Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U_UbpvizZTlwrt68s4BoaWy31U0.roa
File: U_UbpvizZTlwrt68s4BoaWy31U0.roa (raw, json)
Hash identifier: 7DeZNBT7rlWdyxk756tC/Rg4Kf3r2Hc6byVwo2MKQD4=
Subject key identifier: 53:F5:1B:A6:F8:B3:65:39:70:AE:DE:BC:B3:80:68:69:6C:B7:D5:4D
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019C7A1A5C31121EB89B23D824D371860D1E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U_UbpvizZTlwrt68s4BoaWy31U0.roa
Signing time: Fri 20 Feb 2026 08:11:13 +0000
ROA not before: Fri 20 Feb 2026 08:11:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Feb 2026 11:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7a:1a:5c:31:12:1e:b8:9b:23:d8:24:d3:71:86:0d:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Feb 20 08:11:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f51ba6f8b3653970aedebcb38068696cb7d54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8e:99:d1:04:2e:66:b5:58:5c:b1:f7:78:56:
4d:02:68:bb:70:c4:75:da:5a:6c:91:e8:4e:86:f3:
e0:60:fe:8f:fd:79:84:30:6b:b0:98:12:23:b4:56:
7d:c7:31:4f:c0:9c:c3:65:de:d8:a5:3b:97:66:8d:
27:bb:99:6e:93:de:c9:61:d7:1b:e6:2f:da:fb:dc:
ac:eb:87:ca:1c:df:a0:7e:72:6a:3f:d4:00:fa:37:
d5:01:d0:3c:4d:95:ac:5b:48:6c:c9:4b:55:ef:f5:
d6:53:ad:c4:70:69:27:af:d9:fc:7d:2e:91:14:48:
2a:f0:b5:d8:33:6f:01:a2:79:94:c8:b0:18:cb:e6:
d5:b1:69:a2:ab:ee:8f:78:cd:e2:f0:f9:9a:70:8c:
fe:d6:1f:c7:b6:aa:5f:1a:e5:19:2d:c9:5e:39:6e:
b7:72:f5:3c:e7:65:44:06:22:58:8d:cd:8a:a5:6f:
0a:41:ea:9a:02:21:89:95:a7:fa:20:af:fc:70:67:
36:0d:0e:dd:27:e5:8a:77:a6:16:b0:0b:76:cf:51:
4b:fc:5f:11:9d:0b:c7:58:cb:4b:e9:67:38:21:d9:
16:0c:b0:71:a6:4e:06:05:08:e1:9b:ba:85:da:c2:
32:ea:53:77:55:d0:7f:53:33:07:85:da:a8:77:e2:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F5:1B:A6:F8:B3:65:39:70:AE:DE:BC:B3:80:68:69:6C:B7:D5:4D
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U_UbpvizZTlwrt68s4BoaWy31U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.95.0/24
89.125.98.0/24
89.125.131.0/24
89.125.152.0/24
89.125.189.0/24
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
47:52:90:71:16:9a:3c:b0:8f:93:9f:85:c0:c9:ef:1c:7a:65:
5f:7b:f9:a6:1f:ad:53:10:4a:e6:f2:a3:9c:3c:53:ed:bd:23:
58:23:5f:70:be:cf:f8:fd:66:4c:ff:5a:77:47:a1:7f:ad:51:
7f:7b:95:8f:85:30:56:26:6a:64:02:02:c3:c4:82:71:3b:a4:
83:97:f5:0b:16:1b:cf:a5:f7:cf:a6:00:aa:6d:05:0a:a1:a2:
2e:a8:22:dc:a8:48:55:9f:75:fb:e6:10:48:93:49:3d:ae:40:
14:9b:ec:2a:3a:72:c4:fd:b0:1c:04:3b:91:d0:0a:18:2e:a6:
16:83:4e:3a:db:54:d4:89:48:af:65:34:c2:96:9a:bc:22:a5:
de:56:ff:db:d7:63:15:30:a7:7c:04:3f:55:87:9e:14:67:75:
01:c6:fc:b3:1e:89:71:9c:4e:b2:61:71:6b:c8:43:ef:65:23:
73:ce:2d:66:d0:62:93:77:b7:58:1a:2c:3c:11:7a:36:c0:59:
12:ad:5d:5a:1d:0a:5b:9f:06:22:fe:7e:dd:c2:b7:9d:4f:ff:
b0:5e:04:39:a9:33:75:9b:70:0c:dd:bf:73:8d:c9:f2:84:42:
19:d3:de:6d:3e:0f:84:07:7e:2e:5d:8e:1d:2a:8e:00:1d:8a:
8e:39:10:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 23 20:00:31 2026 by rpki-client