Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FoQTiahvzBKUCpn7etUo9O3_YRk.roa
File: FoQTiahvzBKUCpn7etUo9O3_YRk.roa (raw, json)
Hash identifier: eqQnMeSpqkPoAzk+xmiIF9mTGp9v1B0Lq1WTnQdRFQk=
Subject key identifier: 16:84:13:89:A8:6F:CC:12:94:0A:99:FB:7A:D5:28:F4:ED:FF:61:19
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FECEC85EB646355DBA7AB4600F5D990E7
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FoQTiahvzBKUCpn7etUo9O3_YRk.roa
Signing time: Mon 10 Aug 2026 18:25:51 +0000
ROA not before: Mon 10 Aug 2026 18:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
72.35.242.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.92.0/24 maxlen: 24
78.17.102.0/24 maxlen: 24
78.17.104.0/24 maxlen: 24
78.17.105.0/24 maxlen: 24
78.17.106.0/24 maxlen: 24
78.17.114.0/24 maxlen: 24
78.17.117.0/24 maxlen: 24
78.17.124.0/24 maxlen: 24
78.17.125.0/24 maxlen: 24
78.17.126.0/24 maxlen: 24
78.17.130.0/24 maxlen: 24
78.17.131.0/24 maxlen: 24
78.17.135.0/24 maxlen: 24
78.17.144.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.153.0/24 maxlen: 24
78.17.158.0/24 maxlen: 24
78.17.160.0/24 maxlen: 24
78.17.161.0/24 maxlen: 24
78.17.180.0/24 maxlen: 24
78.17.185.0/24 maxlen: 24
78.17.186.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
78.17.208.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.41.0/24 maxlen: 24
89.125.42.0/24 maxlen: 24
89.125.49.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.119.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.124.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.185.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.212.0/24 maxlen: 24
89.125.250.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ec:ec:85:eb:64:63:55:db:a7:ab:46:00:f5:d9:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 10 18:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=16841389a86fcc12940a99fb7ad528f4edff6119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f4:fd:1f:ce:00:54:13:07:f2:a1:ca:5d:26:
47:51:34:c8:5a:9e:64:00:a1:34:62:2f:71:60:39:
dc:6f:4f:0d:62:d3:30:cd:44:27:1c:99:23:11:db:
60:74:7d:5f:98:3e:14:6d:4e:ca:3b:9d:f8:1f:aa:
de:fa:74:36:67:96:8b:c1:81:d3:3a:ec:ea:b0:60:
36:f9:00:f8:c2:23:da:c9:cf:33:da:a9:2e:32:ca:
39:75:23:72:ae:c6:58:ed:40:ab:95:18:32:44:46:
d4:76:bb:3d:c6:c0:5e:10:3a:7e:e0:80:90:43:a6:
33:7e:b3:1b:f2:c5:6c:b4:5d:1e:81:b2:45:a8:23:
52:a0:d9:81:d9:e7:90:83:76:70:aa:f7:bd:a0:ed:
d5:ea:5b:21:6f:85:4c:1e:d4:b7:06:c8:07:16:ad:
45:8c:bd:e5:0c:d2:56:26:17:a9:57:5a:c4:c1:de:
68:71:14:a2:40:3e:ec:b9:99:e9:b3:79:cc:0f:98:
d3:2c:81:fd:a1:ed:63:ac:ce:b6:d8:3a:42:bd:3a:
96:f9:1e:00:7a:ca:7f:ca:de:49:60:65:5b:e2:c2:
53:f7:66:7a:0b:e7:7c:18:a8:85:d3:01:6c:f7:d8:
02:59:df:bf:7b:b4:23:30:ff:08:b8:b1:2b:33:bc:
d9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:84:13:89:A8:6F:CC:12:94:0A:99:FB:7A:D5:28:F4:ED:FF:61:19
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FoQTiahvzBKUCpn7etUo9O3_YRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
72.35.242.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.92.0/24
78.17.102.0/24
78.17.104.0-78.17.106.255
78.17.114.0/24
78.17.117.0/24
78.17.124.0-78.17.126.255
78.17.130.0/23
78.17.135.0/24
78.17.144.0/24
78.17.150.0/24
78.17.153.0/24
78.17.158.0/24
78.17.160.0/23
78.17.180.0/24
78.17.185.0-78.17.186.255
78.17.188.0/24
78.17.192.0/24
78.17.198.0/24
78.17.208.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.41.0-89.125.42.255
89.125.49.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.119.0/24
89.125.122.0-89.125.124.255
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.185.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.212.0/24
89.125.250.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
104.143.205.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
00:41:20:47:80:40:86:5b:f7:db:39:f0:08:7d:54:5f:8b:80:
e6:b8:4c:f5:91:bc:12:40:bf:21:cd:90:85:c6:55:77:cb:f0:
06:e8:a7:52:b9:5b:f3:51:43:a1:bb:f3:7e:65:a9:f0:0d:bb:
de:98:e0:97:f4:4a:ac:7e:73:c9:0a:f3:7a:b2:d7:2b:01:de:
bc:33:89:3e:50:bc:96:f0:09:c8:e1:1e:61:a3:f0:d6:1f:53:
c3:1a:3a:cb:51:f5:b9:61:eb:20:ac:94:a3:14:35:94:b5:28:
64:57:03:0f:37:81:40:78:3f:4c:4e:8e:8c:31:54:88:b3:12:
09:f4:88:59:23:ee:27:b7:c8:73:7c:81:aa:67:b3:cf:15:66:
f6:6e:da:d7:73:c0:d3:14:82:0a:7c:72:c1:bf:13:92:a1:cc:
96:7e:93:d3:37:82:f3:b1:fd:53:c7:f9:cc:cd:0e:75:a5:e0:
01:bb:d1:2f:87:f6:bc:03:74:0b:cd:3e:47:1e:9c:aa:88:a3:
dd:a6:c0:24:61:3d:d4:1d:b0:45:c7:3e:76:cf:83:58:34:7a:
98:b9:3b:a0:55:78:d5:6b:0f:be:4b:71:bd:b3:e9:f9:f1:07:
12:77:ea:e0:74:97:b8:ad:db:e7:19:9d:66:fe:38:81:1f:be:
ad:51:4b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 16:12:56 2026 by rpki-client