Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/3ECfTnF2jy4Lx0SgykcvPdioIUc.roa
File: 3ECfTnF2jy4Lx0SgykcvPdioIUc.roa (raw, json)
Hash identifier: WGeuGHVpKmhXgxHYaicCadOFtfsO1M/9XAEIzpGhdMs=
Subject key identifier: DC:40:9F:4E:71:76:8F:2E:0B:C7:44:A0:CA:47:2F:3D:D8:A8:21:47
Certificate issuer: /CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Certificate serial: 019F1D69D933E18497CE45F59A3829A79898
Authority key identifier: E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/3ECfTnF2jy4Lx0SgykcvPdioIUc.roa
Signing time: Wed 01 Jul 2026 11:21:43 +0000
ROA not before: Wed 01 Jul 2026 11:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8400
IP address blocks: 5.134.104.0/21 maxlen: 21
5.154.225.0/24 maxlen: 24
31.14.33.0/24 maxlen: 24
37.153.174.0/24 maxlen: 24
37.153.175.0/24 maxlen: 24
46.17.120.0/21 maxlen: 21
46.235.96.0/21 maxlen: 21
62.101.128.0/20 maxlen: 20
62.240.24.0/21 maxlen: 21
77.46.128.0/17 maxlen: 17
79.101.0.0/16 maxlen: 16
79.101.0.0/21 maxlen: 21
79.101.21.0/24 maxlen: 24
87.250.32.0/19 maxlen: 19
89.34.2.0/24 maxlen: 24
89.39.144.0/23 maxlen: 23
89.42.12.0/24 maxlen: 24
89.46.126.0/23 maxlen: 23
89.47.40.0/23 maxlen: 23
91.148.64.0/18 maxlen: 18
91.150.64.0/18 maxlen: 18
91.150.64.0/23 maxlen: 23
91.150.66.0/24 maxlen: 24
91.150.91.0/24 maxlen: 24
92.60.224.0/24 maxlen: 24
92.60.225.0/24 maxlen: 24
92.60.226.0/24 maxlen: 24
92.60.227.0/24 maxlen: 24
92.60.228.0/24 maxlen: 24
92.60.229.0/24 maxlen: 24
92.60.230.0/24 maxlen: 24
92.60.231.0/24 maxlen: 24
92.60.232.0/24 maxlen: 24
92.60.233.0/24 maxlen: 24
92.60.234.0/23 maxlen: 23
92.60.236.0/24 maxlen: 24
92.60.237.0/24 maxlen: 24
92.60.238.0/24 maxlen: 24
92.60.239.0/24 maxlen: 24
92.244.128.0/19 maxlen: 19
93.86.0.0/15 maxlen: 15
93.86.0.0/16 maxlen: 16
93.87.0.0/16 maxlen: 16
93.87.38.0/24 maxlen: 24
93.87.39.0/24 maxlen: 24
93.87.50.0/24 maxlen: 24
93.87.58.0/24 maxlen: 24
93.113.250.0/24 maxlen: 24
93.113.251.0/24 maxlen: 24
94.228.224.0/22 maxlen: 22
94.228.229.0/24 maxlen: 24
94.228.230.0/24 maxlen: 24
94.228.231.0/24 maxlen: 24
94.228.232.0/23 maxlen: 23
94.228.234.0/24 maxlen: 24
94.228.235.0/24 maxlen: 24
94.228.236.0/24 maxlen: 24
94.228.237.0/24 maxlen: 24
94.228.238.0/23 maxlen: 23
109.72.48.0/20 maxlen: 20
109.92.0.0/15 maxlen: 15
109.94.228.0/22 maxlen: 22
109.94.232.0/21 maxlen: 21
109.122.64.0/18 maxlen: 24
109.122.77.0/24 maxlen: 24
109.198.0.0/19 maxlen: 19
176.67.192.0/19 maxlen: 19
176.67.192.0/21 maxlen: 21
176.67.200.0/23 maxlen: 23
176.67.202.0/23 maxlen: 23
176.67.204.0/24 maxlen: 24
176.67.205.0/24 maxlen: 24
176.67.206.0/23 maxlen: 23
176.67.208.0/23 maxlen: 23
176.67.210.0/24 maxlen: 24
176.67.211.0/24 maxlen: 24
176.67.212.0/23 maxlen: 23
176.67.214.0/24 maxlen: 24
176.67.215.0/24 maxlen: 24
176.67.216.0/24 maxlen: 24
