Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YJqFuWjQQl3r5xzv823_XCSFd4g.roa
File: YJqFuWjQQl3r5xzv823_XCSFd4g.roa (raw, json)
Hash identifier: QexBAZ+9XmmDc+0eHaawSulf9kEiT4b6JE90gzBNwxI=
Subject key identifier: 60:9A:85:B9:68:D0:42:5D:EB:E7:1C:EF:F3:6D:FF:5C:24:85:77:88
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1DB457E002F93C72AC89D22DD1813AEF9
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YJqFuWjQQl3r5xzv823_XCSFd4g.roa
Signing time: Sat 14 Nov 2026 18:15:26 +0000
ROA not before: Sat 14 Nov 2026 18:15:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 43.242.136.0/24 maxlen: 24
43.242.138.0/24 maxlen: 24
43.242.139.0/24 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.110.0/24 maxlen: 24
89.106.16.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
89.106.31.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
124.158.112.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.50.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
189.31.213.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.75.187.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.30.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
191.222.248.0/24 maxlen: 24
191.222.249.0/24 maxlen: 24
191.222.250.0/24 maxlen: 24
191.222.255.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
200.181.93.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.228.0/22 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.14.223.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
205.237.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 18:15:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:45:7e:00:2f:93:c7:2a:c8:9d:22:dd:18:13:ae:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 14 18:15:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=609a85b968d0425debe71ceff36dff5c24857788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:4f:61:c0:7f:88:0e:38:1b:09:18:df:ed:
9e:73:04:02:c4:15:4e:4b:d7:57:de:5f:6e:68:83:
e4:c0:2e:c0:8b:bc:7b:3f:21:ab:23:ba:ba:13:96:
4f:9e:d0:37:c0:7e:0d:92:8d:87:b8:e3:4b:c7:a5:
31:13:95:e8:8a:b9:29:39:68:dd:7e:47:4b:77:48:
7d:35:64:90:72:b5:08:3b:48:85:e7:5d:dd:e8:87:
52:9e:7c:07:8d:3e:80:73:85:b6:21:b5:26:f7:4d:
4e:fa:15:d1:bd:6e:91:c1:45:af:fd:8b:37:02:83:
9b:31:04:1c:0d:11:19:1c:3e:7e:02:9d:29:19:22:
9e:ce:14:68:be:07:de:ee:24:45:10:7c:8a:2f:6e:
15:cb:f6:3e:24:7c:d8:46:98:78:7d:34:dc:11:ea:
50:8e:2d:4b:36:b1:e0:fc:c2:da:f2:b8:d0:6e:89:
2a:36:fb:6d:5f:c0:e2:93:8f:77:42:c5:19:c8:49:
34:9e:a7:29:17:66:8e:93:3b:33:12:78:ae:67:99:
47:6d:5f:62:de:35:60:83:e0:35:47:c0:15:48:c3:
74:89:52:d0:d0:77:3d:00:89:d6:28:a1:78:d9:01:
3e:d5:bc:42:91:70:08:2a:53:77:6b:93:87:60:e5:
bc:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:9A:85:B9:68:D0:42:5D:EB:E7:1C:EF:F3:6D:FF:5C:24:85:77:88
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YJqFuWjQQl3r5xzv823_XCSFd4g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.242.136.0/24
43.242.138.0/23
77.111.96.0/22
77.111.102.0/23
77.111.110.0/24
89.106.16.0/24
89.106.30.0/23
94.229.218.0/24
124.158.112.0/24
189.12.48.0/24
189.12.50.0/24
189.12.52.0/24
189.12.54.0/24
189.12.61.0-189.12.62.255
189.31.211.0/24
189.31.213.0/24
189.73.25.0-189.73.26.255
189.75.187.0/24
191.44.25.0-191.44.30.255
191.219.21.0/24
191.219.30.0/24
191.222.32.0/23
191.222.36.0/24
191.222.38.0/23
191.222.240.0-191.222.242.255
191.222.246.0/24
191.222.248.0-191.222.250.255
191.222.255.0/24
194.36.33.0/24
200.102.184.0/22
200.102.189.0-200.102.191.255
200.165.16.0/23
200.165.19.0/24
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.92.0/23
201.11.224.0/23
201.11.228.0-201.11.234.255
201.11.236.0/24
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0/24
201.14.222.0/23
201.24.192.0/24
201.24.196.0/24
205.237.88.0/24
Signature Algorithm: sha256WithRSAEncryption
62:01:78:77:f5:7d:8a:50:0a:0a:fb:1f:05:9d:b3:0e:3b:01:
10:c4:29:23:ec:4e:0f:50:da:6d:11:27:4e:ea:10:71:80:92:
7a:b4:f3:c2:78:ea:b6:32:c6:4b:58:22:73:f8:af:22:9d:32:
82:dd:1e:36:90:2d:1f:3b:e3:b0:a8:ff:3d:3a:af:05:b2:be:
46:82:86:1a:f7:9f:46:1f:da:fc:a2:89:cc:57:92:d5:2e:36:
c3:a5:9d:cd:a9:ec:2a:3d:0d:68:1a:f0:82:c9:d6:fc:6b:c3:
1f:b1:41:02:3e:88:df:f4:f0:4d:db:86:76:4d:b6:d1:8d:94:
36:55:7b:5f:b3:4e:8e:a6:54:c9:4c:43:c9:cd:24:5c:d6:4a:
1f:d7:33:3c:35:18:d0:c3:01:4c:42:3d:a2:30:30:9a:f1:0e:
b3:ce:a6:4a:37:b2:ae:89:0e:f9:78:68:4e:3f:19:ef:59:46:
3b:14:9a:8f:88:34:fb:d8:3d:ff:4a:38:94:93:f5:06:31:0b:
45:5b:63:b4:f8:48:cc:e3:fe:ad:34:ce:f7:5a:c3:a7:08:94:
33:cf:9c:41:80:7c:a9:72:65:c8:8e:2c:4f:a8:44:3c:58:26:
6c:df:89:09:04:18:54:fc:0a:5e:e8:74:c3:75:28:9c:15:d6:
c0:9c:58:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Nov 15 04:34:00 2026 by rpki-client