Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7rgH0E0yqx5aoSeoJr0nuSKKn6s.roa
File: 7rgH0E0yqx5aoSeoJr0nuSKKn6s.roa (raw, json)
Hash identifier: wL2DJs5fFDFp+NQs1pl/VIy07Z2/kkPAuJj7waxZXDo=
Subject key identifier: EE:B8:07:D0:4D:32:AB:1E:5A:A1:27:A8:26:BD:27:B9:22:8A:9F:AB
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D3D9CEB3848ADB2A29DB7275F8A602E37
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7rgH0E0yqx5aoSeoJr0nuSKKn6s.roa
Signing time: Mon 30 Mar 2026 07:19:47 +0000
ROA not before: Mon 30 Mar 2026 07:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Apr 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3d:9c:eb:38:48:ad:b2:a2:9d:b7:27:5f:8a:60:2e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 30 07:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=eeb807d04d32ab1e5aa127a826bd27b9228a9fab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bf:30:f3:fd:07:60:8e:3b:b6:43:45:2a:f6:
be:89:fb:0e:96:1a:54:dc:04:b7:84:04:29:78:49:
69:b2:6d:69:38:74:15:09:46:38:6e:98:91:f7:ab:
c0:ee:c2:60:d1:1f:f9:e3:5a:3e:dd:a8:ae:39:3b:
69:13:29:6a:ce:cf:fa:2d:69:11:27:95:dc:12:39:
09:48:1d:64:96:9d:b9:c9:a7:08:6a:00:05:55:5d:
1f:f9:5c:4d:2f:91:a4:51:f1:9d:81:66:8e:47:58:
c1:a6:c8:bf:16:e1:d4:03:ad:b8:3a:03:4a:8a:33:
f8:d8:d8:b4:3f:e5:9a:b6:fa:42:1b:84:60:a8:8e:
1e:87:d7:58:24:6f:05:2d:2b:87:b9:08:5f:e7:30:
5f:d2:2e:cd:ea:51:b1:8f:da:90:a1:50:66:32:83:
05:fd:aa:98:17:c1:e5:12:76:7b:c5:8c:51:c5:28:
de:74:23:e1:13:96:93:a9:9f:70:26:98:47:4e:ef:
e6:da:ba:5b:cb:42:56:61:9f:26:7d:06:04:c6:66:
4b:a6:c4:58:f6:d4:bb:2d:e3:77:2f:06:02:66:c6:
88:c5:ec:0b:51:4e:0d:a0:8e:4e:cf:6d:b3:02:f6:
c8:66:5f:ec:fd:49:b4:30:eb:39:b3:34:d3:90:8b:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:B8:07:D0:4D:32:AB:1E:5A:A1:27:A8:26:BD:27:B9:22:8A:9F:AB
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/7rgH0E0yqx5aoSeoJr0nuSKKn6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.42.0/24
78.17.56.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.122.0/23
89.125.130.0/23
89.125.152.0/24
89.125.159.0/24
89.125.181.0/24
89.125.210.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
35:30:07:0d:b3:33:d9:61:85:d2:5e:7b:f9:f5:55:59:07:22:
61:07:c1:ea:0d:31:8a:99:d8:a4:23:a3:a9:05:33:23:2e:3f:
26:e2:de:1f:92:09:94:ec:1d:17:46:19:89:78:9c:50:a4:c5:
41:e2:3a:ea:ca:69:e8:46:51:c7:3f:f8:ab:71:79:18:0e:b7:
a5:2d:8c:d0:d2:65:e6:e3:c6:54:0a:63:b5:db:17:86:22:04:
3b:d4:ab:10:ae:22:43:0d:03:33:33:2f:78:da:62:1e:36:ba:
27:92:16:9e:d3:5a:07:62:a5:8b:e0:b5:0a:86:84:4f:69:a8:
40:56:32:9b:ce:1b:92:3e:b1:41:74:c7:d0:fd:b2:b7:f2:8f:
6c:cb:c0:50:16:c5:58:9e:f1:b0:87:7c:46:70:7d:47:22:4f:
c4:10:fe:c5:86:9f:8e:f0:8a:91:ea:06:7c:c3:9c:3b:ca:a0:
1d:e4:46:f6:96:52:75:e3:ea:34:f7:05:41:7c:c5:77:a8:e3:
3a:d7:d6:39:7f:57:aa:01:03:48:7e:24:e1:c7:83:8b:61:d0:
44:ab:bc:f5:a7:bd:a8:eb:a4:ce:00:7e:8d:44:4a:da:16:fd:
b2:11:11:e8:89:8d:d3:e4:46:79:90:19:e3:05:13:6b:55:f8:
de:35:66:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 31 11:13:03 2026 by rpki-client