Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kocJMO34gjoERTxdVP8sYxdIQSc.roa
File: kocJMO34gjoERTxdVP8sYxdIQSc.roa (raw, json)
Hash identifier: 92KZSPfP/kgQL+U3B27iAd3Glw0ZOcU/CmRUl10INBY=
Subject key identifier: 92:87:09:30:ED:F8:82:3A:04:45:3C:5D:54:FF:2C:63:17:48:41:27
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0C4A64A76C370BE458103F7095FD1C998
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kocJMO34gjoERTxdVP8sYxdIQSc.roa
Signing time: Mon 21 Sep 2026 15:47:07 +0000
ROA not before: Mon 21 Sep 2026 15:47:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/24 maxlen: 24
89.106.29.0/24 maxlen: 24
89.106.30.0/24 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
124.158.101.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.51.0/24 maxlen: 24
189.12.53.0/24 maxlen: 24
189.12.55.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.12.57.0/24 maxlen: 24
189.12.58.0/24 maxlen: 24
189.12.60.0/24 maxlen: 24
189.12.61.0/24 maxlen: 24
189.12.62.0/24 maxlen: 24
189.12.63.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.210.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.214.0/24 maxlen: 24
189.31.215.0/24 maxlen: 24
189.31.216.0/24 maxlen: 24
189.31.217.0/24 maxlen: 24
189.31.218.0/24 maxlen: 24
189.31.219.0/24 maxlen: 24
189.31.220.0/24 maxlen: 24
189.31.221.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.20.0/23 maxlen: 23
189.73.22.0/24 maxlen: 24
189.73.23.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.73.27.0/24 maxlen: 24
189.73.28.0/24 maxlen: 24
189.73.29.0/24 maxlen: 24
189.73.30.0/24 maxlen: 24
189.73.31.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.179.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.185.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
189.75.188.0/24 maxlen: 24
189.75.189.0/24 maxlen: 24
189.75.190.0/24 maxlen: 24
189.75.191.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.44.20.0/24 maxlen: 24
191.44.21.0/24 maxlen: 24
191.44.22.0/24 maxlen: 24
191.44.23.0/24 maxlen: 24
191.44.24.0/24 maxlen: 24
191.44.25.0/24 maxlen: 24
191.44.26.0/24 maxlen: 24
191.44.27.0/24 maxlen: 24
191.44.28.0/24 maxlen: 24
191.44.29.0/24 maxlen: 24
191.44.30.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.161.0/24 maxlen: 24
191.217.162.0/24 maxlen: 24
191.217.163.0/24 maxlen: 24
191.217.164.0/24 maxlen: 24
191.217.165.0/24 maxlen: 24
191.217.166.0/24 maxlen: 24
191.217.167.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.172.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.219.22.0/24 maxlen: 24
191.219.23.0/24 maxlen: 24
191.219.24.0/24 maxlen: 24
191.219.25.0/24 maxlen: 24
191.219.26.0/24 maxlen: 24
191.219.27.0/24 maxlen: 24
191.219.29.0/24 maxlen: 24
191.222.32.0/24 maxlen: 24
191.222.33.0/24 maxlen: 24
191.222.36.0/24 maxlen: 24
191.222.38.0/24 maxlen: 24
191.222.39.0/24 maxlen: 24
191.222.40.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.44.0/24 maxlen: 24
191.222.45.0/24 maxlen: 24
191.222.46.0/24 maxlen: 24
191.222.47.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
191.222.246.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.80.0/21 maxlen: 24
200.102.88.0/24 maxlen: 24
200.102.89.0/24 maxlen: 24
200.102.90.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.92.0/24 maxlen: 24
200.102.93.0/24 maxlen: 24
200.102.94.0/24 maxlen: 24
200.102.95.0/24 maxlen: 24
200.102.176.0/24 maxlen: 24
200.102.177.0/24 maxlen: 24
200.102.178.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.102.185.0/24 maxlen: 24
200.102.188.0/24 maxlen: 24
200.102.189.0/24 maxlen: 24
200.102.190.0/24 maxlen: 24
200.102.191.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.17.0/24 maxlen: 24
200.165.18.0/24 maxlen: 24
200.165.24.0/24 maxlen: 24
200.165.27.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.80.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.82.0/24 maxlen: 24
