Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S8gPIXD-OAU7UdhyMaim13mb9h8.roa
File: S8gPIXD-OAU7UdhyMaim13mb9h8.roa (raw, json)
Hash identifier: HJCT8XjFiLVro66s3Hr57H/62zCbghawRSrfBJ6t81s=
Subject key identifier: 4B:C8:0F:21:70:FE:38:05:3B:51:D8:72:31:A8:A6:D7:79:9B:F6:1F
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019EB14779CACED4701ED55CB9F7A1CFE129
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S8gPIXD-OAU7UdhyMaim13mb9h8.roa
Signing time: Wed 10 Jun 2026 11:25:11 +0000
ROA not before: Wed 10 Jun 2026 11:25:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 45.144.172.0/24 maxlen: 24
45.144.174.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.136.0/24 maxlen: 24
78.17.137.0/24 maxlen: 24
78.17.138.0/24 maxlen: 24
78.17.139.0/24 maxlen: 24
86.107.50.0/24 maxlen: 24
86.107.100.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.125.58.0/24 maxlen: 24
89.125.70.0/24 maxlen: 24
89.125.71.0/24 maxlen: 24
89.125.76.0/24 maxlen: 24
89.125.82.0/23 maxlen: 23
89.125.88.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.105.0/24 maxlen: 24
89.125.106.0/24 maxlen: 24
89.125.107.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.137.0/24 maxlen: 24
89.125.138.0/24 maxlen: 24
89.125.139.0/24 maxlen: 24
89.125.144.0/22 maxlen: 22
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.189.0/24 maxlen: 24
89.125.200.0/24 maxlen: 24
89.125.201.0/24 maxlen: 24
89.125.202.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.213.0/24 maxlen: 24
89.125.243.0/24 maxlen: 24
89.125.244.0/24 maxlen: 24
89.125.248.0/24 maxlen: 24
92.114.54.0/24 maxlen: 24
93.113.171.0/24 maxlen: 24
93.115.106.0/24 maxlen: 24
93.119.154.0/24 maxlen: 24
93.119.195.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
104.143.204.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
104.143.206.0/24 maxlen: 24
104.143.207.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.179.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.181.0/24 maxlen: 24
167.17.183.0/24 maxlen: 24
167.17.184.0/24 maxlen: 24
167.17.185.0/24 maxlen: 24
167.17.186.0/24 maxlen: 24
167.17.187.0/24 maxlen: 24
167.17.188.0/24 maxlen: 24
167.17.189.0/24 maxlen: 24
167.17.190.0/24 maxlen: 24
185.72.8.0/24 maxlen: 24
185.141.219.0/24 maxlen: 24
185.193.102.0/24 maxlen: 24
185.198.235.0/24 maxlen: 24
188.64.142.0/24 maxlen: 24
188.212.121.0/24 maxlen: 24
193.124.49.0/24 maxlen: 24
194.58.34.0/24 maxlen: 24
194.58.44.0/24 maxlen: 24
194.58.45.0/24 maxlen: 24
194.58.46.0/24 maxlen: 24
195.88.89.0/24 maxlen: 24
195.133.192.0/24 maxlen: 24
195.133.193.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.0.0/24 maxlen: 24
204.77.2.0/24 maxlen: 24
204.77.3.0/24 maxlen: 24
206.245.128.0/24 maxlen: 24
206.245.130.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
212.192.6.0/24 maxlen: 24
212.192.12.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
212.192.15.0/24 maxlen: 24
212.192.20.0/24 maxlen: 24
212.192.21.0/24 maxlen: 24
212.192.23.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
