Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RJvllBlZBGNVv2Q1rEW9IMK4piw.roa
File: RJvllBlZBGNVv2Q1rEW9IMK4piw.roa (raw, json)
Hash identifier: Tdks3mOzDPE/PO85t2CdmFnF/VHVX+NfKVEfK6+51ys=
Subject key identifier: 44:9B:E5:94:19:59:04:63:55:BF:64:35:AC:45:BD:20:C2:B8:A6:2C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1A24715B44D43FA755EF33D915C704771
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RJvllBlZBGNVv2Q1rEW9IMK4piw.roa
Signing time: Tue 03 Nov 2026 16:38:49 +0000
ROA not before: Tue 03 Nov 2026 16:38:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.242.136.0/24 maxlen: 24
43.242.139.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.110.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
89.106.31.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.50.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
189.31.213.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.30.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.34.0/24 maxlen: 24
191.222.35.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
191.222.248.0/24 maxlen: 24
191.222.249.0/24 maxlen: 24
191.222.250.0/24 maxlen: 24
191.222.255.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
200.181.93.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.228.0/22 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.204.0/24 maxlen: 24
201.24.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:47:15:b4:4d:43:fa:75:5e:f3:3d:91:5c:70:47:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 3 16:38:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=449be5941959046355bf6435ac45bd20c2b8a62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:12:53:34:ec:29:6e:1d:b0:2a:06:cb:c2:
17:98:58:28:b6:11:77:56:c2:23:4b:4b:03:20:19:
01:49:56:20:93:c9:af:78:23:e2:c5:b9:58:8f:7a:
69:8c:66:ca:e2:aa:c2:fb:5a:98:79:dc:a7:ef:8b:
d2:b0:51:9f:aa:08:24:b7:c7:6a:7a:c9:40:e0:dc:
0d:e7:b2:2c:27:08:03:3a:e1:dd:08:fc:03:98:f9:
37:b2:73:ff:22:e5:a4:82:10:82:46:c8:67:62:be:
de:9e:41:e0:76:ad:5d:fb:c9:7c:f5:75:47:f1:8f:
34:20:8b:af:73:2b:76:8c:bb:cb:7d:57:ea:a6:82:
2c:90:ce:27:89:9d:c0:ca:a3:d6:cf:1b:d1:b1:05:
03:c0:ae:d9:57:28:c1:fb:7b:08:ee:d2:24:eb:2b:
4d:03:fe:33:f7:30:f6:a9:d5:fe:05:e3:b0:55:a1:
9f:9e:95:96:cc:7b:b5:2c:72:54:46:4c:8c:91:59:
7c:0a:a3:59:aa:49:12:85:6e:8d:4a:34:ed:6f:ab:
51:65:f1:a3:d1:99:43:07:41:12:8b:a4:3f:48:c5:
2a:58:17:11:85:a7:ad:b6:1d:0b:ba:7b:dc:b0:68:
59:f0:7c:fb:c6:35:2d:4f:2a:96:69:a2:8e:76:05:
9e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:E5:94:19:59:04:63:55:BF:64:35:AC:45:BD:20:C2:B8:A6:2C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/RJvllBlZBGNVv2Q1rEW9IMK4piw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.242.136.0/24
43.242.139.0/24
77.111.96.0/22
77.111.102.0/23
77.111.110.0/24
89.106.16.0/24
89.106.30.0/23
189.12.48.0/24
189.12.50.0/24
189.12.52.0/24
189.12.54.0/24
189.12.61.0-189.12.62.255
189.31.211.0/24
189.31.213.0/24
189.73.25.0-189.73.26.255
189.75.187.0/24
191.44.25.0-191.44.30.255
191.219.21.0/24
191.219.30.0/24
191.222.32.0-191.222.36.255
191.222.38.0/23
191.222.241.0-191.222.242.255
191.222.244.0-191.222.246.255
191.222.248.0-191.222.250.255
191.222.255.0/24
194.36.33.0/24
200.102.184.0/22
200.102.189.0-200.102.191.255
200.165.16.0/23
200.165.19.0/24
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.92.0/23
201.11.224.0/23
201.11.228.0-201.11.234.255
201.11.236.0/24
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0/24
201.14.222.0/23
201.24.192.0/24
201.24.196.0/24
201.24.204.0/24
201.24.207.0/24
Signature Algorithm: sha256WithRSAEncryption
31:21:79:f4:e5:14:ce:52:7c:c9:81:0b:32:1e:31:e5:4e:21:
4d:05:a8:9d:03:f0:17:b1:d0:d0:07:44:28:56:6b:e9:de:18:
7e:dd:bd:8c:80:83:3b:64:40:25:77:ef:bb:44:38:be:b0:cd:
3a:1b:c3:7f:a3:e1:75:e9:7d:65:ed:9b:36:18:ae:14:32:f3:
3c:81:0b:9b:51:e5:54:fc:be:68:0e:cf:df:d3:84:11:e1:84:
6c:cc:0f:fa:d3:69:b3:9f:24:47:a8:88:5b:b8:c7:be:ea:eb:
10:cc:77:e5:df:bd:7e:c3:05:d4:25:a9:e1:fd:1a:22:c1:4b:
47:ae:88:f8:cf:c9:10:fd:83:6e:f1:38:6b:d9:3b:07:a1:e7:
ad:81:55:2f:a0:2f:1a:e4:06:07:b9:c6:af:a7:0a:56:e4:98:
03:b9:c3:53:a2:82:7a:47:00:83:23:af:cf:ff:04:ac:c6:e3:
77:db:58:e0:e2:a8:b6:b0:c5:14:81:fa:c6:98:90:7a:f7:47:
7d:f0:c5:bb:aa:61:c4:c1:f6:1d:a5:40:10:bc:d1:99:bc:d6:
38:cf:21:b9:86:b0:c0:f9:77:1d:4a:62:bb:bb:22:67:17:e0:
6b:42:b2:5a:12:ef:3c:07:8f:77:27:ad:42:c6:a2:da:25:37:
16:f5:3c:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:04:45 2026 by rpki-client