176.67.217.0/24 maxlen: 24
176.67.218.0/24 maxlen: 24
176.67.219.0/24 maxlen: 24
176.67.220.0/24 maxlen: 24
176.67.221.0/24 maxlen: 24
176.67.222.0/24 maxlen: 24
176.67.223.0/24 maxlen: 24
178.17.16.0/21 maxlen: 21
178.17.24.0/22 maxlen: 22
178.17.28.0/23 maxlen: 23
178.17.30.0/24 maxlen: 24
178.17.31.0/24 maxlen: 24
178.79.0.0/18 maxlen: 18
178.79.16.0/23 maxlen: 23
178.220.0.0/15 maxlen: 15
178.222.0.0/16 maxlen: 16
178.223.0.0/17 maxlen: 17
178.223.128.0/18 maxlen: 18
178.223.192.0/19 maxlen: 19
178.237.208.0/20 maxlen: 20
178.250.136.0/21 maxlen: 21
185.10.140.0/22 maxlen: 22
185.26.172.0/22 maxlen: 22
185.27.128.0/24 maxlen: 24
185.27.129.0/24 maxlen: 24
185.27.130.0/23 maxlen: 23
185.34.92.0/22 maxlen: 22
185.36.255.0/24 maxlen: 24
185.71.88.0/22 maxlen: 22
185.103.136.0/22 maxlen: 22
185.112.20.0/22 maxlen: 22
185.157.104.0/22 maxlen: 22
185.179.136.0/22 maxlen: 22
185.190.152.0/22 maxlen: 22
188.215.30.0/24 maxlen: 24
188.240.88.0/24 maxlen: 24
188.240.200.0/24 maxlen: 24
188.240.201.0/24 maxlen: 24
194.106.160.0/19 maxlen: 19
195.178.32.0/19 maxlen: 19
195.252.64.0/18 maxlen: 18
195.252.82.0/24 maxlen: 24
195.252.88.0/24 maxlen: 24
195.252.92.0/22 maxlen: 22
212.62.59.0/24 maxlen: 24
212.200.0.0/16 maxlen: 16
212.200.0.0/17 maxlen: 17
212.200.0.0/21 maxlen: 21
212.200.8.0/22 maxlen: 22
212.200.12.0/23 maxlen: 23
212.200.16.0/23 maxlen: 23
212.200.45.0/24 maxlen: 24
212.200.50.0/24 maxlen: 24
212.200.51.0/24 maxlen: 24
212.200.52.0/24 maxlen: 24
212.200.123.0/24 maxlen: 24
212.200.128.0/17 maxlen: 17
212.200.128.0/18 maxlen: 18
212.200.132.0/24 maxlen: 24
212.200.192.0/19 maxlen: 19
212.200.224.0/24 maxlen: 24
212.200.225.0/24 maxlen: 24
212.200.226.0/23 maxlen: 23
212.200.228.0/22 maxlen: 22
212.200.232.0/21 maxlen: 21
212.200.240.0/20 maxlen: 20
213.196.96.0/20 maxlen: 20
2a00:e90::/32 maxlen: 32
2a00:8720::/32 maxlen: 32
2a01:b800::/32 maxlen: 32
2a02:61a0::/32 maxlen: 32
2a03:fc40::/32 maxlen: 32
2a04:1dc0::/29 maxlen: 29
2a06:5b00::/29 maxlen: 29
2a06:63c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:69:d9:33:e1:84:97:ce:45:f5:9a:38:29:a7:98:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9b1320fbc24d6f4366cb64fcf5ed2d7b1b6bdf7
Validity
Not Before: Jul 1 11:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc409f4e71768f2e0bc744a0ca472f3dd8a82147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c1:f4:28:4c:73:f0:19:fb:71:8f:f4:b4:04:
df:36:bf:c0:9f:c1:b7:8b:cf:4b:71:9a:82:de:d6:
2f:25:78:58:a4:52:5e:ff:a9:83:a3:10:39:6b:df:
cb:50:95:d8:93:7e:63:f2:85:44:4d:96:ed:84:26:
47:0b:98:ac:32:6d:68:5c:e3:ca:cf:b7:84:61:1c:
fd:59:c2:70:45:d0:3c:c2:4f:e4:f9:64:86:3b:cb:
44:f3:21:3e:39:1f:c8:89:d6:a6:df:01:09:b1:d1:
4c:ce:d7:cc:5a:55:ce:ee:55:e1:55:fb:b0:37:de:
fa:e2:ab:cc:cc:23:97:95:94:32:9d:04:d5:62:91:
ba:4f:f3:77:73:7b:77:1d:b2:a8:99:0f:b2:eb:d7:
