Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kQxnnOy4WzyOCdcWGSQq3BWOrsc.roa
File: kQxnnOy4WzyOCdcWGSQq3BWOrsc.roa (raw, json)
Hash identifier: IMz73r68otge2bY/hP2YcLjJHUZgw+gnP+RdFPxUTBc=
Subject key identifier: 91:0C:67:9C:EC:B8:5B:3C:8E:09:D7:16:19:24:2A:DC:15:8E:AE:C7
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FBE3A8C069925D2CC27BB6EBA9053385F
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kQxnnOy4WzyOCdcWGSQq3BWOrsc.roa
Signing time: Sat 01 Aug 2026 16:48:55 +0000
ROA not before: Sat 01 Aug 2026 16:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/22 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.54.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.25.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.178.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.173.0/24 maxlen: 24
191.217.174.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
191.219.28.0/24 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.34.0/24 maxlen: 24
191.222.35.0/24 maxlen: 24
191.222.37.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.21.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.25.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.230.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
201.14.209.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.212.0/24 maxlen: 24
201.14.214.0/24 maxlen: 24
201.14.215.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Aug 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:be:3a:8c:06:99:25:d2:cc:27:bb:6e:ba:90:53:38:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Aug 1 16:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=910c679cecb85b3c8e09d71619242adc158eaec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:32:d3:0a:40:f0:e1:2b:b0:19:d1:3d:cf:
5a:c1:30:35:ec:29:48:90:b6:35:9c:00:69:e3:2a:
5a:82:f0:02:d0:9d:41:0a:a1:88:6c:b9:c0:ff:59:
4e:26:65:2d:71:f6:30:fb:c5:f5:b3:f3:c7:19:e4:
94:e1:fe:e7:0e:ac:bb:7a:72:9d:c4:3c:f0:9d:00:
b6:6a:0c:43:14:8b:02:00:b8:90:3f:46:a1:af:77:
65:10:fd:8e:b7:93:5b:6a:3f:2d:88:f4:80:2c:85:
eb:1a:bf:02:66:42:74:25:7e:07:35:8c:28:b6:f2:
ed:6f:bc:b1:d5:41:26:e9:3a:74:f9:88:ba:e1:c0:
23:f0:a7:4a:90:1d:00:f2:be:f7:13:c4:73:e7:df:
b7:b3:f7:d4:ad:01:86:3d:61:aa:f7:30:82:73:1c:
83:c8:d5:3a:94:70:85:06:41:ed:4f:eb:ae:84:54:
16:68:98:35:5e:87:0d:ce:ce:25:05:0e:f9:78:cc:
44:d8:b4:40:27:72:f9:22:74:9e:34:04:17:96:f1:
34:6e:47:c2:c3:a1:8a:59:9f:ef:c0:40:96:9b:c9:
d7:44:e7:92:39:72:d6:46:c1:fd:d9:89:ff:72:25:
20:13:cf:0a:02:57:a0:d5:df:16:3d:2f:1c:22:10:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:0C:67:9C:EC:B8:5B:3C:8E:09:D7:16:19:24:2A:DC:15:8E:AE:C7
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kQxnnOy4WzyOCdcWGSQq3BWOrsc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
43.242.136.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
77.111.105.0-77.111.106.255
89.106.2.0/24
89.106.28.0/22
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
189.12.48.0/23
189.12.51.0-189.12.52.255
189.12.54.0/24
189.12.56.0-189.12.58.255
189.12.63.0/24
189.31.208.0/23
189.31.212.0/24
189.31.214.0/24
189.31.218.0/24
189.31.221.0-189.31.222.255
189.73.16.0/22
189.73.22.0-189.73.25.255
189.73.29.0/24
189.75.176.0/24
189.75.178.0/24
189.75.180.0-189.75.184.255
189.75.186.0/24
191.44.16.0/24
191.44.18.0/23
191.44.25.0-191.44.26.255
191.217.160.0/20
191.219.16.0-191.219.25.255
191.219.27.0-191.219.28.255
191.219.31.0/24
191.222.32.0/24
191.222.34.0/23
191.222.37.0-191.222.38.255
191.222.40.0/24
191.222.42.0-191.222.45.255
191.222.47.0/24
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.88.0/24
200.102.90.0-200.102.92.255
200.102.94.0/24
200.102.176.0/24
200.102.179.0-200.102.185.255
200.102.189.0-200.102.190.255
200.165.16.0/23
200.165.21.0/24
200.165.24.0/23
200.165.27.0-200.165.31.255
200.181.81.0/24
200.181.85.0/24
200.181.87.0-200.181.90.255
200.181.94.0/23
201.11.224.0/24
201.11.227.0/24
201.11.229.0-201.11.230.255
201.11.232.0/22
201.11.238.0/24
201.14.209.0/24
201.14.211.0-201.14.212.255
201.14.214.0-201.14.220.255
201.24.193.0-201.24.197.255
201.24.202.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:72:12:c7:0f:48:fa:a1:16:92:5a:76:46:b1:c5:c8:e5:24:
6d:23:f5:cd:ad:ef:74:59:36:1c:b7:63:4a:48:89:67:ce:36:
69:0c:a7:f7:17:55:63:72:19:25:2d:63:5a:16:08:3d:8f:c5:
d9:b9:3e:39:19:c5:d5:14:ee:e3:a4:a1:bf:10:be:e9:1b:8a:
94:83:cd:71:38:d6:95:23:e9:24:88:b2:38:91:3c:3a:df:d8:
44:fc:a0:26:d2:ee:5b:9d:36:6c:ba:e4:66:ad:9a:d7:e3:bb:
54:a8:d1:e6:cf:2a:ac:43:36:06:e6:22:07:43:bf:e0:7a:44:
b2:dd:f7:5b:33:a6:78:c2:37:64:2b:bf:53:39:9e:63:b8:5a:
48:45:60:7a:19:63:8b:6b:df:3a:3f:6e:12:54:a6:c0:42:8c:
07:af:cb:cf:d5:ef:51:35:c0:a5:57:57:cf:fa:3d:9f:fe:de:
21:32:6f:45:b8:4e:99:96:7e:66:9c:c7:c1:d7:de:a7:af:71:
60:9b:7a:8b:77:6b:70:c6:5a:1a:6b:ba:2d:6e:9b:22:b8:71:
45:1b:08:d0:59:5a:8f:50:88:89:4f:f9:28:6d:37:e9:95:0b:
b2:cf:09:b9:12:3e:f6:82:c2:8f:08:db:c7:b4:55:01:51:a3:
33:78:88:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 21:49:22 2026 by rpki-client