200.181.83.0/24 maxlen: 24
200.181.84.0/24 maxlen: 24
200.181.85.0/24 maxlen: 24
200.181.86.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
200.181.91.0/24 maxlen: 24
200.181.94.0/24 maxlen: 24
200.181.95.0/24 maxlen: 24
201.11.227.0/24 maxlen: 24
201.11.228.0/24 maxlen: 24
201.11.229.0/24 maxlen: 24
201.11.231.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.236.0/24 maxlen: 24
201.14.208.0/24 maxlen: 24
201.14.210.0/24 maxlen: 24
201.14.213.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.14.221.0/24 maxlen: 24
201.14.222.0/24 maxlen: 24
201.24.192.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:a6:4a:76:c3:70:be:45:81:03:f7:09:5f:d1:c9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 21 15:47:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=92870930edf8823a04453c5d54ff2c6317484127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:98:77:7f:38:2d:c3:0d:e4:bd:6a:95:97:cf:
04:67:80:95:ab:34:84:c0:f5:e1:dd:f6:22:f0:e8:
99:9a:f5:09:a5:73:90:6c:32:8c:66:79:58:65:40:
bf:8b:0b:3d:0e:d1:9d:b7:f4:92:ff:e5:7f:f1:e2:
13:70:c5:91:04:17:2a:19:9c:d6:42:f8:76:aa:47:
b3:6f:b4:5b:14:d7:fc:cf:4e:c8:2e:ec:e5:4c:e1:
8c:5e:a5:5d:97:1f:6e:1b:28:59:a0:de:31:14:72:
2b:5e:0c:30:81:20:94:45:7b:e0:3d:24:c4:f1:40:
1d:fa:49:92:10:95:77:0d:96:20:e5:12:7f:aa:23:
19:bb:cc:91:83:2b:cd:6d:28:9b:4e:09:88:c1:22:
d6:5c:55:81:4e:dd:82:1c:86:f6:a2:2e:45:e9:5e:
0c:d8:4c:36:34:c6:c8:ab:ed:08:b6:65:47:8f:d2:
76:e9:93:9a:70:ac:04:19:22:32:2b:85:fe:1e:6f:
19:57:47:41:8d:a5:cd:ed:cc:48:90:02:a6:1a:d8:
04:bf:a0:d5:6f:fe:21:7f:a6:ae:8a:e4:24:cc:e7:
58:79:95:d7:1a:3f:b8:4e:96:46:9e:3b:58:82:3b:
c9:65:ca:4f:50:7a:92:d0:c5:0b:df:74:e3:f8:16:
57:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:87:09:30:ED:F8:82:3A:04:45:3C:5D:54:FF:2C:63:17:48:41:27
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/kocJMO34gjoERTxdVP8sYxdIQSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
89.106.2.0/24
89.106.28.0-89.106.30.255
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.102.133.0/24
124.158.101.0/24
189.12.49.0/24
189.12.51.0/24
189.12.53.0/24
189.12.55.0-189.12.58.255
189.12.60.0/22
189.31.208.0-189.31.210.255
189.31.212.0/24
189.31.214.0-189.31.222.255
189.73.16.0-189.73.24.255
189.73.27.0-189.73.31.255
189.75.176.0/24
189.75.179.0-189.75.181.255
189.75.183.0-189.75.186.255
189.75.188.0/22
191.44.16.0-191.44.30.255
191.217.160.0-191.217.172.255
191.217.175.0/24
191.219.16.0-191.219.27.255
191.219.29.0/24
191.222.32.0/23
191.222.36.0/24
191.222.38.0-191.222.40.255
191.222.42.0-191.222.47.255
191.222.240.0-191.222.242.255
191.222.244.0-191.222.246.255
194.36.33.0/24
200.102.80.0/20
200.102.176.0-200.102.185.255
200.102.188.0/22
200.165.16.0-200.165.18.255
200.165.24.0/24
200.165.27.0-200.165.31.255
200.181.80.0-200.181.91.255
200.181.94.0/23
201.11.227.0-201.11.229.255
201.11.231.0-201.11.234.255
201.11.236.0/24
201.14.208.0/24
201.14.210.0/24
201.14.213.0/24
201.14.220.0-201.14.222.255
201.24.192.0/24
201.24.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:14:7a:7c:6e:2e:79:02:3c:02:00:bb:be:a1:14:7d:78:6f:
01:cb:93:bd:c4:7a:c2:8d:cb:f6:f1:3e:1e:8c:8b:99:d5:7d:
ea:e7:21:7d:a2:d6:30:a7:73:ed:3b:a5:d1:19:d8:1f:6e:9f:
0a:60:a2:68:70:4a:02:55:dc:5f:b2:36:33:93:fd:c1:79:ff:
4c:0d:15:38:7d:e5:2a:27:ce:79:36:ec:7a:d5:08:da:db:a0:
e5:83:ed:f6:c5:0f:d6:82:25:d0:dc:b0:ff:4b:f9:e5:20:b2:
e6:b7:10:10:51:e2:c8:33:56:78:20:d0:94:f9:3a:3c:23:5a:
05:c4:f6:65:7c:fc:98:71:1a:e2:91:97:06:ed:a2:03:61:ae:
8d:2c:22:37:47:5f:e3:67:09:fa:9d:a6:a0:cd:d0:82:c5:56:
df:0a:b2:d9:6e:49:12:d4:7b:69:0a:c0:83:a3:b5:68:95:52:
36:6c:7a:34:0b:02:5a:ae:8c:5a:d6:de:77:f4:c3:ea:31:32:
b7:52:92:d5:25:be:33:25:68:96:5e:df:31:3f:4d:55:65:23:
32:cc:02:24:7a:b4:c0:fd:05:e3:5a:c2:54:4a:02:41:50:9c:
df:ee:9b:0c:51:0e:9a:db:9b:e9:51:9b:b7:1c:10:ee:31:6d:
b9:28:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:34:06 2026 by rpki-client