Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5j4eZrJc-OYBEios1lgymEYwv7c.roa
File: 5j4eZrJc-OYBEios1lgymEYwv7c.roa (raw, json)
Hash identifier: iD5o283YW7MdAUW3cXTmA0An/etgkmZGOm4nQhfGe/w=
Subject key identifier: E6:3E:1E:66:B2:5C:F8:E6:01:12:2A:2C:D6:58:32:98:46:30:BF:B7
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FDB2750D21A68A2716F6AE963B47F70D3
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5j4eZrJc-OYBEios1lgymEYwv7c.roa
Signing time: Fri 07 Aug 2026 07:36:54 +0000
ROA not before: Fri 07 Aug 2026 07:36:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.136.0/24 maxlen: 24
78.17.137.0/24 maxlen: 24
78.17.138.0/24 maxlen: 24
78.17.139.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.189.0/24 maxlen: 24
78.17.190.0/23 maxlen: 23
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.40.0/24 maxlen: 24
89.125.41.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.144.0/22 maxlen: 22
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.200.0/24 maxlen: 24
89.125.201.0/24 maxlen: 24
89.125.202.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
104.143.204.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
104.143.206.0/24 maxlen: 24
104.143.207.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Aug 2026 12:39:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:db:27:50:d2:1a:68:a2:71:6f:6a:e9:63:b4:7f:70:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 7 07:36:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e63e1e66b25cf8e601122a2cd65832984630bfb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2d:bd:7b:10:64:d6:1e:7b:3f:4d:8f:5f:ff:
3a:06:4c:d9:de:85:02:01:79:34:39:b9:55:d8:f6:
f2:69:cf:03:dc:9b:cc:cb:8d:85:7a:c4:e0:36:a7:
1b:7d:9c:8b:13:a9:eb:ed:85:d2:3b:ec:4e:05:13:
51:49:bc:1f:ae:ab:35:dc:e2:2d:68:a6:e3:4c:2e:
24:ee:fa:13:ac:2f:fa:74:79:55:9e:d9:36:e3:64:
92:de:73:e1:cd:fe:c8:89:95:03:bd:dd:09:15:ba:
62:7a:d2:bf:38:5d:9e:e5:59:ed:88:19:64:fb:3b:
5d:42:a4:5f:28:f7:c6:20:d8:44:7b:0d:7b:1f:6c:
62:09:5e:a5:99:78:8f:2b:4b:ee:4d:e7:60:3c:2d:
5c:ff:f9:58:db:38:77:b9:5d:da:44:73:05:f4:16:
d3:30:6e:ad:30:0e:b7:46:c7:1d:f1:17:24:d7:84:
e8:8d:e4:5a:16:92:6d:9b:22:44:06:f4:0d:fe:bd:
49:d8:16:70:d5:f4:40:f5:5c:d6:76:c1:35:4b:a0:
82:0a:e9:72:16:60:82:ec:29:f2:d5:6b:47:12:58:
c4:dd:e8:ad:06:07:e4:89:f3:68:72:02:47:f6:0a:
cd:b6:92:b9:19:22:29:4c:df:86:fb:da:ae:3c:4f:
ab:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:3E:1E:66:B2:5C:F8:E6:01:12:2A:2C:D6:58:32:98:46:30:BF:B7
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/5j4eZrJc-OYBEios1lgymEYwv7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
78.17.136.0/22
78.17.188.0/22
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.40.0/23
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.144.0/22
89.125.151.0-89.125.152.255
89.125.189.0/24
89.125.200.0/22
