Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YnmGh9lTnWWLzYN2sb2Qf487bqA.roa
File: YnmGh9lTnWWLzYN2sb2Qf487bqA.roa (raw, json)
Hash identifier: Vs1pdKlng5Kqxemi1VcyM1VOpBzsqbeIe4utcsxkB1E=
Subject key identifier: 62:79:86:87:D9:53:9D:65:8B:CD:83:76:B1:BD:90:7F:8F:3B:6E:A0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0D94331BB85C3067E807A979DC13D303D
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YnmGh9lTnWWLzYN2sb2Qf487bqA.roa
Signing time: Fri 25 Sep 2026 15:50:54 +0000
ROA not before: Fri 25 Sep 2026 15:50:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.218.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.101.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.60.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.215.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.217.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.219.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.20.0/23 maxlen: 23
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.73.28.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.73.31.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.21.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
191.219.29.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.18.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:06:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:43:31:bb:85:c3:06:7e:80:7a:97:9d:c1:3d:30:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 25 15:50:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=62798687d9539d658bcd8376b1bd907f8f3b6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fa:a7:2d:fc:47:dd:20:24:ae:11:ea:dd:47:
f6:55:d9:4d:99:0f:79:b6:01:bf:81:b0:18:c5:6c:
08:5b:66:15:1d:16:5a:ce:05:81:0b:38:09:7e:fa:
b5:af:8e:fe:24:63:1f:be:bb:2f:a0:71:d8:01:8f:
58:4f:82:96:00:93:c4:a4:b6:e2:0e:41:6c:ed:38:
10:1d:53:6f:b9:3a:cf:96:ed:06:78:bd:d6:8b:33:
77:cb:31:27:f8:d1:1c:c3:da:fc:0a:17:35:f3:3f:
21:30:21:66:b1:ab:17:8b:08:64:b9:c3:d7:ca:dd:
67:ce:ce:c1:eb:16:41:b8:cb:ff:c1:90:dc:34:a1:
e5:37:d1:7f:f6:26:8a:bc:9f:35:0c:9c:d1:e7:66:
57:0d:37:ae:6b:9e:8c:21:26:60:b7:c8:2b:7d:a8:
b4:5b:f7:d5:5e:a7:d0:e7:cf:69:30:32:2a:d8:0f:
50:7d:72:48:63:48:8c:26:64:ff:f4:8b:24:cf:0f:
7c:50:c0:c8:b9:44:2f:fc:45:64:e6:12:16:8a:d2:
4e:ec:69:14:6d:6e:12:43:2b:f4:d8:a6:ce:e1:31:
ae:b8:06:83:f7:f9:23:89:9b:8a:41:da:71:39:c4:
65:3b:32:e9:af:66:cd:74:b9:5b:48:68:6a:56:3f:
80:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:79:86:87:D9:53:9D:65:8B:CD:83:76:B1:BD:90:7F:8F:3B:6E:A0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/YnmGh9lTnWWLzYN2sb2Qf487bqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
89.106.2.0/24
89.106.28.0-89.106.30.255
94.229.209.0/24
94.229.213.0/24
94.229.218.0/24
94.229.222.0/23
103.102.133.0/24
124.158.101.0/24
189.12.49.0/24
189.12.51.0/24
189.12.53.0/24
189.12.55.0-189.12.58.255
189.12.60.0/22
189.31.208.0-189.31.210.255
189.31.212.0/24
189.31.214.0-189.31.222.255
189.73.16.0-189.73.24.255
189.73.27.0-189.73.31.255
189.75.176.0/24
189.75.179.0-189.75.181.255
189.75.183.0-189.75.186.255
189.75.188.0/22
191.44.16.0-191.44.30.255
191.217.160.0-191.217.172.255
191.217.175.0/24
191.219.16.0-191.219.27.255
191.219.29.0/24
191.222.32.0/23
191.222.36.0/24
191.222.38.0-191.222.40.255
191.222.42.0-191.222.47.255
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.176.0-200.102.185.255
200.102.188.0/22
200.165.16.0-200.165.18.255
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.88.0/22
200.181.94.0/23
201.11.227.0-201.11.229.255
201.11.231.0-201.11.234.255
201.11.236.0/24
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0-201.14.222.255
201.24.192.0/24
201.24.196.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8e:73:f4:cd:bd:db:b0:01:ab:89:f4:0b:78:5a:75:be:02:
5b:e0:c7:38:b0:72:93:da:81:77:99:67:b3:92:18:40:7e:5d:
4d:e8:09:57:40:0f:fd:fe:89:97:03:80:cb:8a:ef:a9:ab:f0:
b3:b2:ca:e9:8e:d9:b2:7c:24:3e:ab:39:b4:5f:e1:37:18:0f:
6a:41:e4:c4:c6:c4:5c:f1:e3:63:83:ca:00:0b:80:a7:6e:7b:
c6:69:37:93:96:7f:32:c2:4e:7e:f8:67:d5:eb:08:ce:b0:49:
45:b9:80:33:c3:b4:fd:5c:0e:fe:f4:18:e4:39:86:d5:ca:86:
c1:68:56:67:77:18:80:70:de:b3:e9:f8:b0:2e:79:ed:3b:eb:
ec:0a:82:bd:b7:d2:d5:02:8d:b4:f1:e4:70:f0:f5:a2:c8:13:
8f:23:6f:69:6b:f0:83:8d:1e:8a:38:81:2e:0c:98:af:33:d8:
4a:4c:e4:a5:82:34:93:f3:00:35:e9:25:bb:f6:83:5d:94:da:
3c:da:5a:97:cb:f3:d2:8e:e5:df:57:07:83:ec:00:c6:24:7f:
12:c1:ac:ab:c4:23:0e:16:cc:b9:9a:b7:fb:80:ee:8c:51:8c:
7a:f9:09:e2:ca:93:9d:dc:6d:1f:27:0c:2a:18:cd:1a:78:b8:
30:f3:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:39:38 2026 by rpki-client