Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3aGMrMIJcB789N6pk9V99uOkCto.roa
File: 3aGMrMIJcB789N6pk9V99uOkCto.roa (raw, json)
Hash identifier: 3cwvyyUVxxSrC9Q5/L5dlE24CmsJ/4wNTXW52pdSQe0=
Subject key identifier: DD:A1:8C:AC:C2:09:70:1E:FC:F4:DE:A9:93:D5:7D:F6:E3:A4:0A:DA
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EBCF1ED2741D8553FD5084C1E9A419720
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3aGMrMIJcB789N6pk9V99uOkCto.roa
Signing time: Fri 12 Jun 2026 17:47:12 +0000
ROA not before: Fri 12 Jun 2026 17:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
72.35.242.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.102.0/24 maxlen: 24
78.17.104.0/24 maxlen: 24
78.17.105.0/24 maxlen: 24
78.17.106.0/24 maxlen: 24
78.17.114.0/24 maxlen: 24
78.17.124.0/24 maxlen: 24
78.17.125.0/24 maxlen: 24
78.17.126.0/24 maxlen: 24
78.17.130.0/24 maxlen: 24
78.17.131.0/24 maxlen: 24
78.17.135.0/24 maxlen: 24
78.17.144.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.153.0/24 maxlen: 24
78.17.160.0/24 maxlen: 24
78.17.161.0/24 maxlen: 24
78.17.180.0/24 maxlen: 24
78.17.185.0/24 maxlen: 24
78.17.186.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.49.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.119.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.124.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.185.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.212.0/24 maxlen: 24
89.125.250.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:f1:ed:27:41:d8:55:3f:d5:08:4c:1e:9a:41:97:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 12 17:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dda18cacc209701efcf4dea993d57df6e3a40ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:9b:b7:0e:84:f8:cb:eb:b2:49:55:47:f7:
9e:46:bc:a7:97:ce:e3:ae:96:1a:bd:b1:3f:d3:0f:
47:f7:ac:18:d8:41:e0:48:7d:0a:3e:79:c2:45:78:
dd:bc:5d:26:5c:68:08:e2:96:18:51:b0:40:09:ee:
90:b3:72:79:8f:7e:bf:9e:bd:ad:f7:0e:79:06:d9:
35:14:85:1c:a7:fe:de:b6:ab:06:8b:b3:5b:35:30:
19:95:14:47:f6:a1:70:45:8c:12:01:1a:8f:24:cc:
3b:49:cd:2d:16:7c:b7:8f:da:b6:1c:8b:71:74:11:
0a:21:cf:dc:42:ee:26:f5:b5:3b:54:2b:28:8b:ff:
62:a0:ec:b8:f5:fb:4b:46:19:0a:77:d2:9b:6b:c0:
cc:d1:be:2a:a6:c5:be:65:e3:c3:9b:2b:33:93:4c:
40:1b:83:65:ea:cf:9d:4c:bd:50:6a:1e:84:82:d4:
4f:1e:7a:d0:6d:12:91:fc:40:f8:67:3c:aa:50:fe:
d2:ab:d4:6c:1a:b7:c6:82:64:45:a3:ce:3c:c7:44:
a1:0f:ed:73:9c:bb:f4:16:7f:bc:15:0e:ca:28:1b:
8d:af:00:53:d0:0c:8d:47:bf:f3:25:b2:2c:10:ec:
c1:d6:0a:8c:06:4e:9e:c6:4e:43:4b:eb:a6:a0:7e:
18:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A1:8C:AC:C2:09:70:1E:FC:F4:DE:A9:93:D5:7D:F6:E3:A4:0A:DA
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/3aGMrMIJcB789N6pk9V99uOkCto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
72.35.242.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.102.0/24
78.17.104.0-78.17.106.255
78.17.114.0/24
78.17.124.0-78.17.126.255
78.17.130.0/23
78.17.135.0/24
78.17.144.0/24
78.17.150.0/24
78.17.153.0/24
78.17.160.0/23
78.17.180.0/24
78.17.185.0-78.17.186.255
78.17.192.0/24
78.17.198.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.49.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.119.0/24
89.125.122.0-89.125.124.255
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.185.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.212.0/24
89.125.250.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
104.143.205.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:d6:51:a2:47:8f:6b:1a:a3:94:43:56:60:f6:56:44:18:ca:
cb:b6:7a:24:2b:2e:31:ec:08:c2:22:f2:85:2b:05:cb:21:8b:
ee:58:a9:33:13:67:7b:45:53:d9:63:6f:1e:84:42:3a:b4:02:
9a:e2:80:b7:8c:8d:56:7e:01:67:95:55:12:2c:b4:eb:1d:e1:
fd:58:99:47:4f:3e:00:b8:80:f8:ef:a3:c7:d6:38:43:50:12:
00:b3:8f:a8:22:ba:d8:6e:37:08:ee:2f:c5:1b:0f:0f:11:12:
2f:d4:a7:b8:b0:86:c2:8b:4a:18:b3:e9:83:61:65:5d:3c:da:
02:42:bc:5f:fa:36:41:40:64:2c:08:9f:f7:d6:29:56:5a:04:
44:31:66:2d:80:31:61:24:6e:60:ec:2e:fe:2d:9a:92:54:25:
81:de:34:40:a2:44:5e:6f:2c:66:d1:3c:e2:c5:86:28:00:1b:
5f:ba:5b:15:50:a5:74:26:2a:37:cc:b9:ef:f6:4d:05:3f:95:
bc:3d:d1:f9:a1:fc:c4:7c:7b:7f:3d:d1:c5:15:3e:8c:70:80:
23:4e:00:78:d3:ff:7e:22:bb:df:98:d1:4e:6a:3b:8d:b8:45:
8a:0e:37:87:38:bb:4f:ec:79:55:b6:e1:91:85:09:f6:4f:a4:
0e:d0:c8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:39:44 2026 by rpki-client