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
104.143.204.0/22
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
08:c8:d7:29:e1:fa:8e:2f:d5:24:91:85:9f:3e:0a:f4:31:8d:
32:2d:6c:a0:cd:af:cc:9c:21:49:cf:34:38:3e:a0:f2:53:78:
d4:7c:d5:78:35:3a:7b:a3:a1:73:e9:97:79:20:14:35:47:b1:
fe:47:a6:0a:1b:a4:34:dd:db:e6:fc:ea:d6:8e:35:82:19:7c:
cb:43:5a:32:2d:a1:dc:21:6f:25:4c:60:9d:a2:73:65:83:73:
e9:88:60:c6:2a:65:e2:85:f3:18:93:e9:9a:9a:d9:e6:bb:df:
08:24:04:8e:4f:ee:04:03:70:34:fd:fc:5c:70:45:ac:90:90:
2e:9f:a0:d7:7a:b6:6c:c9:c1:79:5f:c9:1a:78:7e:36:b4:3f:
89:96:b6:c2:5f:99:71:04:ea:d2:df:7b:58:f3:40:80:5a:d8:
23:8b:a7:5a:8b:36:f2:02:aa:ed:14:ac:fe:ac:c1:da:d2:d1:
eb:1f:7e:1d:3e:ca:fd:65:18:28:9b:70:d1:32:5a:81:07:c1:
61:5b:4c:56:fa:ff:e0:2c:fe:bf:3f:d5:66:aa:d4:9a:fd:28:
f8:3a:cd:76:ef:e1:37:b0:cd:03:52:91:bf:eb:84:d5:34:3f:
66:2e:9a:18:fb:ec:7f:3c:a7:a4:14:08:04:f7:32:c0:bf:db:
3e:b6:03:13
-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgISAZ/bJ1DSGmiicW9q6WO0f3DTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODA3MDczNjU0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNjNlMWU2NmIyNWNmOGU2MDExMjJhMmNkNjU4MzI5ODQ2MzBiZmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtC29exBk1h57P02PX/86BkzZ3oUC
AXk0OblV2Pbyac8D3JvMy42FesTgNqcbfZyLE6nr7YXSO+xOBRNRSbwfrqs13OIt
aKbjTC4k7voTrC/6dHlVntk242SS3nPhzf7IiZUDvd0JFbpietK/OF2e5VntiBlk
+ztdQqRfKPfGINhEew17H2xiCV6lmXiPK0vuTedgPC1c//lY2zh3uV3aRHMF9BbT
MG6tMA63Rscd8Rck14TojeRaFpJtmyJEBvQN/r1J2BZw1fRA9VzWdsE1S6CCCuly
FmCC7Cny1WtHEljE3eitBgfkifNocgJH9grNtpK5GSIpTN+G+9quPE+rSQIDAQAB
o4IDrTCCA6kwHQYDVR0OBBYEFOY+HmayXPjmARIqLNZYMphGML+3MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvNWo0ZVpySmMtT1lCRWlvczFsZ3ltRVl3djdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBwQYIKwYBBQUHAQcBAf8EggGwMIIBrDCCAagEAgABMIIB
oAMEAC2QrAMEAC2QrgMEAE1RZQMEAk4RiAMEAk4RvAMEAFZrMgMEAFZrZAMEAFkl
uQMEAVl9KAMEAFl9OgMEAVl9RgMEAFl9TAMEAVl9UgMEAFl9WAMEAFl9XwMEAFl9
YgMEAll9aAMEAFl9gzAMAwQAWX2JAwQCWX2IAwQCWX2QMAwDBABZfZcDBABZfZgD
BABZfb0DBAJZfcgDBABZfdUwDAMEAFl98wMEAFl99AMEAFl9+AMEAFxyNgMEAF1x
qwMEAF1zagMEAF13mgMEAF13wwMEAF6xDQMEAGc4VAMEAmiPzDAMAwQBpxGyAwQB
pxG0MAwDBACnEbcDBACnEb4DBAC5SAgDBAC5jdsDBAC5wWYDBAC5xusDBAC8QI4D
BAC81HkDBADBfDEDBADCOiIwDAMEAsI6LAMEAMI6LgMEAMNYWQMEAcOFwAMEAMpH
DwMEAMxNAAMEAcxNAgMEAM71gAMEAc71gjAMAwQAzvWFAwQAzvWGAwQAzvWdAwQA
1MAGAwQB1MAMAwQA1MAPAwQB1MAUAwQA1MAXAwQB1MDWMA0GCSqGSIb3DQEBCwUA
A4IBAQAIyNcp4fqOL9UkkYWfPgr0MY0yLWygza/MnCFJzzQ4PqDyU3jUfNV4NTp7
o6Fz6Zd5IBQ1R7H+R6YKG6Q03dvm/OrWjjWCGXzLQ1oyLaHcIW8lTGCdonNlg3Pp
iGDGKmXihfMYk+mamtnmu98IJASOT+4EA3A0/fxccEWskJAun6DXerZsycF5X8ka
eH42tD+JlrbCX5lxBOrS33tY80CAWtgji6daizbyAqrtFKz+rMHa0tHrH34dPsr9
ZRgom3DRMlqBB8FhW0xW+v/gLP6/P9VmqtSa/Sj4Os127+E3sM0DUpG/64TVND9m
LpoY++x/PKekFAgE9zLAv9s+tgMT
-----END CERTIFICATE-----
Generated at Mon Aug 24 20:55:55 2026 by rpki-client