Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g7qC73nYtlBX2T-YxKkq8v-lj9M.roa
File: g7qC73nYtlBX2T-YxKkq8v-lj9M.roa (raw, json)
Hash identifier: hyY8nPAhUjGYy5K2e6xCOKtUH/hZVRfnHv+5iu/ys/A=
Subject key identifier: 83:BA:82:EF:79:D8:B6:50:57:D9:3F:98:C4:A9:2A:F2:FF:A5:8F:D3
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FF187B8503A4D9C3A2C1FB8DC3297A9B1
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g7qC73nYtlBX2T-YxKkq8v-lj9M.roa
Signing time: Tue 11 Aug 2026 15:53:51 +0000
ROA not before: Tue 11 Aug 2026 15:53:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/22 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.211.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.26.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.177.0/24 maxlen: 24
189.75.178.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.21.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.217.174.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
191.219.28.0/24 maxlen: 24
191.219.29.0/24 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.34.0/24 maxlen: 24
191.222.35.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.37.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.93.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.186.0/24 maxlen: 24
200.102.187.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.19.0/24 maxlen: 24
200.165.20.0/24 maxlen: 24
200.165.21.0/24 maxlen: 24
200.165.22.0/24 maxlen: 24
200.165.23.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.25.0/24 maxlen: 24
200.165.26.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
200.181.92.0/24 maxlen: 24
200.181.93.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.225.0/24 maxlen: 24
201.11.226.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.230.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
201.11.239.0/24 maxlen: 24
201.14.209.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.212.0/24 maxlen: 24
201.14.214.0/24 maxlen: 24
201.14.215.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
201.24.198.0/24 maxlen: 24
201.24.200.0/24 maxlen: 24
201.24.201.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
201.24.203.0/24 maxlen: 24
201.24.205.0/24 maxlen: 24
201.24.206.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f1:87:b8:50:3a:4d:9c:3a:2c:1f:b8:dc:32:97:a9:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 11 15:53:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=83ba82ef79d8b65057d93f98c4a92af2ffa58fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:cd:79:c0:c1:81:9e:10:79:25:7e:be:bb:7e:
0c:80:9c:ad:9a:9b:03:b8:b0:40:6c:f2:f5:15:0a:
c0:1c:ed:64:f6:cd:be:3b:9f:1b:01:a6:34:fb:57:
29:0f:25:06:12:34:13:b4:43:ab:7f:16:26:b3:93:
6d:4e:c2:d8:e6:87:4c:09:cb:6d:1d:1f:ea:68:a6:
e9:e3:b0:ae:d4:08:e7:54:70:ee:94:78:e1:68:85:
62:c6:dc:e1:be:3c:13:64:da:42:b0:e4:c5:e9:da:
c2:c1:33:36:c2:68:3f:7a:65:65:6e:5d:22:7c:32:
66:0e:31:c3:4c:e6:35:24:cd:4d:91:07:35:b0:50:
f6:fa:b7:83:b8:b9:47:d9:08:6c:40:64:fd:23:89:
be:19:82:1e:e0:19:ca:0b:97:69:30:62:21:b0:bb:
d4:cb:b2:fe:11:49:69:17:66:54:93:42:30:37:2d:
fc:4b:1d:2f:5d:c2:86:a6:19:6d:b2:cb:15:88:64:
6b:a8:af:d6:1f:c6:d3:95:23:89:e5:71:19:59:cd:
3c:44:be:30:a2:4e:e3:65:1c:3e:63:62:3d:f5:76:
ef:46:d9:0f:02:ea:57:73:6e:9b:64:75:92:2d:24:
f6:95:40:94:30:db:75:45:e6:9e:6b:30:7e:0a:b4:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:BA:82:EF:79:D8:B6:50:57:D9:3F:98:C4:A9:2A:F2:FF:A5:8F:D3
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/g7qC73nYtlBX2T-YxKkq8v-lj9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.232.0/24
14.102.234.0/24
43.242.136.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
77.111.106.0/24
89.106.2.0/24
89.106.28.0/22
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
189.12.48.0/23
189.12.51.0-189.12.52.255
189.12.54.0-189.12.58.255
189.12.63.0/24
189.31.208.0-189.31.212.255
189.31.214.0/24
189.31.218.0/24
189.31.221.0-189.31.222.255
189.73.16.0/22
189.73.22.0-189.73.26.255
189.73.29.0/24
189.75.176.0-189.75.178.255
189.75.180.0-189.75.186.255
191.44.16.0/24
191.44.18.0-191.44.30.255
191.217.160.0/20
191.219.16.0-191.219.29.255
191.219.31.0/24
191.222.32.0-191.222.40.255
191.222.42.0-191.222.47.255
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.88.0/21
200.102.176.0/20
200.165.16.0/23
200.165.19.0-200.165.31.255
200.181.80.0/20
201.11.224.0/20
201.14.209.0/24
201.14.211.0-201.14.212.255
201.14.214.0-201.14.220.255
201.14.222.0/24
201.24.193.0-201.24.198.255
201.24.200.0/22
201.24.205.0-201.24.206.255
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
63:2e:84:fc:0c:3f:14:57:f9:64:b3:c3:d6:c9:1b:6e:9a:44:
3d:87:5f:bc:a7:88:53:00:38:ca:00:dd:91:d0:d7:ab:9c:ae:
e6:0d:d0:91:7c:0c:10:1d:f6:8b:78:c0:17:ab:90:35:62:e1:
9f:be:bd:df:6b:2f:35:72:eb:eb:14:31:9c:dc:3b:32:55:9a:
cd:56:2a:b7:8d:c9:9d:10:7a:99:c7:5e:54:a2:b7:0e:74:7e:
04:31:b8:9c:81:0c:48:65:6f:f7:cd:10:44:fc:f1:3e:f3:a1:
93:41:0d:7f:bd:6b:a1:77:79:46:62:df:40:e9:4b:15:55:44:
8b:9c:d8:1e:39:27:7d:40:7b:d0:9e:02:c1:c0:96:bc:51:d3:
f6:d4:cf:a0:68:af:6b:bd:88:b3:bb:12:a4:84:a1:9d:24:b0:
24:25:93:62:22:c6:86:85:07:a8:5d:53:63:d7:fb:5f:a9:65:
17:1b:e0:13:ad:5e:a2:01:3b:9b:15:4c:e1:19:76:04:49:6b:
4a:75:e6:c6:6a:06:d5:b0:a9:bd:a1:b1:99:34:01:e2:e7:70:
77:63:4c:8e:7e:bc:90:f7:b9:11:70:57:c0:e0:93:a3:87:df:
6d:07:d9:4c:6e:3b:a7:8a:33:d1:81:96:26:1a:b6:1e:c9:f3:
67:97:2d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:32 2026 by rpki-client