Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nS-igu4lpcfd6zjmA6qa0rTi6Tc.roa
File: nS-igu4lpcfd6zjmA6qa0rTi6Tc.roa (raw, json)
Hash identifier: 4P0QBmq0TfnKIppaqVBRu5NV3bUD5k1W5jGh3mZD70k=
Subject key identifier: 9D:2F:A2:82:EE:25:A5:C7:DD:EB:38:E6:03:AA:9A:D2:B4:E2:E9:37
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0919EF21F9FAE609E42E64F7893C51F56
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nS-igu4lpcfd6zjmA6qa0rTi6Tc.roa
Signing time: Fri 11 Sep 2026 17:58:28 +0000
ROA not before: Fri 11 Sep 2026 17:58:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21859
IP address blocks: 14.102.227.0/24 maxlen: 24
43.242.137.0/24 maxlen: 24
45.151.141.0/24 maxlen: 24
77.111.108.0/24 maxlen: 24
89.106.23.0/24 maxlen: 24
94.229.215.0/24 maxlen: 24
103.102.134.0/24 maxlen: 24
124.158.115.0/24 maxlen: 24
194.36.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:9e:f2:1f:9f:ae:60:9e:42:e6:4f:78:93:c5:1f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 11 17:58:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9d2fa282ee25a5c7ddeb38e603aa9ad2b4e2e937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c0:00:c8:33:5f:39:f3:39:11:d3:f0:de:28:
bd:9c:48:5b:2c:39:2a:1a:5c:4d:60:64:ef:49:21:
f9:b4:c1:24:1a:d2:29:0a:01:7a:82:a0:67:fe:4d:
b4:9b:9a:02:02:a4:33:d3:19:bf:11:38:b5:15:ab:
eb:ea:79:1f:0a:d6:58:18:bc:ae:12:9a:d0:62:1c:
73:4d:98:1a:f5:c6:da:e6:6c:26:a8:52:7f:ea:1a:
cb:e6:38:c9:6a:9e:bd:b5:10:03:2e:32:ae:6d:86:
28:e5:85:00:22:f3:6d:e7:8d:bc:01:7e:81:a6:ba:
9c:6d:98:f2:a8:fc:b3:8c:f9:69:e5:8b:3e:b9:37:
72:75:54:32:9e:78:c8:63:0b:ae:c6:4c:ad:8a:04:
51:a2:2c:8f:1c:60:6a:44:d2:2e:32:a4:5e:71:11:
03:e4:cc:47:f5:54:db:6d:c8:9b:82:79:2b:a4:d5:
04:cb:ed:b6:68:f5:63:cd:ff:1a:4d:c3:b4:1e:bd:
dc:e3:03:47:e4:70:01:b7:14:76:e7:b8:9d:4b:35:
35:af:a5:a5:08:85:45:80:62:d9:e7:fd:aa:40:1f:
f4:17:ce:42:8d:e8:23:e6:ba:2f:bb:b5:35:8d:a5:
cc:dc:82:82:8f:e5:37:f9:0c:4f:cf:e7:8c:76:a6:
71:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:2F:A2:82:EE:25:A5:C7:DD:EB:38:E6:03:AA:9A:D2:B4:E2:E9:37
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/nS-igu4lpcfd6zjmA6qa0rTi6Tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.227.0/24
43.242.137.0/24
45.151.141.0/24
77.111.108.0/24
89.106.23.0/24
94.229.215.0/24
103.102.134.0/24
124.158.115.0/24
194.36.35.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:64:87:e9:ea:a3:88:c4:0b:bb:f3:80:41:38:38:c0:94:7d:
c7:c7:0b:5e:94:63:65:b6:1e:1c:09:42:a1:9a:73:0a:75:01:
69:98:1b:39:99:fe:1c:80:74:32:75:61:70:c9:65:15:14:22:
a8:30:3b:ee:08:78:06:2a:9c:5c:96:dc:a9:8b:dc:b3:1f:79:
50:b6:e9:9c:5c:bb:70:b6:e9:1e:94:0b:a1:42:d7:06:ec:ca:
54:1d:35:4f:60:d4:8b:91:c6:fa:9a:3d:a1:36:45:45:29:fe:
26:b8:94:17:46:64:8a:11:40:2a:72:8a:9d:c5:13:49:c8:c3:
1e:81:9c:c2:d3:75:71:86:1c:73:d9:32:54:26:22:e0:82:a2:
c8:db:9e:98:85:12:0e:0e:fc:47:79:46:86:3b:f7:b7:19:01:
8c:e7:b6:a8:74:9f:97:89:98:7a:11:68:ef:2c:5f:c7:fa:6f:
8c:4b:1f:1e:10:bd:c0:e2:9b:df:59:9c:86:57:ea:eb:8e:b5:
f5:8c:35:07:3e:7c:1b:a4:b6:85:52:a1:d7:c9:f9:5b:f2:a1:
ab:3b:c3:03:19:b1:19:f2:26:2a:16:8e:c9:f8:a7:45:c2:eb:
a0:8a:0f:07:c1:7f:d3:07:c1:46:e8:e3:19:b9:64:6c:ae:a8:
4d:df:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:48:09 2026 by rpki-client