Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FpDmZlbSvjKzAOdct_S43Koo6tg.roa
File: FpDmZlbSvjKzAOdct_S43Koo6tg.roa (raw, json)
Hash identifier: e3LjcVzWnPibipSILWuwxKn4WaFQCEHtoBp0C+IUjr8=
Subject key identifier: 16:90:E6:66:56:D2:BE:32:B3:00:E7:5C:B7:F4:B8:DC:AA:28:EA:D8
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E6425C576CAF9B670E29712EB320F9EEE
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FpDmZlbSvjKzAOdct_S43Koo6tg.roa
Signing time: Tue 26 May 2026 11:57:37 +0000
ROA not before: Tue 26 May 2026 11:57:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.144.0/22 maxlen: 22
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.200.0/24 maxlen: 24
89.125.201.0/24 maxlen: 24
89.125.202.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
104.143.204.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
104.143.206.0/24 maxlen: 24
104.143.207.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:64:25:c5:76:ca:f9:b6:70:e2:97:12:eb:32:0f:9e:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 26 11:57:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1690e66656d2be32b300e75cb7f4b8dcaa28ead8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:ed:46:49:7d:f7:c5:21:a1:c5:2a:fc:16:
44:58:3d:3c:5a:dc:2b:56:71:3b:84:60:2a:cb:aa:
67:e2:60:07:68:54:3b:0f:23:45:5e:53:22:c3:b7:
4e:5b:5a:2c:83:66:e8:1e:e9:9e:60:88:75:fc:19:
de:2d:0a:97:24:c4:bc:a3:37:29:7f:56:21:b4:0a:
47:6f:8d:de:d8:48:7f:00:8f:74:91:ab:cd:f6:6f:
05:f0:ee:1b:c7:80:c0:6c:af:50:f7:ee:11:eb:e7:
21:a8:16:e1:7b:23:5a:21:b1:e5:f4:7c:1e:05:39:
a0:54:bc:b2:36:df:4b:30:92:b0:ce:31:d5:c9:4d:
21:d3:72:cf:8d:b1:16:f7:e9:52:0e:44:4f:19:5e:
5c:a7:c6:f8:e5:67:fa:3b:2e:b5:2f:55:91:08:7d:
15:0c:86:81:42:18:4e:10:92:42:92:6b:e3:40:a0:
9c:e3:c4:0c:f8:21:47:2b:0d:ee:5e:c8:d3:a2:4c:
03:ba:25:53:d0:35:a1:a9:8d:3a:70:7a:01:53:4c:
bc:32:6b:4d:b5:49:c6:3f:9d:d4:2f:e0:11:1f:de:
30:9d:8e:56:9f:83:db:b4:aa:2b:1d:f9:ea:d4:87:
b6:92:87:6f:53:ec:5e:7b:b3:f4:e1:a2:35:bd:36:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:90:E6:66:56:D2:BE:32:B3:00:E7:5C:B7:F4:B8:DC:AA:28:EA:D8
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FpDmZlbSvjKzAOdct_S43Koo6tg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.144.0/22
89.125.151.0-89.125.152.255
89.125.189.0/24
89.125.200.0/22
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
104.143.204.0/22
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:30:31:91:99:bc:c6:ce:b5:f1:85:c4:2b:cb:da:d3:db:65:
76:82:28:57:71:ee:d2:9e:97:f7:84:b6:9d:fe:ef:0e:72:11:
f1:08:05:07:54:55:5a:49:b8:6d:25:db:93:37:40:dc:cd:da:
3b:94:96:f0:ef:4a:46:34:c6:3a:52:07:8f:10:53:c7:8c:9c:
ab:db:48:e6:16:92:f8:62:55:cb:6a:b5:8e:82:56:86:6c:fb:
ee:17:fd:16:a9:35:f8:1a:e7:72:14:31:ab:bc:ce:7b:1e:f7:
72:ae:c4:f5:93:17:33:f3:0c:b5:ca:e9:7e:ed:c4:fc:b4:25:
69:c2:da:b7:f0:2d:cd:29:06:6f:95:e4:02:30:4a:f9:d2:69:
d5:e6:b8:59:b3:1c:48:87:c4:3c:a3:32:be:a7:67:b3:20:03:
58:f4:dc:57:57:8c:ae:08:0d:fa:68:e2:1b:70:78:1b:2a:9c:
17:6a:1c:bd:1e:17:51:0d:6c:db:f5:c6:fe:0c:46:c8:9d:ca:
28:a5:a8:bb:c3:cf:0a:f5:08:d1:02:ae:2b:05:6b:81:17:a7:
63:26:5c:c8:7b:29:c2:77:cb:86:f0:7e:43:15:20:56:fb:55:
be:87:53:75:63:57:1e:6b:8c:84:fb:ec:1e:c2:38:55:07:d1:
55:aa:2d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 06:21:09 2026 by rpki-client