Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/acVyvFnUKkSS3WeOXLkE5AdNXt8.roa
File: acVyvFnUKkSS3WeOXLkE5AdNXt8.roa (raw, json)
Hash identifier: najwfRfAiuIXvFYjW6VL6PFxT2/NkkVW3S3KbDzrsg4=
Subject key identifier: 69:C5:72:BC:59:D4:2A:44:92:DD:67:8E:5C:B9:04:E4:07:4D:5E:DF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D67E04CAC61AC286B5EBBC25823D182DC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/acVyvFnUKkSS3WeOXLkE5AdNXt8.roa
Signing time: Tue 07 Apr 2026 12:17:26 +0000
ROA not before: Tue 07 Apr 2026 12:17:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Apr 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:e0:4c:ac:61:ac:28:6b:5e:bb:c2:58:23:d1:82:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Apr 7 12:17:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=69c572bc59d42a4492dd678e5cb904e4074d5edf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:59:d6:84:05:e3:0d:e8:6e:e0:eb:2d:9a:51:
e2:5d:a2:5f:f2:b5:45:49:aa:30:79:dd:23:11:e0:
a7:68:c2:9d:9d:08:8f:c0:37:d7:61:ba:b8:0e:b4:
b0:31:ec:5a:63:b5:2d:40:17:87:db:04:1d:d2:31:
14:07:d5:e5:5a:2c:98:aa:82:22:7b:5d:13:3d:b9:
10:a7:13:5e:ad:db:d7:74:5f:d2:b3:ed:ff:8d:27:
fc:6a:07:47:78:08:31:c2:77:c6:99:3a:d0:ac:38:
c1:8c:c9:28:3c:0f:3c:f7:78:73:24:e6:02:b3:e4:
94:b9:a6:ea:98:71:ec:6d:23:cc:e1:fc:31:a2:b1:
a5:3e:75:fe:02:f0:f4:1d:3b:b9:59:d4:ac:b0:7e:
15:83:c2:54:ce:57:08:03:51:3d:bb:00:be:5a:89:
78:c8:28:35:8e:16:83:aa:6f:ae:a2:62:cd:f9:3a:
7a:83:b8:51:a2:f9:2c:f1:1f:8d:85:4f:90:74:ef:
8b:08:e3:77:d7:54:b5:00:ac:6e:40:4c:3c:c0:b1:
99:9c:93:c9:4e:eb:64:af:02:b7:7f:15:75:b1:88:
80:da:24:2c:7c:4d:13:7c:d8:6f:1c:8d:25:bb:ba:
1c:f6:cb:d3:93:3c:f7:4c:4c:32:92:5f:ce:7b:e3:
59:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C5:72:BC:59:D4:2A:44:92:DD:67:8E:5C:B9:04:E4:07:4D:5E:DF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/acVyvFnUKkSS3WeOXLkE5AdNXt8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.152.0/24
89.125.189.0/24
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
04:62:87:dc:15:0f:b7:74:e4:7d:57:96:cd:88:c9:ce:41:cf:
26:af:62:87:45:7d:15:97:92:06:2b:d9:ee:7f:59:74:4f:57:
9d:c9:77:65:78:5a:1f:e2:fb:da:23:77:33:b6:5e:0b:b9:0e:
2f:a2:51:46:ed:d9:e6:dc:a3:c2:a2:60:fd:43:61:54:ee:45:
f0:d4:22:bf:9c:d5:79:59:c3:7e:47:27:92:dc:40:0a:1c:d1:
cd:50:e6:f5:5c:d7:4a:71:21:00:29:4a:e4:be:14:fe:68:94:
f7:8b:06:a6:5c:30:4e:f5:5a:4b:b7:b6:6e:24:b6:f2:15:24:
e0:77:74:ce:c3:5e:e7:e4:3f:c4:2a:16:80:f6:2b:73:ff:fb:
55:7e:e2:e6:78:38:c4:49:99:b6:f6:a2:2a:7f:02:af:ee:bf:
7f:74:96:6d:2a:d9:fb:99:06:13:1d:94:d8:61:b3:0f:6c:2c:
88:af:87:1c:f1:21:cf:33:5a:9d:f6:d6:cc:79:0d:45:d7:68:
d4:99:5b:24:0b:ea:1b:ba:ff:b7:05:dc:90:aa:a0:37:76:46:
c9:cd:c7:95:1f:30:8e:66:98:ac:f3:fb:80:44:09:0d:c1:20:
4e:56:19:c9:c6:54:81:84:66:41:e9:92:c4:81:76:6d:a3:7a:
31:ca:c8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 13:49:21 2026 by rpki-client