Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sTmDwFtEA3YoYnk_Qw2unZ-qpas.roa
File: sTmDwFtEA3YoYnk_Qw2unZ-qpas.roa (raw, json)
Hash identifier: FzEQf6anygzfbXRAczKC4cs1ML8D1lNWD/8+bpEiCFg=
Subject key identifier: B1:39:83:C0:5B:44:03:76:28:62:79:3F:43:0D:AE:9D:9F:AA:A5:AB
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019FA4A17D3B96C625E56F219CC507D0BDD0
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sTmDwFtEA3YoYnk_Qw2unZ-qpas.roa
Signing time: Mon 27 Jul 2026 17:31:14 +0000
ROA not before: Mon 27 Jul 2026 17:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/22 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.31.0/24 maxlen: 24
191.222.34.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.21.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.25.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.230.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.11.238.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.214.0/24 maxlen: 24
201.14.215.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a4:a1:7d:3b:96:c6:25:e5:6f:21:9c:c5:07:d0:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 27 17:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b13983c05b4403762862793f430dae9d9faaa5ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f5:34:1c:91:d0:2b:76:a1:f5:07:96:0a:1b:
e6:9d:68:1f:9a:89:44:2e:70:01:d6:cb:18:df:cd:
52:fa:d7:d5:72:0c:0f:cd:cd:16:c7:1e:3a:09:c2:
82:ba:7f:11:5c:f3:c4:a0:8a:61:05:fd:08:36:36:
3e:61:d9:e1:8d:7e:24:d7:77:e4:62:02:0b:93:cb:
d5:f3:62:38:ef:4f:64:0e:87:81:07:8c:eb:c1:d0:
02:c1:98:4f:05:6b:21:9f:4a:bb:d2:3f:03:2e:cd:
de:6d:1a:3f:00:bc:c2:52:6d:3b:c0:3b:bf:7f:45:
bd:36:06:fd:cf:86:b2:eb:11:c7:87:48:ed:4e:76:
28:97:9d:c6:08:0d:96:d0:c9:cd:24:ac:c6:30:eb:
cd:e3:c1:39:66:74:96:fe:9d:8f:69:7c:96:9c:aa:
49:b6:e9:c2:0c:d9:3f:46:76:18:d9:c4:30:b3:1b:
49:ea:28:42:42:5e:50:1d:94:86:0e:89:d1:ee:46:
75:85:8c:f1:f9:bf:2d:e6:78:c8:53:44:ab:0b:43:
0b:6b:01:9e:93:96:18:7b:68:4d:a2:5a:7e:02:25:
e9:0b:82:9a:ce:70:90:09:3d:d0:b3:1c:4d:a1:27:
24:e2:5d:7e:58:d9:5f:29:a7:2c:cb:b8:77:2d:b1:
ed:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:39:83:C0:5B:44:03:76:28:62:79:3F:43:0D:AE:9D:9F:AA:A5:AB
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/sTmDwFtEA3YoYnk_Qw2unZ-qpas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
43.242.136.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
77.111.105.0-77.111.106.255
89.106.2.0/24
89.106.28.0/22
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.102.133.0/24
189.12.48.0/23
189.12.51.0-189.12.52.255
189.12.56.0/23
189.12.63.0/24
189.31.208.0/23
189.31.212.0/24
189.31.221.0-189.31.222.255
189.73.16.0/22
189.73.22.0-189.73.24.255
189.75.176.0/24
189.75.180.0-189.75.184.255
189.75.186.0/24
191.44.16.0/24
191.44.18.0/23
191.44.25.0/24
191.217.160.0/24
191.217.168.0/22
191.217.175.0/24
191.219.16.0-191.219.21.255
191.219.23.0/24
191.219.31.0/24
191.222.34.0/24
191.222.42.0/23
191.222.240.0-191.222.242.255
191.222.244.0/23
194.36.33.0/24
200.102.91.0-200.102.92.255
200.102.94.0/24
200.102.179.0-200.102.184.255
200.102.190.0/24
200.165.16.0/23
200.165.21.0/24
200.165.24.0/23
200.165.28.0/22
200.181.81.0/24
200.181.87.0-200.181.90.255
200.181.95.0/24
201.11.224.0/24
201.11.229.0-201.11.230.255
201.11.232.0/22
201.11.238.0/24
201.14.211.0/24
201.14.214.0-201.14.220.255
201.24.193.0-201.24.197.255
201.24.202.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:eb:b9:5f:d8:cc:61:4d:ad:7a:f3:1e:9b:09:b3:54:85:1f:
4b:e9:cf:47:e3:27:86:50:3d:a2:f3:d3:fb:cb:47:94:d9:56:
af:bf:29:db:4e:a5:7b:33:79:cd:a9:fa:e8:a4:7e:60:db:b4:
ca:76:1c:8b:8a:9e:f0:d7:43:57:b3:e8:76:b2:f7:42:9a:84:
a5:21:ed:03:0d:76:38:83:46:c2:6b:cb:80:8a:6f:21:02:6b:
4e:79:45:ba:39:ab:df:e6:b6:18:bf:a2:9f:c4:a7:aa:cc:36:
f1:fb:48:f8:b1:98:9b:9b:e0:1f:e9:f9:d7:cf:c9:8b:0a:b7:
4d:8d:3b:b3:f6:26:18:55:58:81:ae:0f:6f:6a:11:a1:1f:3a:
46:f2:59:53:82:59:43:54:93:0f:46:4e:72:9d:bb:a0:68:1f:
63:94:0a:16:46:2b:f6:ec:3f:ae:c0:be:d3:07:cf:ba:6a:b2:
d0:da:39:e9:4b:b2:6f:eb:a0:63:18:2c:3a:ae:79:bb:29:d6:
06:04:1d:97:77:65:0b:5c:ef:51:24:8b:28:9d:c1:cc:83:8d:
40:a0:8a:4b:6a:98:cf:74:ed:4d:d3:bc:7d:f9:33:9d:ae:0b:
9a:ca:41:65:cc:52:40:09:04:6b:ca:5f:8f:66:89:79:c1:1d:
ac:b2:03:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:58:41 2026 by rpki-client