Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rxNQW8ynECGP9KFVAMlMTauzm58.roa
File: rxNQW8ynECGP9KFVAMlMTauzm58.roa (raw, json)
Hash identifier: U/aOQWslG40daynzMVK1Dxs+U4vi/v2CUumvRn41fdM=
Subject key identifier: AF:13:50:5B:CC:A7:10:21:8F:F4:A1:55:00:C9:4C:4D:AB:B3:9B:9F
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A1A250731313246ED5C0CC8EB4E322E27A
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rxNQW8ynECGP9KFVAMlMTauzm58.roa
Signing time: Tue 03 Nov 2026 16:49:03 +0000
ROA not before: Tue 03 Nov 2026 16:49:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 89.106.18.0/24 maxlen: 24
89.106.21.0/24 maxlen: 24
94.229.208.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.20.0/24 maxlen: 24
189.73.21.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
191.219.16.0/22 maxlen: 24
191.219.20.0/23 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.244.0/23 maxlen: 24
191.222.246.0/24 maxlen: 24
191.222.251.0/24 maxlen: 24
191.222.252.0/23 maxlen: 24
191.222.254.0/24 maxlen: 24
200.102.81.0/24 maxlen: 24
200.102.82.0/23 maxlen: 24
200.102.84.0/22 maxlen: 24
200.181.88.0/22 maxlen: 24
200.181.94.0/23 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a2:50:73:13:13:24:6e:d5:c0:cc:8e:b4:e3:22:e2:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Nov 3 16:49:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af13505bcca710218ff4a15500c94c4dabb39b9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:f4:4c:63:a8:f2:a3:06:2d:a4:76:d5:4c:6e:
ef:8d:82:2a:ff:f7:d6:8e:7a:d8:6b:03:b9:39:e9:
af:65:ea:2d:e8:84:2b:d2:b6:af:30:5c:51:05:67:
d3:83:32:33:b7:8f:a0:b7:d1:90:de:26:4c:cf:08:
89:89:8b:05:31:b8:51:94:9d:25:6d:fc:43:d7:90:
5a:1c:a6:88:72:09:56:39:ec:6e:51:d4:2f:93:1f:
93:ea:95:48:a9:7d:fe:c8:c9:8f:90:9a:ef:2f:30:
e4:49:7e:84:39:fb:27:9c:99:b6:bb:01:90:60:f1:
f6:ce:74:69:9f:27:38:b5:d7:f2:89:d2:0e:5e:31:
f3:8f:69:9a:88:9f:9a:2d:f7:57:cb:f5:73:43:56:
ac:ae:e2:8e:75:47:d3:44:54:74:bb:0f:0f:fd:f9:
98:9b:40:f5:43:a6:04:1e:0f:3b:c7:01:a6:dc:cc:
33:92:1d:0e:36:ed:d8:ce:96:ca:4a:8e:ba:f0:fc:
81:f5:24:2a:a6:ac:2b:79:15:cb:1c:23:43:7f:56:
1a:40:5d:ef:b8:dd:0d:40:12:73:75:c0:fe:cc:1e:
bf:77:ab:89:56:70:c8:64:2a:1d:73:07:a5:5f:78:
9d:60:e1:73:48:26:26:a0:cb:d1:84:aa:44:2d:bb:
c8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:13:50:5B:CC:A7:10:21:8F:F4:A1:55:00:C9:4C:4D:AB:B3:9B:9F
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/rxNQW8ynECGP9KFVAMlMTauzm58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.18.0/24
89.106.21.0/24
94.229.208.0/24
189.73.16.0/21
189.75.176.0/24
189.75.179.0-189.75.181.255
189.75.183.0/24
191.219.16.0-191.219.22.255
191.219.31.0/24
191.222.244.0-191.222.246.255
191.222.251.0-191.222.254.255
200.102.81.0-200.102.87.255
200.181.88.0/22
200.181.94.0/23
201.11.227.0-201.11.231.255
Signature Algorithm: sha256WithRSAEncryption
45:92:5a:83:7e:82:2e:66:88:67:4d:55:3c:b5:72:de:99:c7:
7a:aa:44:f7:8e:ae:7f:09:72:2d:83:25:f9:3f:05:74:5d:ef:
94:81:36:50:c9:36:4f:16:8d:35:16:6a:bb:22:cb:c0:f0:81:
49:9f:2f:8e:cf:16:5d:58:2e:50:ef:8c:a9:9a:a9:89:7b:94:
a8:6f:4f:79:91:b1:37:b3:e0:95:71:70:e1:83:97:2e:d6:61:
bb:8e:62:50:f6:1d:48:63:cb:0b:2f:5e:1f:4d:27:9a:45:af:
ad:b7:ab:4e:5b:05:d5:35:62:e7:24:a7:d4:3b:e5:6e:34:66:
2d:51:5d:a3:41:0f:b0:31:e3:f7:b0:3b:54:4d:46:5f:4c:df:
59:20:9d:25:08:61:41:61:0b:d5:42:a3:87:07:50:ec:9d:2d:
79:fa:8b:f6:a0:f3:a5:e9:9e:db:61:3f:af:34:7a:23:b0:42:
61:bd:14:0a:c5:d5:c4:d2:53:c4:47:2b:c1:1d:da:e7:d6:cc:
0a:84:3a:53:98:5a:3c:3f:48:9f:52:54:3b:6b:65:c2:7e:9a:
bf:04:69:2e:25:d6:36:a7:61:4e:b2:ec:bf:1b:5a:78:a2:f4:
44:40:cf:67:21:a4:57:82:7e:be:a8:5e:15:59:6d:e9:70:88:
a5:b4:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 16:20:36 2026 by rpki-client