Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2dhr1wOIecXtwdJGzb9lMB0Wxw.roa
File: V2dhr1wOIecXtwdJGzb9lMB0Wxw.roa (raw, json)
Hash identifier: xsr0laUZvNU0dRJ5GT+HbwpmQZ0CAJ3xrG6Ne0qwELo=
Subject key identifier: 57:67:61:AF:5C:0E:21:E7:17:B7:07:49:1B:36:FD:94:C0:74:5B:1C
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019ED80F1866248F8D9C1F9D224288105EC9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2dhr1wOIecXtwdJGzb9lMB0Wxw.roa
Signing time: Thu 18 Jun 2026 00:08:48 +0000
ROA not before: Thu 18 Jun 2026 00:08:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
43.242.138.0/24 maxlen: 24
45.151.140.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.41.44.0/23 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d8:0f:18:66:24:8f:8d:9c:1f:9d:22:42:88:10:5e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 18 00:08:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=576761af5c0e21e717b707491b36fd94c0745b1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d2:1e:31:18:91:76:9d:19:c8:3c:ee:60:75:
99:c0:de:21:0d:f8:a9:3b:b0:e6:ab:f8:a7:3c:89:
1e:e1:96:30:fa:c9:61:d7:c2:77:64:17:31:a1:7f:
23:77:dd:fd:f5:bc:85:f4:ad:26:e1:e3:e6:30:1a:
aa:64:1d:62:89:f6:ea:fb:8c:f4:8f:7f:fa:e1:8b:
50:f6:93:c5:30:9d:df:3b:e5:af:7f:3b:1a:da:a1:
cf:e1:de:68:fe:10:47:38:9f:b8:bf:ba:32:41:6a:
ab:73:44:5a:d1:0b:00:b1:af:98:07:93:d7:d8:cb:
76:42:36:ac:62:c4:d4:ab:9b:13:a4:fc:56:05:6d:
e5:bd:86:a1:0d:b3:3f:d8:82:76:86:ed:3f:e2:b6:
25:3a:99:eb:11:24:98:5c:b5:2d:67:19:aa:9a:80:
42:f6:32:c2:5e:fa:65:5e:07:cc:cd:25:da:76:d5:
8d:06:84:8d:da:74:a5:8c:08:6e:6d:ae:11:56:27:
8c:69:8a:21:c8:50:71:c4:58:dc:4e:72:1c:5d:75:
66:8d:3b:a6:07:0c:a5:4d:14:7c:d8:3d:2f:08:50:
4d:1c:b0:23:04:57:78:39:58:dc:6f:2a:85:6f:93:
83:79:01:f8:88:65:9f:9b:1c:eb:9b:b8:6c:28:f8:
84:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:67:61:AF:5C:0E:21:E7:17:B7:07:49:1B:36:FD:94:C0:74:5B:1C
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/V2dhr1wOIecXtwdJGzb9lMB0Wxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.234.0/24
43.242.136.0/24
43.242.138.0/24
45.151.140.0/24
77.111.96.0/22
77.111.102.0/23
77.111.105.0-77.111.106.255
89.106.2.0/24
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.41.44.0/23
103.102.133.0/24
124.158.112.0/24
194.36.33.0/24
201.14.221.0/24
Signature Algorithm: sha256WithRSAEncryption
53:97:0f:04:c5:6f:45:db:d5:8c:7d:13:a1:1f:ec:54:ed:52:
08:74:d7:01:0f:c3:c4:cb:fb:bc:25:d5:d8:cb:c9:e5:96:bf:
65:c5:a4:be:a8:63:d8:82:b4:3b:bf:4d:b9:17:e5:d1:09:07:
70:9b:30:90:c3:cd:f8:52:63:6c:96:8e:3a:70:5b:35:db:d5:
0d:03:ca:4d:e8:ee:7d:14:c6:5e:5d:0c:3a:a4:d3:29:84:e7:
96:ed:a9:82:ff:86:61:29:e9:78:74:53:e1:fb:f7:49:fa:5f:
a5:55:a4:02:5b:9c:9c:a6:af:b3:d8:85:26:e0:0c:30:05:6c:
a7:e4:47:98:33:9d:68:eb:31:f5:fa:09:49:df:cd:26:fc:d4:
9d:ad:09:66:b7:50:6d:84:7a:7d:79:1a:3f:ab:d0:d9:c6:36:
97:26:7c:d3:e4:4e:c7:96:6a:5b:54:bf:0c:a8:29:f9:1a:e1:
57:1a:47:b0:18:52:58:74:50:0e:2f:4d:28:82:52:2b:25:e1:
be:b7:14:ee:4b:48:ec:bf:b2:22:ab:40:06:8f:05:a5:19:33:
1b:76:50:1d:9e:0e:0a:9f:aa:e0:47:78:2b:7b:f0:53:91:8c:
69:b9:d6:3b:74:81:b4:90:8b:c8:ee:90:6c:78:fa:2d:75:95:
17:7f:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:58 2026 by rpki-client