Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f1tLXmk69oJywNeh_aHr4BAOoQc.roa
File: f1tLXmk69oJywNeh_aHr4BAOoQc.roa (raw, json)
Hash identifier: hAr+QiflcaAfRh6bv8qFkkOUSwvtT7lK6d0BIl6mWyw=
Subject key identifier: 7F:5B:4B:5E:69:3A:F6:82:72:C0:D7:A1:FD:A1:EB:E0:10:0E:A1:07
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F13ED252B8E904EC1D6565D863C294E6A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f1tLXmk69oJywNeh_aHr4BAOoQc.roa
Signing time: Mon 29 Jun 2026 15:08:56 +0000
ROA not before: Mon 29 Jun 2026 15:08:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.136.0/24 maxlen: 24
78.17.137.0/24 maxlen: 24
78.17.138.0/24 maxlen: 24
78.17.139.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.189.0/24 maxlen: 24
78.17.190.0/23 maxlen: 23
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.144.0/22 maxlen: 22
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.200.0/24 maxlen: 24
89.125.201.0/24 maxlen: 24
89.125.202.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
104.143.204.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
104.143.206.0/24 maxlen: 24
104.143.207.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 13:43:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:ed:25:2b:8e:90:4e:c1:d6:56:5d:86:3c:29:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 15:08:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7f5b4b5e693af68272c0d7a1fda1ebe0100ea107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:c9:95:05:76:51:b9:16:28:1d:f6:73:60:
e0:f0:cd:54:53:2e:98:cf:cc:a4:a0:59:21:c8:8c:
1b:62:e9:1a:e0:1e:60:87:69:ae:d1:51:18:49:97:
a3:fd:91:05:d9:95:ca:f9:f2:53:dd:fd:13:14:71:
f3:41:1a:d4:9c:a2:7f:59:38:f5:21:fa:2d:36:54:
2b:04:69:85:95:82:24:69:ab:7e:49:e9:0c:89:7f:
58:ab:57:8f:ce:df:9e:25:73:26:5d:2f:e4:f8:f9:
6b:c6:e1:20:67:96:5c:66:3e:eb:a4:57:28:63:2e:
46:b3:d9:3a:0f:19:56:ab:48:04:58:4d:dd:57:f5:
2b:4c:c8:97:01:28:d3:c4:02:fc:99:86:84:d7:08:
9b:cf:eb:8c:a3:99:fd:c8:3c:7d:d2:49:e6:cc:17:
f9:5c:40:b5:1d:64:4e:11:a7:e7:f7:e6:2c:e1:b2:
34:ea:1d:d7:f9:b7:6b:49:7f:9b:71:ca:46:ce:5d:
cf:59:3b:f7:e5:2c:f1:6a:7c:01:d6:02:aa:19:aa:
fd:c2:3a:7a:54:bd:3d:68:31:12:6d:fe:1c:e7:31:
1c:a9:21:22:60:46:50:af:bf:a4:27:5c:55:20:85:
4f:31:db:3d:d7:d8:b1:24:46:b6:e5:e1:0d:55:0f:
52:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5B:4B:5E:69:3A:F6:82:72:C0:D7:A1:FD:A1:EB:E0:10:0E:A1:07
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/f1tLXmk69oJywNeh_aHr4BAOoQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
78.17.136.0/22
78.17.188.0/22
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.144.0/22
89.125.151.0-89.125.152.255
89.125.189.0/24
89.125.200.0/22
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
104.143.204.0/22
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:f5:4e:d4:f0:b3:47:9e:11:5b:2d:7b:e2:72:b0:0d:a5:42:
85:b4:06:60:5a:ce:69:06:55:fe:0f:3c:76:1c:a2:5f:5a:5b:
ad:31:f3:f4:6e:c9:fc:5f:af:ec:9a:fe:7e:7e:fd:73:4a:dd:
be:f8:ba:c4:fd:8c:ce:38:74:39:e3:cd:db:76:66:b4:34:df:
30:65:be:e8:86:b3:8b:5a:8b:4a:93:7c:6e:91:c4:8c:c7:17:
7d:b0:84:d6:4e:9a:48:1f:00:14:3b:b1:57:fc:9a:fb:af:c5:
a4:30:67:d8:55:d8:b4:42:c0:8b:75:80:29:12:c7:a4:60:00:
35:c9:03:9b:a9:ba:84:a0:b1:df:83:10:ea:3d:95:78:1d:74:
89:47:c2:e5:f9:4f:61:1b:6c:8d:ef:e3:09:34:09:bc:76:d3:
67:bd:de:9d:29:04:37:30:0d:4f:eb:7b:c0:17:1c:a3:5d:14:
fb:8d:86:4f:8a:e0:0c:25:64:18:c3:6a:26:86:5e:7b:ee:62:
6a:62:e1:f2:a5:af:59:f0:e1:f5:fa:6b:b0:4c:97:fa:d8:eb:
65:d1:5e:53:23:d7:4b:c8:d3:63:b1:7c:c8:56:06:30:ee:79:
71:6b:3d:69:99:a4:e5:cb:aa:41:57:a7:5e:93:c5:6c:24:b5:
40:72:9b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 15:48:33 2026 by rpki-client