Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JTiR89BzfydoTHnbA5XCo6VvxFk.roa
File: JTiR89BzfydoTHnbA5XCo6VvxFk.roa (raw, json)
Hash identifier: HeR5c5TF6MYMvWs/0iP58nmbLwPvqJ8NJJQPke5Om9Q=
Subject key identifier: 25:38:91:F3:D0:73:7F:27:68:4C:79:DB:03:95:C2:A3:A5:6F:C4:59
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019E171F23AD5CC770E509E9C5F234A736B9
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JTiR89BzfydoTHnbA5XCo6VvxFk.roa
Signing time: Mon 11 May 2026 12:59:37 +0000
ROA not before: Mon 11 May 2026 12:59:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:17:1f:23:ad:5c:c7:70:e5:09:e9:c5:f2:34:a7:36:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: May 11 12:59:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=253891f3d0737f27684c79db0395c2a3a56fc459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:62:51:e0:9b:26:ad:d7:cb:21:fa:7a:91:88:
16:ce:a3:b4:c1:0b:98:b8:a8:c6:53:f9:22:f4:e8:
4d:cd:c1:60:f8:9d:cb:11:5a:dc:0d:36:5a:fb:7c:
8b:4c:28:24:8f:6e:ad:c5:a9:32:4f:45:2f:15:97:
08:90:f8:4c:53:c1:ab:87:02:21:e5:12:c1:e0:80:
63:e4:01:2f:c7:4e:62:fd:57:74:e3:8f:93:af:ac:
70:1c:27:dc:47:be:b1:de:fd:e5:11:0e:cf:d7:61:
f3:68:08:da:56:f7:62:b6:35:3f:20:a9:5d:d8:8b:
aa:e1:84:6a:2e:55:8e:cd:c9:6e:e6:b8:11:80:4e:
08:66:40:95:98:8b:27:1c:31:d1:43:37:e4:3b:7d:
b9:29:72:1b:d2:d9:0a:68:52:5d:ec:a2:0b:b3:db:
34:d2:a0:17:b8:9a:74:62:04:af:94:2d:7f:7a:de:
f2:e4:88:95:c7:2f:ef:b1:92:f8:13:b0:72:4b:0c:
a8:75:55:09:e5:4a:05:f4:f9:a5:7a:70:fd:ab:58:
10:11:db:6c:e9:51:e2:e0:21:6b:46:11:70:a8:b5:
46:d4:48:f9:dd:e0:62:f6:b6:3f:a4:86:11:42:13:
0b:4c:d5:8e:e8:39:9f:0b:41:44:1c:f9:1b:c9:5f:
4d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:38:91:F3:D0:73:7F:27:68:4C:79:DB:03:95:C2:A3:A5:6F:C4:59
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/JTiR89BzfydoTHnbA5XCo6VvxFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.150.0/24
78.17.192.0/24
78.17.198.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.122.0/23
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:8e:f3:73:00:4b:38:8c:1d:4f:26:7f:27:07:a8:54:8f:f7:
93:43:41:09:61:a6:81:77:11:39:79:2f:b7:a3:8a:87:3a:95:
fd:5c:e2:52:2e:5a:be:02:04:cb:0e:a6:c3:ef:9c:76:90:d5:
c6:7c:d0:8d:53:0a:70:38:26:e3:15:7a:12:67:94:80:8d:17:
bf:67:fe:8e:ae:87:25:4e:79:9c:d4:49:c6:46:aa:6c:c4:6a:
57:c0:b2:52:cb:2f:ab:43:e2:56:38:94:56:8d:71:04:de:a3:
74:4e:b7:ff:5e:16:dc:8e:3e:de:02:83:98:70:81:ab:05:12:
c2:31:b9:2c:1f:1d:9f:7c:89:21:a3:be:57:fd:50:23:fc:59:
58:77:1f:25:50:85:86:61:7f:23:2f:64:a8:7c:21:83:22:b0:
fa:24:c0:fe:42:d8:5a:e4:6c:a4:07:a3:67:9b:52:fc:8c:3c:
4d:34:f0:06:61:ce:a7:e9:23:10:09:df:23:19:a1:02:e1:53:
ce:af:f6:96:98:30:63:ae:a4:e9:66:af:0d:02:48:e7:03:c2:
29:86:ba:9d:67:3a:17:97:60:07:b7:41:68:b9:4b:8e:78:f3:
1a:80:57:ab:96:3c:40:7a:3a:14:fa:2f:d7:77:aa:98:e2:44:
a5:a1:50:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:05:49 2026 by rpki-client