Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U6BQrCEOp8PlTkG2JFHumDP4J2w.roa
File: U6BQrCEOp8PlTkG2JFHumDP4J2w.roa (raw, json)
Hash identifier: lRMDZmWoGXZDb9FRz9hhLVQlpEo3IqrcmbfDa5ST8vs=
Subject key identifier: 53:A0:50:AC:21:0E:A7:C3:E5:4E:41:B6:24:51:EE:98:33:F8:27:6C
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019D2F0497826986F591187F35F7817D9CB1
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U6BQrCEOp8PlTkG2JFHumDP4J2w.roa
Signing time: Fri 27 Mar 2026 11:18:43 +0000
ROA not before: Fri 27 Mar 2026 11:18:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:04:97:82:69:86:f5:91:18:7f:35:f7:81:7d:9c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Mar 27 11:18:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53a050ac210ea7c3e54e41b62451ee9833f8276c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e0:d0:b4:0c:2c:82:1b:12:92:09:58:73:59:
be:02:8f:a5:da:28:ef:a5:be:de:1b:b5:68:c5:77:
a9:da:93:ec:4a:ea:29:99:aa:c9:ce:ae:ef:7d:38:
95:47:88:85:37:bf:92:2f:b3:e4:0f:b0:8a:0c:45:
4e:69:e1:42:dd:ea:7c:6b:8e:96:e6:2e:c6:b2:c6:
f6:56:a5:a0:d6:92:d0:8e:95:33:94:cd:e1:2b:d2:
1e:69:50:71:50:46:b1:eb:f7:36:0d:4c:cb:f0:5d:
10:b9:54:5d:3f:44:35:a6:99:80:50:6e:21:29:ea:
02:63:12:2e:0e:36:62:dd:d6:5d:4b:50:c5:37:9f:
1c:21:bf:bc:5b:1b:14:b6:52:c6:a5:77:8b:dc:cf:
b9:39:3a:be:66:68:f1:11:54:e3:12:0a:b1:60:45:
7f:ee:bb:20:0d:82:3d:51:3f:ba:8e:fb:3a:be:6d:
86:3e:92:ec:7d:11:f9:67:a9:e9:90:a6:99:25:c0:
39:e4:54:45:2f:5f:59:4c:29:54:99:6a:e0:75:89:
3d:79:c1:89:88:ba:a4:39:bb:29:43:e9:92:5f:28:
bd:53:93:c8:14:21:dc:c2:79:93:21:7c:b3:bd:b7:
80:ee:73:71:05:fe:3a:00:c4:bc:e0:7d:3b:f9:9c:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A0:50:AC:21:0E:A7:C3:E5:4E:41:B6:24:51:EE:98:33:F8:27:6C
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/U6BQrCEOp8PlTkG2JFHumDP4J2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.152.0/24
89.125.189.0/24
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
92:7d:d1:17:6f:ea:6c:c7:01:fe:3b:8f:7d:68:87:cf:45:f5:
d0:66:be:24:61:20:0f:7b:83:e1:b4:dd:0d:0c:cd:48:22:ca:
ab:13:c0:66:21:34:9c:3d:9d:df:82:15:52:87:f4:4e:ab:b3:
ce:e0:a9:06:bd:86:97:3f:e7:f5:5c:07:5b:20:26:fd:06:43:
3d:bc:6a:00:43:ad:de:a3:be:87:be:3f:c6:fd:33:1f:8a:ae:
65:ed:39:b5:81:78:36:73:92:ac:b3:a3:c4:75:1c:93:4b:31:
17:00:6c:17:7c:05:1f:be:5b:f8:d5:c2:54:f0:83:84:dc:74:
a2:42:18:35:db:b0:3d:32:32:2e:78:91:6e:71:ce:7c:ef:8f:
37:27:48:82:83:f2:ef:9b:07:eb:a3:95:82:c4:5b:49:5b:0b:
57:d4:2f:e1:4a:ef:64:5c:36:6f:17:63:af:57:4f:9b:7e:d8:
a4:7e:69:80:7b:ae:f7:03:d0:f9:06:46:68:36:c7:35:25:b5:
24:bb:d1:87:90:5b:81:d2:50:64:31:87:25:72:f0:ec:18:f1:
c6:8e:52:c8:72:c2:b1:6d:ff:4b:b7:9f:5a:16:4d:05:6f:13:
8a:68:4f:3f:2c:46:41:59:f3:33:3b:85:04:1b:d2:56:ae:27:
e7:49:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:22:43 2026 by rpki-client