Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cieB-83Jf1TCw70oa1EczB3ppiE.roa
File: cieB-83Jf1TCw70oa1EczB3ppiE.roa (raw, json)
Hash identifier: SNmYTe7G6AtZLOaC1b2hEgBd2e7gB+WhvhBmTEIUuSU=
Subject key identifier: 72:27:81:FB:CD:C9:7F:54:C2:C3:BD:28:6B:51:1C:CC:1D:E9:A6:21
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F90F26E788C04DCC19369C6286BE2E393
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cieB-83Jf1TCw70oa1EczB3ppiE.roa
Signing time: Thu 23 Jul 2026 21:47:14 +0000
ROA not before: Thu 23 Jul 2026 21:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 62.41.24.0/24 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.105.194.0/24 maxlen: 24
62.105.195.0/24 maxlen: 24
62.132.2.0/24 maxlen: 24
62.132.116.0/24 maxlen: 24
77.67.6.0/24 maxlen: 24
77.67.18.0/24 maxlen: 24
77.67.26.0/24 maxlen: 24
77.67.49.0/24 maxlen: 24
193.141.2.0/24 maxlen: 24
194.45.47.0/24 maxlen: 24
194.77.4.0/24 maxlen: 24
194.77.6.0/24 maxlen: 24
194.77.62.0/24 maxlen: 24
194.77.70.0/24 maxlen: 24
194.77.78.0/24 maxlen: 24
194.77.186.0/24 maxlen: 24
194.77.187.0/24 maxlen: 24
194.77.192.0/24 maxlen: 24
194.120.121.0/24 maxlen: 24
194.122.78.0/24 maxlen: 24
194.122.80.0/24 maxlen: 24
194.122.83.0/24 maxlen: 24
194.122.84.0/24 maxlen: 24
194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.129.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.214.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
195.21.144.0/24 maxlen: 24
195.21.146.0/24 maxlen: 24
212.189.8.0/24 maxlen: 24
212.189.18.0/24 maxlen: 24
212.189.23.0/24 maxlen: 24
212.189.26.0/24 maxlen: 24
212.189.31.0/24 maxlen: 24
212.189.36.0/24 maxlen: 24
212.189.39.0/24 maxlen: 24
212.189.54.0/24 maxlen: 24
212.189.57.0/24 maxlen: 24
212.189.58.0/24 maxlen: 24
212.189.61.0/24 maxlen: 24
212.189.69.0/24 maxlen: 24
212.189.75.0/24 maxlen: 24
212.189.79.0/24 maxlen: 24
212.189.80.0/24 maxlen: 24
212.189.85.0/24 maxlen: 24
212.189.88.0/24 maxlen: 24
212.189.89.0/24 maxlen: 24
212.189.90.0/24 maxlen: 24
212.189.95.0/24 maxlen: 24
212.189.96.0/24 maxlen: 24
212.189.97.0/24 maxlen: 24
212.189.98.0/24 maxlen: 24
212.189.103.0/24 maxlen: 24
212.189.104.0/24 maxlen: 24
212.189.110.0/24 maxlen: 24
212.189.115.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.189.121.0/24 maxlen: 24
212.221.26.0/24 maxlen: 24
212.222.168.0/24 maxlen: 24
212.222.170.0/24 maxlen: 24
212.222.171.0/24 maxlen: 24
217.117.162.0/24 maxlen: 24
217.117.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:f2:6e:78:8c:04:dc:c1:93:69:c6:28:6b:e2:e3:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 23 21:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=722781fbcdc97f54c2c3bd286b511ccc1de9a621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b2:dc:48:d0:dd:ed:c9:61:64:2a:3e:86:ca:
