Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/226F03503qbq8AkAfKVmjEoXRGM.roa
File: 226F03503qbq8AkAfKVmjEoXRGM.roa (raw, json)
Hash identifier: WGXmrtVch83kLvvFi0u3jRdjrdh+XbIsPs4bd95J5zk=
Subject key identifier: DB:6E:85:D3:7E:74:DE:A6:EA:F0:09:00:7C:A5:66:8C:4A:17:44:63
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019CBA1D96BB23881106E87C528DEB7D6911
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/226F03503qbq8AkAfKVmjEoXRGM.roa
Signing time: Wed 04 Mar 2026 18:30:27 +0000
ROA not before: Wed 04 Mar 2026 18:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ba:1d:96:bb:23:88:11:06:e8:7c:52:8d:eb:7d:69:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 4 18:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=db6e85d37e74dea6eaf009007ca5668c4a174463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:6f:29:f0:8f:4f:44:17:db:3f:23:8b:db:8a:
bb:eb:63:66:87:20:c7:fd:c4:b2:4e:58:8b:b7:b4:
d0:50:a3:bf:9a:97:53:c6:71:bb:43:07:52:62:d6:
01:00:96:1b:c1:61:61:72:39:97:66:ba:02:a0:cd:
b1:71:32:4c:a8:e3:a5:4f:ed:2a:5f:b2:cd:95:99:
e3:c7:14:2f:8a:86:b4:d4:2b:dd:ca:1f:a5:b4:86:
92:3a:e1:6d:e4:bb:a1:ff:10:c6:17:a4:87:97:6d:
4d:22:da:e1:5a:22:bf:bc:bc:2f:c7:ca:6f:2a:f1:
dc:f4:96:b1:b0:59:f1:e5:f5:88:de:51:ea:2d:86:
2a:fc:59:3d:65:48:77:fa:ff:3a:28:f7:34:b3:56:
f7:5c:39:bc:0f:33:c5:10:02:3f:8a:cc:4d:9d:ae:
f0:cc:27:34:60:d0:52:9a:7c:2a:d3:8f:e7:7c:da:
51:f7:88:1f:d1:6e:89:45:54:eb:e7:94:32:35:c9:
77:52:94:bc:30:66:0f:ef:0b:ad:8b:d6:78:f3:21:
70:e0:b1:ef:b9:91:d5:30:17:02:9f:4c:0b:8e:9a:
df:c6:ec:ab:5f:d8:c9:35:2f:22:03:ca:5a:e5:14:
a8:e0:41:62:56:f8:c8:e5:3c:6c:ba:86:3f:df:10:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6E:85:D3:7E:74:DE:A6:EA:F0:09:00:7C:A5:66:8C:4A:17:44:63
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/226F03503qbq8AkAfKVmjEoXRGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.84.0/23
89.125.92.0/24
89.125.95.0/24
89.125.98.0/24
89.125.122.0/23
89.125.130.0/23
89.125.152.0/24
89.125.159.0/24
89.125.181.0/24
89.125.210.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
22:1c:16:c2:bf:fe:73:92:db:02:4a:59:6a:96:11:ec:cc:48:
0c:78:b2:7e:cf:be:48:4b:24:fa:ae:14:5f:75:42:b3:36:f7:
82:86:b6:bf:d8:6d:97:6d:55:3b:38:f0:7e:2f:36:68:d7:f1:
9d:d1:19:52:f2:1f:39:55:72:03:fa:91:a2:46:36:cf:fd:f4:
91:2c:38:f1:3f:38:c7:60:2f:06:a6:1a:47:78:4f:d3:ea:de:
84:04:64:02:70:fa:07:b6:85:56:9e:b4:cf:20:59:7e:0d:46:
f1:39:32:79:22:e9:b9:22:12:ef:07:f9:e0:bf:ef:eb:d9:3e:
ab:9e:82:b8:e8:36:87:54:7c:58:4a:03:f7:11:83:6b:bc:81:
d6:ca:16:8b:ee:03:db:b1:3c:da:a7:34:3a:63:05:86:a9:a1:
9d:67:bf:33:a1:81:de:94:26:07:d6:c1:38:fb:49:c0:f1:61:
ed:92:07:46:cf:a8:c2:b9:6b:45:27:4d:48:6e:a5:3a:d0:4b:
6a:b3:0c:a8:5d:c3:37:c4:3c:6e:9e:65:65:7c:ae:17:aa:16:
74:43:43:8e:4d:9f:6c:b0:7f:26:96:51:36:7b:11:00:f2:52:
71:7b:7f:a1:05:06:6e:e9:06:ed:29:c8:8e:4a:39:ac:d3:3e:
de:41:02:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 17:33:19 2026 by rpki-client