Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oGOMR1bPS-NQ6rfeBv9wELG9RDI.roa
File: oGOMR1bPS-NQ6rfeBv9wELG9RDI.roa (raw, json)
Hash identifier: hFDcrFcpfSqS82e4d6XYKtrUKzhgL9cWykNz1IO/7YY=
Subject key identifier: A0:63:8C:47:56:CF:4B:E3:50:EA:B7:DE:06:FF:70:10:B1:BD:44:32
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F910DE4CEDA12EACAC83C36C1CDE80132
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oGOMR1bPS-NQ6rfeBv9wELG9RDI.roa
Signing time: Thu 23 Jul 2026 22:17:14 +0000
ROA not before: Thu 23 Jul 2026 22:17:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 14.102.226.0/24 maxlen: 24
14.102.232.0/24 maxlen: 24
14.102.234.0/24 maxlen: 24
43.242.136.0/24 maxlen: 24
74.112.152.0/22 maxlen: 24
77.111.96.0/22 maxlen: 22
77.111.102.0/23 maxlen: 24
77.111.105.0/24 maxlen: 24
77.111.106.0/24 maxlen: 24
89.106.2.0/24 maxlen: 24
89.106.28.0/22 maxlen: 24
94.229.209.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
94.229.222.0/24 maxlen: 24
94.229.223.0/24 maxlen: 24
103.102.133.0/24 maxlen: 24
189.12.48.0/24 maxlen: 24
189.12.49.0/24 maxlen: 24
189.12.52.0/24 maxlen: 24
189.12.56.0/24 maxlen: 24
189.31.208.0/24 maxlen: 24
189.31.209.0/24 maxlen: 24
189.31.212.0/24 maxlen: 24
189.31.222.0/24 maxlen: 24
189.73.16.0/24 maxlen: 24
189.73.17.0/24 maxlen: 24
189.73.18.0/24 maxlen: 24
189.73.19.0/24 maxlen: 24
189.73.24.0/24 maxlen: 24
189.75.176.0/24 maxlen: 24
189.75.180.0/24 maxlen: 24
189.75.181.0/24 maxlen: 24
189.75.182.0/24 maxlen: 24
189.75.183.0/24 maxlen: 24
189.75.184.0/24 maxlen: 24
189.75.186.0/24 maxlen: 24
191.44.16.0/24 maxlen: 24
191.44.17.0/24 maxlen: 24
191.44.18.0/24 maxlen: 24
191.44.19.0/24 maxlen: 24
191.217.160.0/24 maxlen: 24
191.217.168.0/24 maxlen: 24
191.217.169.0/24 maxlen: 24
191.217.170.0/24 maxlen: 24
191.217.171.0/24 maxlen: 24
191.217.175.0/24 maxlen: 24
191.219.16.0/24 maxlen: 24
191.219.17.0/24 maxlen: 24
191.219.18.0/24 maxlen: 24
191.219.19.0/24 maxlen: 24
191.219.20.0/24 maxlen: 24
191.219.21.0/24 maxlen: 24
191.222.42.0/24 maxlen: 24
191.222.43.0/24 maxlen: 24
191.222.240.0/24 maxlen: 24
191.222.241.0/24 maxlen: 24
191.222.242.0/24 maxlen: 24
191.222.244.0/24 maxlen: 24
191.222.245.0/24 maxlen: 24
194.36.33.0/24 maxlen: 24
200.102.91.0/24 maxlen: 24
200.102.179.0/24 maxlen: 24
200.102.180.0/24 maxlen: 24
200.102.181.0/24 maxlen: 24
200.102.182.0/24 maxlen: 24
200.102.183.0/24 maxlen: 24
200.102.184.0/24 maxlen: 24
200.165.16.0/24 maxlen: 24
200.165.28.0/24 maxlen: 24
200.165.29.0/24 maxlen: 24
200.165.30.0/24 maxlen: 24
200.165.31.0/24 maxlen: 24
200.181.81.0/24 maxlen: 24
200.181.87.0/24 maxlen: 24
200.181.88.0/24 maxlen: 24
200.181.89.0/24 maxlen: 24
200.181.90.0/24 maxlen: 24
201.11.224.0/24 maxlen: 24
201.11.232.0/24 maxlen: 24
201.11.233.0/24 maxlen: 24
201.11.234.0/24 maxlen: 24
201.11.235.0/24 maxlen: 24
201.14.211.0/24 maxlen: 24
201.14.216.0/24 maxlen: 24
201.14.217.0/24 maxlen: 24
201.14.218.0/24 maxlen: 24
201.14.219.0/24 maxlen: 24
201.14.220.0/24 maxlen: 24
201.24.193.0/24 maxlen: 24
201.24.194.0/24 maxlen: 24
201.24.195.0/24 maxlen: 24
201.24.196.0/24 maxlen: 24
201.24.197.0/24 maxlen: 24