212.192.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:47:79:ca:ce:d4:70:1e:d5:5c:b9:f7:a1:cf:e1:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 10 11:25:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bc80f2170fe38053b51d87231a8a6d7799bf61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:66:9b:2f:dd:52:37:4d:5f:4b:fa:d4:b0:
53:6e:cd:c0:08:56:44:21:1a:a6:d8:fb:85:a8:22:
ff:ba:68:d8:35:51:5e:6a:f1:c9:0b:45:e2:e4:55:
d7:43:5e:81:1d:94:89:13:bd:b8:26:24:3b:fa:2c:
08:00:d8:0b:3d:88:19:52:5f:c3:10:cb:ee:02:f6:
80:9a:6e:be:9e:c9:6e:89:ce:79:56:f6:76:fe:e7:
14:31:d2:47:6b:15:e8:b0:60:3e:1c:86:69:a2:8b:
35:9f:d8:28:a1:20:b9:dc:76:45:7c:16:d9:7e:08:
72:12:3f:7d:40:a0:cc:c8:82:94:e1:78:9f:0e:1a:
66:ca:66:c2:62:22:d0:88:8a:bc:6d:db:4f:39:e8:
2f:1c:8d:66:23:e6:53:70:9b:44:c4:60:46:69:2a:
c8:95:c1:a5:ff:31:58:dd:c0:b8:30:bc:8a:37:0c:
ca:06:52:d3:a0:5a:c3:04:81:ef:d6:83:6b:c3:f4:
43:5d:21:28:f0:28:e0:82:40:3d:51:79:b0:7b:3e:
1c:2a:5f:4d:5a:ee:8e:53:57:47:ce:de:56:bc:c7:
7d:5d:0c:da:2f:27:29:58:8c:80:ed:1b:4b:30:a6:
33:88:74:e9:f9:57:34:5a:91:9c:bb:44:7d:f1:4c:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C8:0F:21:70:FE:38:05:3B:51:D8:72:31:A8:A6:D7:79:9B:F6:1F
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/S8gPIXD-OAU7UdhyMaim13mb9h8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.172.0/24
45.144.174.0/24
77.81.101.0/24
78.17.136.0/22
86.107.50.0/24
86.107.100.0/24
89.37.185.0/24
89.125.58.0/24
89.125.70.0/23
89.125.76.0/24
89.125.82.0/23
89.125.88.0/24
89.125.95.0/24
89.125.98.0/24
89.125.104.0/22
89.125.131.0/24
89.125.137.0-89.125.139.255
89.125.144.0/22
89.125.151.0-89.125.152.255
89.125.189.0/24
89.125.200.0/22
89.125.213.0/24
89.125.243.0-89.125.244.255
89.125.248.0/24
92.114.54.0/24
93.113.171.0/24
93.115.106.0/24
93.119.154.0/24
93.119.195.0/24
94.177.13.0/24
103.56.84.0/24
104.143.204.0/22
167.17.178.0-167.17.181.255
167.17.183.0-167.17.190.255
185.72.8.0/24
185.141.219.0/24
185.193.102.0/24
185.198.235.0/24
188.64.142.0/24
188.212.121.0/24
193.124.49.0/24
194.58.34.0/24
194.58.44.0-194.58.46.255
195.88.89.0/24
195.133.192.0/23
202.71.15.0/24
204.77.0.0/24
204.77.2.0/23
206.245.128.0/24
206.245.130.0/23
206.245.133.0-206.245.134.255
206.245.157.0/24
212.192.6.0/24
212.192.12.0/23
212.192.15.0/24
212.192.20.0/23
212.192.23.0/24
212.192.214.0/23
Signature Algorithm: sha256WithRSAEncryption
1a:ae:5b:95:05:5a:6f:65:b6:24:27:87:25:48:1f:f1:b9:a9:
8e:15:d7:3e:86:bf:ad:ae:ce:7d:5d:b1:e3:39:d2:fd:f0:ea:
2b:48:13:78:ad:9a:e2:46:fc:6e:d9:5b:57:5b:57:00:b5:08:
ef:c1:0a:c7:6e:d2:69:d0:96:b7:3d:c7:8d:de:a7:0c:54:6e:
59:c9:54:92:f9:d2:a7:de:db:80:53:a6:52:57:41:bb:b0:66:
08:9b:4d:82:c2:be:e6:1f:5c:30:a9:f2:85:93:a4:ab:5e:a7:
e2:b3:1f:6e:18:4c:0e:a1:fa:24:ea:40:61:db:b3:a9:a2:14:
86:8a:29:41:1c:15:ab:7e:cc:1f:cf:29:01:8e:6b:e0:06:aa:
3c:f7:86:cb:2d:38:7b:c0:e1:09:3a:0d:de:6f:65:20:71:58:
37:b6:4e:f4:15:25:31:ea:d3:ba:61:94:b6:aa:4d:f9:51:28:
35:66:a7:16:3f:cb:5f:6e:13:73:d6:aa:13:8e:96:5d:b5:66:
d3:f2:d0:75:d1:4a:8e:58:91:03:14:1d:df:70:29:b5:0c:fd:
8f:9a:7f:a4:d9:3c:dd:e0:21:b4:f0:ce:ce:81:fc:e3:7a:9f:
06:22:a9:8c:58:f3:42:f5:75:1c:48:a1:26:c9:ae:07:4f:f7:
9c:d4:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:33 2026 by rpki-client