Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_S5Nxf7-9UH2Lpr7LBxnDwKCVKk.roa
File: _S5Nxf7-9UH2Lpr7LBxnDwKCVKk.roa (raw, json)
Hash identifier: l+H80/5FQJM92m96QHuRx9T0EFeRz4PH13iHtfGefjk=
Subject key identifier: FD:2E:4D:C5:FE:FE:F5:41:F6:2E:9A:FB:2C:1C:67:0F:02:82:54:A9
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0E85927DE48853297C8BFAB29BE6B4640
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_S5Nxf7-9UH2Lpr7LBxnDwKCVKk.roa
Signing time: Mon 28 Sep 2026 14:09:12 +0000
ROA not before: Mon 28 Sep 2026 14:09:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.136.0/24 maxlen: 24
78.17.137.0/24 maxlen: 24
78.17.138.0/24 maxlen: 24
78.17.139.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.189.0/24 maxlen: 24
78.17.190.0/23 maxlen: 23
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.40.0/24 maxlen: 24
89.125.41.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.144.0/22 maxlen: 22
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.165.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.200.0/24 maxlen: 24
89.125.201.0/24 maxlen: 24
89.125.202.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
104.143.204.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
104.143.206.0/24 maxlen: 24
104.143.207.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 04:10:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:59:27:de:48:85:32:97:c8:bf:ab:29:be:6b:46:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 28 14:09:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd2e4dc5fefef541f62e9afb2c1c670f028254a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3c:8d:12:72:b5:be:ed:e8:6e:bc:65:bf:84:
d2:56:57:e0:21:90:f8:87:04:ac:44:19:1f:f7:b7:
3e:a9:4e:df:dc:e1:06:7e:d5:15:71:e8:a9:ff:1b:
39:0c:c6:23:5e:65:04:18:01:a6:24:70:6c:72:a6:
75:dc:f5:d9:a0:9a:92:46:75:70:45:08:5f:36:e1:
9e:34:28:88:13:39:38:61:7d:80:2a:df:47:33:ee:
88:d2:06:84:03:5c:0e:03:10:13:7e:4b:45:79:4b:
05:a4:67:3e:9d:73:13:4d:e1:94:54:a4:88:2a:d8:
59:4f:eb:1a:d3:32:30:d7:1f:58:f1:8f:49:d0:f7:
e0:73:b6:0a:ba:21:5c:db:9c:68:b6:f0:ba:a4:6e:
19:e3:28:96:ed:86:1d:14:65:7f:74:5a:52:5b:50:
e7:9a:d4:04:e9:b1:d9:7b:24:28:d3:68:7b:fc:90:
21:8c:c6:d2:4b:19:dc:ee:7f:4e:42:d3:ed:cb:10:
4f:41:0e:2a:2f:00:ab:e2:63:5e:98:07:52:35:d5:
40:89:0b:21:23:4d:17:d5:f0:e9:31:cd:2c:fa:3b:
fd:54:76:73:33:ae:18:da:0c:3c:11:d7:cb:aa:66:
25:4e:8e:62:81:2b:e7:69:ce:96:53:36:b3:e6:17:
b9:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2E:4D:C5:FE:FE:F5:41:F6:2E:9A:FB:2C:1C:67:0F:02:82:54:A9
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_S5Nxf7-9UH2Lpr7LBxnDwKCVKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
78.17.136.0/22
78.17.188.0/22
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.40.0/23
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.144.0/22
89.125.151.0-89.125.152.255
89.125.165.0/24
89.125.189.0/24
89.125.200.0/22
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
104.143.204.0/22
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
40:f0:c8:62:52:42:64:09:3c:47:80:78:4b:99:dc:2a:24:31:
3f:f9:7c:a7:23:4f:0f:1a:ea:a3:36:2f:df:7d:e0:2b:cb:a8:
ce:a6:15:cc:f3:bd:0e:26:9b:e1:4c:c8:80:7c:4d:bf:ea:7b:
a2:36:84:aa:7b:7c:2f:ca:d6:2a:8b:5b:7a:de:9b:a6:31:06:
8d:2c:4c:60:5a:73:3a:8a:2e:31:1b:96:a9:57:28:4c:83:a7:
53:5d:ee:66:b8:2f:46:f5:e6:fa:c2:ba:10:a5:15:27:b7:8b:
2f:38:28:96:7e:74:b6:bb:63:18:81:f0:b1:e9:1f:09:b7:3a:
01:c8:f6:46:f3:d0:78:54:46:12:09:b9:62:0d:28:cf:86:dd:
2e:99:54:e6:08:6a:fe:39:15:16:4d:f4:0a:bc:0f:19:1c:ec:
9f:86:b0:70:13:b0:6d:a5:98:7d:ec:51:3c:a2:2b:55:f7:42:
59:24:ab:73:d0:72:98:39:bb:11:e9:87:de:5e:60:d1:16:67:
ce:8a:21:24:e9:81:a7:25:3e:6a:73:c2:d1:f4:af:f0:40:03:
3a:5f:29:91:02:be:e8:3b:0d:e5:38:0c:93:c0:6b:4c:fb:91:
16:9c:f5:16:35:ee:22:3e:68:3a:b2:5f:de:d2:ac:58:6d:18:
a4:89:f3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:54:07 2026 by rpki-client