Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ii3_Y4mfxOAZmT74H1nGkPHSk5k.roa
File: ii3_Y4mfxOAZmT74H1nGkPHSk5k.roa (raw, json)
Hash identifier: fOKrMrWINWBHiIejWENiKR6NsfUY60aAI3W/yjZDD5A=
Subject key identifier: 8A:2D:FF:63:89:9F:C4:E0:19:99:3E:F8:1F:59:C6:90:F1:D2:93:99
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A03A33CB99FEB09F812F1B00ADA26AD85B
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ii3_Y4mfxOAZmT74H1nGkPHSk5k.roa
Signing time: Tue 25 Aug 2026 18:34:27 +0000
ROA not before: Tue 25 Aug 2026 18:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.106.16.0/24 maxlen: 24
89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
191.219.16.0/22 maxlen: 24
191.219.20.0/23 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/22 maxlen: 24
191.219.28.0/23 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.40.0/21 maxlen: 24
191.222.240.0/22 maxlen: 24
191.222.244.0/23 maxlen: 24
191.222.246.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.11.237.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
201.11.239.0/24 maxlen: 24
201.14.209.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.212.0/24 maxlen: 24
201.14.214.0/24 maxlen: 24
201.14.215.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
201.24.198.0/24 maxlen: 24
201.24.199.0/24 maxlen: 24
201.24.200.0/24 maxlen: 24
201.24.201.0/24 maxlen: 24
201.24.203.0/24 maxlen: 24
201.24.205.0/24 maxlen: 24
201.24.206.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 15:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:33:cb:99:fe:b0:9f:81:2f:1b:00:ad:a2:6a:d8:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 25 18:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8a2dff63899fc4e019993ef81f59c690f1d29399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:29:6f:f0:ae:fc:99:24:c7:eb:dd:ba:42:
5a:ab:9c:c9:71:53:ad:42:9e:06:5a:85:a4:ec:42:
56:6b:40:28:90:50:02:33:3b:70:0e:4c:9c:4b:b8:
5c:e4:b8:84:c9:88:10:9b:c0:c0:06:b5:f9:bb:d1:
2b:92:5a:96:38:91:be:0b:03:3f:de:90:84:b3:4e:
49:43:79:ee:46:00:af:29:df:43:91:ce:3c:44:4b:
0b:70:19:44:0d:d4:f1:ad:e5:70:f9:68:e5:45:68:
e7:2b:eb:54:9d:62:92:68:b6:13:70:b6:65:cb:03:
91:e6:bf:a7:01:b7:66:ab:47:f5:72:29:c1:93:f9:
77:be:ca:65:88:d9:d3:7a:be:1d:49:88:80:39:2a:
a1:bd:9a:8f:e2:e0:53:bc:b4:25:67:f4:dc:8e:68:
e7:a4:14:9c:12:30:d6:c2:eb:a9:13:96:2d:38:b6:
eb:73:c8:2a:cd:00:28:62:18:bc:5c:c4:c1:8c:7c:
81:20:89:94:d8:82:bc:11:3f:86:c7:4d:ae:59:df:
20:48:08:ad:87:58:22:10:6f:93:c2:43:86:84:04:
a2:0c:d7:8b:92:3a:fb:ce:e5:75:c5:d6:f9:d1:57:
e8:e0:e6:05:96:36:5d:53:65:ab:35:1a:69:fe:bc:
06:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2D:FF:63:89:9F:C4:E0:19:99:3E:F8:1F:59:C6:90:F1:D2:93:99
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/ii3_Y4mfxOAZmT74H1nGkPHSk5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.16.0/24
89.106.18.0/24
89.106.21.0/24
94.229.208.0/24
191.219.16.0-191.219.29.255
191.219.31.0/24
191.222.40.0/21
191.222.240.0-191.222.246.255
201.11.235.0/24
201.11.237.0-201.11.239.255
201.14.209.0/24
201.14.211.0-201.14.212.255
201.14.214.0-201.14.219.255
201.24.193.0-201.24.195.255
201.24.197.0-201.24.201.255
201.24.203.0/24
201.24.205.0-201.24.206.255
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:ab:2f:3a:c3:e7:0b:36:41:ba:61:bb:32:97:7b:82:92:50:
34:73:b2:28:21:ce:e6:58:c4:b1:0a:b1:24:4c:1b:7e:79:7d:
ff:b7:ac:f2:4e:8a:94:27:1e:6a:f1:9a:1d:bf:a9:9c:f1:e4:
12:3f:84:f2:5d:88:30:ad:e3:74:0e:bd:9a:2f:f7:67:e8:f9:
14:15:80:f0:ca:8c:c8:7e:73:91:f0:06:b0:da:26:7a:4c:fa:
e0:ea:08:28:00:23:da:81:62:c7:9f:7e:76:39:9f:0f:3e:e6:
cd:ab:79:ef:13:a6:1b:48:ec:e6:b4:22:76:2a:19:7f:9a:89:
80:6f:01:ee:9e:23:ee:b0:aa:cd:5c:98:86:fb:da:a7:ea:67:
ae:3e:0b:71:57:cf:b5:83:52:11:6a:1d:61:fb:73:79:15:b9:
6b:0c:ec:22:f4:e6:a9:88:2d:02:b6:79:7d:06:4d:0f:2b:f4:
a0:ed:27:c0:17:4f:a8:81:76:08:31:be:8f:6c:c7:f4:ce:80:
af:c9:8c:d6:48:6f:89:71:df:15:99:a6:cf:d8:17:d0:7b:b3:
64:b9:2f:e0:f7:13:c2:85:94:f5:a7:c1:0b:82:9a:12:cc:c1:
33:2a:80:fb:28:5b:6e:c8:6b:34:0f:e3:e0:1d:df:d6:5d:c9:
8d:91:c6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 00:48:48 2026 by rpki-client