Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MErvAY2yl06OfMKaej13jbkAsmY.roa
File: MErvAY2yl06OfMKaej13jbkAsmY.roa (raw, json)
Hash identifier: pYl9KQqquJVioRw1yQhCiuQh0z85UWyhU0wEnjl5S7c=
Subject key identifier: 30:4A:EF:01:8D:B2:97:4E:8E:7C:C2:9A:7A:3D:77:8D:B9:00:B2:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D9B4719889DD01331FF1F7CDA8D140B4A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MErvAY2yl06OfMKaej13jbkAsmY.roa
Signing time: Fri 17 Apr 2026 11:50:21 +0000
ROA not before: Fri 17 Apr 2026 11:50:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:47:19:88:9d:d0:13:31:ff:1f:7c:da:8d:14:0b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 17 11:50:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=304aef018db2974e8e7cc29a7a3d778db900b266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b2:67:04:47:07:c3:9c:f4:15:69:90:9e:c1:
ae:8e:97:ba:9e:02:df:4c:52:b6:9f:6e:0b:f0:6a:
07:59:b2:17:5e:ee:34:f0:a9:56:30:b2:eb:54:4c:
bd:c4:ee:ea:2a:5e:45:07:4b:8c:bb:56:18:85:5f:
52:c1:f4:70:15:0d:2b:8d:b8:a1:b1:e9:5f:3c:4b:
a7:b7:88:5f:4c:93:0c:9c:33:e7:77:38:79:31:ab:
d9:a6:90:51:b2:55:39:e7:ff:6c:92:78:e9:ae:b9:
bb:7b:21:59:6a:ea:3b:b4:1d:1b:3d:76:86:c0:e3:
b1:7e:9f:a5:95:c7:de:be:bf:00:bc:a2:b8:bb:6f:
23:0e:99:58:0f:ae:d7:bc:59:e3:a4:24:8a:3e:b1:
81:87:08:ef:fb:3d:ec:3a:f9:1d:5f:9f:e1:a8:0b:
62:71:2d:1c:2c:5d:0b:57:9d:60:cb:21:9f:a1:6f:
b9:5e:8f:18:b8:8b:0c:25:ed:54:63:a6:61:87:76:
d8:30:b9:6f:f7:df:1f:73:09:44:1b:5f:63:07:57:
4a:14:25:01:11:dd:1b:cf:1f:a0:5d:14:b6:c2:6a:
ab:77:69:b1:70:d5:cc:3b:18:ee:12:57:2d:5d:d2:
f9:39:43:26:2a:85:90:b9:98:c3:8e:a3:7a:fe:b4:
61:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4A:EF:01:8D:B2:97:4E:8E:7C:C2:9A:7A:3D:77:8D:B9:00:B2:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/MErvAY2yl06OfMKaej13jbkAsmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.150.0/24
78.17.192.0/24
78.17.198.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.122.0/23
89.125.130.0/23
89.125.152.0/24
89.125.159.0/24
89.125.181.0/24
89.125.188.0/24
89.125.197.0/24
89.125.210.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:ef:7b:28:bd:02:24:15:3e:3b:d9:32:73:12:cc:af:42:d7:
e3:de:0a:e8:5e:00:78:cc:45:5b:8e:14:ef:bd:8b:eb:7c:89:
ca:9e:1c:36:03:da:90:57:1a:e3:91:da:84:6a:38:0e:d4:e5:
00:bd:d1:43:d4:8b:73:6d:b0:d3:e5:e0:37:94:e8:88:86:32:
c3:d9:0c:c0:00:98:cc:6b:a2:21:41:1b:bf:ad:8b:2e:12:89:
a6:b1:a7:1c:15:d4:78:9d:79:db:27:11:a2:02:b5:3b:1c:bf:
11:5e:0d:2a:a6:5b:83:77:c7:a2:8c:da:31:4f:ae:12:20:99:
4f:2a:e7:e3:b4:83:e1:59:de:95:13:7d:1a:12:7e:7a:4e:3c:
8f:bc:f0:0c:26:25:e7:2d:a1:5a:b5:88:70:0e:f6:74:73:f0:
e6:bb:e8:51:b6:b8:88:cc:bf:b7:c7:63:af:35:41:e4:28:60:
a4:48:6f:9c:7f:8c:27:85:40:47:e9:6f:77:a6:96:d1:c2:96:
7b:08:fd:57:57:bf:f3:d5:a9:3c:2a:de:f2:f5:74:69:66:d0:
f9:7a:33:87:05:49:e4:72:6e:87:78:5a:f0:a8:65:59:ab:c9:
58:1a:22:fd:a5:6f:6d:56:70:56:01:d8:15:58:e8:fc:2f:cf:
f4:15:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 04:47:01 2026 by rpki-client