201.24.202.0/24 maxlen: 24
205.237.88.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:0d:e4:ce:da:12:ea:ca:c8:3c:36:c1:cd:e8:01:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jul 23 22:17:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a0638c4756cf4be350eab7de06ff7010b1bd4432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:7b:e5:51:e8:5b:4a:27:18:ed:49:08:a7:
82:8f:d9:5a:e7:b4:73:9e:a7:6c:46:5c:5c:71:66:
84:3f:1b:ed:50:10:4b:88:f4:79:80:21:0e:fd:4f:
3f:86:d7:39:71:04:6a:87:f7:b3:84:b3:54:5f:39:
51:11:15:b5:db:64:2a:11:b3:a5:9b:4c:fa:ef:ca:
37:94:f5:5b:75:4c:cd:67:f0:c3:05:87:0b:1e:39:
8d:fe:aa:e4:b3:9d:4c:58:c5:a6:8a:f2:e6:ee:f0:
ad:ee:2f:ba:77:3a:e2:4f:e4:a7:4f:b5:a1:f8:41:
48:5e:09:1d:f1:63:17:74:20:a4:99:f8:a7:d7:8b:
58:a7:26:72:89:d1:1c:4f:9c:54:bf:05:7f:9f:c6:
4a:9b:af:a6:61:02:20:5c:10:93:ef:a2:2b:23:22:
7c:2f:9f:8d:a1:b7:3b:8f:58:6e:9b:fb:14:3a:89:
56:af:37:c6:5b:41:3a:d9:26:da:73:8b:67:98:bf:
6f:c7:76:36:c2:99:88:67:b3:04:c9:47:17:40:a7:
9f:88:ca:b1:c3:d0:76:e5:33:c7:06:21:7b:1c:de:
c2:91:21:6a:ae:65:2b:d9:b2:57:3c:5e:92:b1:12:
f1:9c:af:3e:b7:e1:ed:b4:04:c2:50:0d:c5:45:e0:
7e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:63:8C:47:56:CF:4B:E3:50:EA:B7:DE:06:FF:70:10:B1:BD:44:32
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/oGOMR1bPS-NQ6rfeBv9wELG9RDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.226.0/24
14.102.232.0/24
14.102.234.0/24
43.242.136.0/24
74.112.152.0/22
77.111.96.0/22
77.111.102.0/23
77.111.105.0-77.111.106.255
89.106.2.0/24
89.106.28.0/22
94.229.209.0/24
94.229.213.0/24
94.229.222.0/23
103.102.133.0/24
189.12.48.0/23
189.12.52.0/24
189.12.56.0/24
189.31.208.0/23
189.31.212.0/24
189.31.222.0/24
189.73.16.0/22
189.73.24.0/24
189.75.176.0/24
189.75.180.0-189.75.184.255
189.75.186.0/24
191.44.16.0/22
191.217.160.0/24
191.217.168.0/22
191.217.175.0/24
191.219.16.0-191.219.21.255
191.222.42.0/23
191.222.240.0-191.222.242.255
191.222.244.0/23
194.36.33.0/24
200.102.91.0/24
200.102.179.0-200.102.184.255
200.165.16.0/24
200.165.28.0/22
200.181.81.0/24
200.181.87.0-200.181.90.255
201.11.224.0/24
201.11.232.0/22
201.14.211.0/24
201.14.216.0-201.14.220.255
201.24.193.0-201.24.197.255
201.24.202.0/24
205.237.88.0/22
Signature Algorithm: sha256WithRSAEncryption
91:de:2b:17:d2:f3:37:03:f8:06:94:07:b1:12:3d:a9:a7:5f:
a2:73:18:d6:b8:45:ba:92:4c:fc:14:6d:02:98:71:3e:c1:c1:
a5:7e:b6:07:c5:52:e0:43:f3:9f:54:97:d1:26:ce:7a:43:6a:
ff:f7:a8:f5:77:01:af:5a:14:e4:a5:c8:97:53:c6:d6:b2:d7:
ca:4b:11:c7:fb:96:36:ec:d2:b1:a8:b8:fa:f2:b7:47:70:fd:
79:69:8f:13:f7:de:63:c5:60:93:03:74:d5:5b:0d:ab:38:75:
b2:68:59:c8:4b:93:76:fa:13:a9:15:0e:06:af:38:c7:a6:ab:
98:10:d9:51:1e:60:1e:34:33:73:75:dc:d2:8a:0e:bb:26:bc:
02:c3:6f:70:e5:c3:b7:6d:06:a9:fb:c7:93:70:7c:a9:4a:73:
02:13:30:4d:41:ce:d4:23:1b:59:62:9d:83:d1:3a:99:7b:86:
9a:73:a7:f7:df:5c:dd:97:7f:4a:45:d6:80:40:25:10:0e:b3:
cf:71:1d:59:48:e8:2b:a3:c5:62:8b:90:b3:0c:95:0a:a7:aa:
5b:8c:82:90:df:bf:56:5d:6b:82:a2:8c:d8:65:5b:b7:b1:24:
b6:5a:ad:a4:aa:85:9e:6f:5b:fb:07:a9:4c:5f:59:57:f0:27:
63:4a:a9:66
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:27 2026 by rpki-client