1e:3e:77:a5:e7:e6:49:25:80:ca:03:a3:42:51:4d:
a1:ad:b0:24:86:7e:c0:a4:8d:55:88:9e:57:ed:4d:
68:f9:df:83:95:82:3a:a3:25:51:2b:36:32:2b:0d:
9b:57:0c:56:0d:49:a0:5a:1c:55:e5:b1:31:5c:7c:
11:50:00:71:d2:40:14:0f:d0:d0:d2:d6:3a:90:51:
29:2c:c8:5d:f3:9e:46:af:66:db:91:9a:b1:30:91:
39:f6:a2:88:67:b4:c5:ea:12:c0:99:55:1e:06:fa:
81:28:3e:dd:8d:40:90:f5:5d:8f:ae:98:f9:3e:a2:
b0:88:97:72:b7:9f:82:13:20:5e:4b:f6:c3:7e:75:
33:51:1b:41:ee:e9:08:6b:94:7f:65:7f:a8:1d:e2:
eb:e0:d1:4d:fc:a9:c8:dc:56:e8:2d:b8:34:fe:40:
29:ea:4c:c9:2f:fd:1b:c4:6c:8b:f1:54:86:09:60:
fa:ef:8f:e1:04:02:52:9a:82:09:1a:ad:d7:31:55:
f6:f3:bf:d7:8c:32:26:9f:13:c5:d1:14:c7:31:7c:
11:a8:91:83:81:b7:39:e6:19:05:a7:be:b6:6f:e8:
42:df:9a:ec:d6:9c:4a:20:05:82:2c:f7:05:e2:52:
0c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:27:81:FB:CD:C9:7F:54:C2:C3:BD:28:6B:51:1C:CC:1D:E9:A6:21
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/cieB-83Jf1TCw70oa1EczB3ppiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.41.24.0/24
62.41.32.0/24
62.41.37.0/24
62.105.194.0/23
62.132.2.0/24
62.132.116.0/24
77.67.6.0/24
77.67.18.0/24
77.67.26.0/24
77.67.49.0/24
193.141.2.0/24
194.45.47.0/24
194.77.4.0/24
194.77.6.0/24
194.77.62.0/24
194.77.70.0/24
194.77.78.0/24
194.77.186.0/23
194.77.192.0/24
194.120.121.0/24
194.122.78.0/24
194.122.80.0/24
194.122.83.0-194.122.84.255
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
195.21.144.0/24
195.21.146.0/24
212.189.8.0/24
212.189.18.0/24
212.189.23.0/24
212.189.26.0/24
212.189.31.0/24
212.189.36.0/24
212.189.39.0/24
212.189.54.0/24
212.189.57.0-212.189.58.255
212.189.61.0/24
212.189.69.0/24
212.189.75.0/24
212.189.79.0-212.189.80.255
212.189.85.0/24
212.189.88.0-212.189.90.255
212.189.95.0-212.189.98.255
212.189.103.0-212.189.104.255
212.189.110.0/24
212.189.115.0-212.189.116.255
212.189.121.0/24
212.221.26.0/24
212.222.168.0/24
212.222.170.0/23
217.117.162.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:59:52:7a:a8:fe:3a:dc:7e:1c:50:9d:f5:d7:84:73:c8:b1:
b1:9c:ca:5b:9e:63:07:fa:9c:45:7c:27:ec:7f:91:5e:5f:66:
04:e9:5c:be:83:be:cb:98:96:5b:24:4a:c3:e6:04:47:e3:46:
ab:da:c1:ea:96:f5:bf:16:72:97:b3:c2:f3:fd:84:65:ae:60:
e4:16:93:c8:50:9e:f3:89:6f:49:79:5c:53:30:39:fa:18:62:
a4:a4:5e:30:ab:27:2c:a3:51:6d:1f:f8:47:f5:6f:1e:c0:5f:
2e:cc:0a:bd:71:da:cf:69:dc:b5:db:12:97:87:ee:ed:62:e5:
8a:7f:98:10:d3:62:c1:20:7a:eb:6e:60:bb:aa:6b:9e:e5:f3:
71:d7:6f:21:9e:57:ad:06:20:49:b3:a1:93:c6:90:15:7d:b3:
5a:c7:69:66:7d:f3:4e:bf:6a:58:17:72:7b:a7:16:6d:2f:ab:
32:06:5d:30:49:39:0a:3f:c1:e1:80:98:92:d5:6d:43:ff:c2:
4d:ab:63:bf:ab:20:0d:56:b4:9d:3a:92:3c:d3:12:e4:32:ca:
93:af:7a:94:7f:75:a4:3d:08:0e:3c:71:7c:9d:da:49:5d:57:
cb:e1:64:1e:9b:f8:68:20:54:c4:dd:26:fb:0a:8b:3e:48:02:
c0:f8:ce:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:51 2026 by rpki-client