6b:a8:e9:a0:31:c4:fd:8a:d7:1c:9d:72:f7:3d:75:03:
f8:e6:0c:46:c9:8d:7b:cf:55:ab:e3:d3:6e:dd:ce:1c:ac:01:
e5:37:1f:57:e1:44:00:6d:8b:d1:46:8c:09:33:60:56:86:a2:
ac:1a:e6:6c:8b:fe:45:53:32:0e:d2:c2:39:aa:21:90:fc:2f:
cb:80:4d:19:c3:46:9a:52:22:5e:3e:e6:dc:55:05:d6:58:1d:
b6:65:7b:64:e5:0f:8c:6d:6f:a5:33:1b:e1:17:6a:f1:9c:b2:
67:8b:c0:20:23:dc:aa:7d:31:5e:82:e7:6a:f4:16:c1:6a:03:
4f:0a:bf:e3:07:b7:67:45:fe:dc:c3:0c:3d:11:24:d8:88:2a:
7c:db:28:0f:5f:f0:da:8a:5a:60:ab:0c:51:00:29:7a:5b:04:
bf:dc:9f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 18:20:37 2026 by rpki-client