91:83:ce:46:9e:d8:a9:64:e8:a4:a4:16:95:b4:4d:
d0:76:0a:6a:02:6d:ec:2e:cb:46:fd:5e:c9:db:aa:
6c:80:2d:ed:1b:2f:d4:49:ff:af:cd:64:09:ff:1a:
0c:4b:f3:e1:62:f2:bc:c3:a3:f5:a9:e5:bc:05:00:
ba:8d:0d:91:0f:c0:f6:af:ae:b5:db:e9:fa:ae:48:
20:e1:5d:2a:12:1a:81:1e:5c:f7:1e:be:56:42:00:
c6:61:07:aa:b0:a4:29:fd:5e:e1:19:55:d0:22:94:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:40:9F:4E:71:76:8F:2E:0B:C7:44:A0:CA:47:2F:3D:D8:A8:21:47
X509v3 Authority Key Identifier:
keyid:E9:B1:32:0F:BC:24:D6:F4:36:6C:B6:4F:CF:5E:D2:D7:B1:B6:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6bEyD7wk1vQ2bLZPz17S17G2vfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/3ECfTnF2jy4Lx0SgykcvPdioIUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/df1cb5-5f48-46a0-a76e-d3e2800bd640/1/6bEyD7wk1vQ2bLZPz17S17G2vfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.134.104.0/21
5.154.225.0/24
31.14.33.0/24
37.153.174.0/23
46.17.120.0/21
46.235.96.0/21
62.101.128.0/20
62.240.24.0/21
77.46.128.0/17
79.101.0.0/16
87.250.32.0/19
89.34.2.0/24
89.39.144.0/23
89.42.12.0/24
89.46.126.0/23
89.47.40.0/23
91.148.64.0/18
91.150.64.0/18
92.60.224.0/20
92.244.128.0/19
93.86.0.0/15
93.113.250.0/23
94.228.224.0/22
94.228.229.0-94.228.239.255
109.72.48.0/20
109.92.0.0/15
109.94.228.0-109.94.239.255
109.122.64.0/18
109.198.0.0/19
176.67.192.0/19
178.17.16.0/20
178.79.0.0/18
178.220.0.0-178.223.223.255
178.237.208.0/20
178.250.136.0/21
185.10.140.0/22
185.26.172.0/22
185.27.128.0/22
185.34.92.0/22
185.36.255.0/24
185.71.88.0/22
185.103.136.0/22
185.112.20.0/22
185.157.104.0/22
185.179.136.0/22
185.190.152.0/22
188.215.30.0/24
188.240.88.0/24
188.240.200.0/23
194.106.160.0/19
195.178.32.0/19
195.252.64.0/18
212.62.59.0/24
212.200.0.0/16
213.196.96.0/20
IPv6:
2a00:e90::/32
2a00:8720::/32
2a01:b800::/32
2a02:61a0::/32
2a03:fc40::/32
2a04:1dc0::/29
2a06:5b00::/29
2a06:63c0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:69:04:2e:18:72:58:19:67:58:0b:d6:5b:bf:76:f9:05:a8:
97:e4:de:61:ab:65:59:13:e4:87:8c:bc:c4:18:aa:29:6b:2e:
5b:01:99:1d:31:53:de:80:35:76:8a:ad:69:30:f0:a3:dc:4d:
c4:ee:d4:18:3d:a6:26:d0:94:31:2c:ea:30:3f:cf:d8:98:a6:
c1:fc:db:04:24:c3:ee:e4:dc:b6:bd:2a:ef:36:d2:30:ca:05:
66:4a:59:9d:19:f6:f1:c1:69:05:73:1f:0d:fc:6a:93:11:b5:
b8:1f:53:02:31:6a:a1:98:3f:e2:65:ef:63:4a:57:bc:be:23:
de:37:39:5e:82:a1:12:f2:1a:07:aa:1b:5f:88:d5:42:b7:a3:
9d:c9:ac:79:7d:48:d5:6b:f5:72:98:b1:5b:5e:f6:bd:66:a0:
31:d3:55:c2:c8:c6:a1:fc:e4:8c:48:81:59:09:e2:df:b2:06:
03:33:a1:5f:6e:99:21:56:a7:61:b5:0c:22:33:78:e3:74:80:
f9:5e:85:39:f4:9b:5b:57:41:f4:d3:1b:7e:14:27:d7:99:67:
bd:66:21:20:b0:9a:8d:50:de:34:b7:9d:4b:3d:5e:01:fb:bc:
be:d0:17:ed:ad:7e:76:be:08:e0:d7:e2:af:d0:60:bb:7f:f7:
2c:e2:7b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:44:28 2026 by rpki-client