Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jrYCBFXU4l3dqlPWoASCWlgw06Y.roa
File: jrYCBFXU4l3dqlPWoASCWlgw06Y.roa (raw, json)
Hash identifier: 7CgQe0tPZ2nuqsV3XFnYkX+qeD5AtBr6TkTH1PGY6pU=
Subject key identifier: 8E:B6:02:04:55:D4:E2:5D:DD:AA:53:D6:A0:04:82:5A:58:30:D3:A6
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0BB31A42965916EA01A92AEE49BF4BE9D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jrYCBFXU4l3dqlPWoASCWlgw06Y.roa
Signing time: Sat 19 Sep 2026 19:43:07 +0000
ROA not before: Sat 19 Sep 2026 19:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.101.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.60.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.215.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.217.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.219.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.20.0/23 maxlen: 23
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.73.28.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.73.31.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.21.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.80.0/21 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.93.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.18.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bb:31:a4:29:65:91:6e:a0:1a:92:ae:e4:9b:f4:be:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 19 19:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8eb6020455d4e25dddaa53d6a004825a5830d3a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:63:7d:e6:3c:d8:33:9f:9a:22:1e:1b:27:
e8:0e:4f:c4:9d:f5:53:0c:e7:10:48:1f:d8:c8:6a:
3c:62:80:16:39:e2:0c:a3:f8:fe:04:3f:55:cc:80:
d3:c9:e5:47:ab:3d:37:8a:00:ad:9c:bd:9d:fd:84:
5b:54:2b:a6:c3:17:33:1e:95:14:4d:64:4c:02:77:
4e:21:3b:87:5b:bb:bd:bf:ac:d9:9d:c7:84:8e:65:
7f:bf:c7:ea:52:15:7a:90:91:e7:5f:97:dd:41:13:
07:c0:b2:04:40:f6:5b:a8:7d:87:91:2e:e8:68:d3:
b1:d6:bc:f4:19:0a:fd:7a:74:3d:02:33:a6:35:de:
dd:ea:93:5e:a1:24:36:34:4f:70:96:83:49:d2:30:
00:46:90:b7:55:05:d7:38:6a:e7:7c:df:39:ac:7f:
a0:d7:44:8f:67:d4:ea:15:f2:11:1b:3e:36:0e:6d:
58:4b:b9:6e:50:90:6e:56:f9:96:40:94:9f:92:e4:
ce:cf:1e:c4:0f:5e:e7:06:b5:98:11:2b:9f:d1:ac:
06:a4:64:ee:74:30:d2:aa:9b:c3:7c:44:cd:43:97:
b2:d0:f6:82:b4:89:04:31:3e:97:cf:1d:0f:98:17:
48:18:27:f9:93:d9:0a:c6:67:49:3f:4a:47:7f:ca:
88:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B6:02:04:55:D4:E2:5D:DD:AA:53:D6:A0:04:82:5A:58:30:D3:A6
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/jrYCBFXU4l3dqlPWoASCWlgw06Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
89.106.2.0/24
89.106.28.0/23
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.102.133.0/24
124.158.101.0/24
189.12.49.0/24
189.12.51.0/24
189.12.53.0/24
189.12.55.0-189.12.58.255
189.12.60.0/22
189.31.208.0-189.31.210.255
189.31.212.0/24
189.31.214.0-189.31.222.255
189.73.16.0-189.73.24.255
189.73.27.0-189.73.31.255
189.75.176.0/24
189.75.179.0-189.75.181.255
189.75.183.0-189.75.186.255
189.75.188.0/22
191.44.16.0-191.44.30.255
191.217.160.0-191.217.172.255
191.217.175.0/24
191.219.16.0-191.219.24.255
191.222.32.0/23
191.222.36.0/24
191.222.38.0-191.222.40.255
191.222.42.0-191.222.47.255
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.80.0/20
200.102.176.0-200.102.185.255
200.102.188.0/22
200.165.16.0-200.165.18.255
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.80.0-200.181.91.255
200.181.94.0/23
201.11.227.0-201.11.229.255
201.11.231.0-201.11.234.255
201.11.236.0/24
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0-201.14.222.255
201.24.192.0/24
201.24.196.0/24
Signature Algorithm: sha256WithRSAEncryption
85:b5:6b:85:04:5a:7d:d8:04:65:10:a9:41:06:db:50:98:28:
5b:51:be:fc:4e:2d:50:e6:bb:81:0f:0d:ce:16:91:e1:55:84:
04:ea:2d:de:9c:09:33:82:27:83:01:62:ca:a6:81:c3:29:b4:
af:1a:52:da:46:ff:be:7f:df:28:54:b3:1c:0b:c0:85:e5:2a:
56:5e:37:0d:5c:77:f5:b8:36:36:5f:7c:e2:3b:3f:08:9d:6d:
e2:cc:35:84:fd:3e:66:db:cf:02:a6:e6:58:91:ba:37:f9:74:
47:df:3c:8e:3c:a3:24:b1:19:19:09:63:ea:7c:a2:0e:db:19:
19:15:7a:61:3f:ec:4a:41:96:36:91:88:25:c0:5c:4f:1d:cb:
86:24:b6:db:53:29:06:a2:e9:72:5f:17:64:18:ac:3b:cd:98:
73:d2:3f:38:51:0c:19:4f:cd:8d:fa:af:2c:86:30:7f:6b:16:
5b:2f:d0:14:04:42:09:04:83:e9:8b:66:a6:63:06:73:00:b1:
ea:16:47:ac:58:61:6d:3c:b8:1b:15:9a:24:42:91:8a:c5:1a:
ee:f9:2d:15:19:7d:31:2e:e6:4e:a7:ac:e7:2e:f2:42:0b:50:
fd:24:9e:1a:3d:70:1a:47:62:65:3c:27:af:cd:37:f4:d7:7a:
1c:2e:0e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:25 2026 by rpki-client