Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jcO4fsZnt_ie-9914z9erWYnTt4.roa
File: jcO4fsZnt_ie-9914z9erWYnTt4.roa (raw, json)
Hash identifier: PcC690zeSMkTLh9MY1yHNUITgPPdBjo8ejLUDN5Bpyc=
Subject key identifier: 8D:C3:B8:7E:C6:67:B7:F8:9E:FB:DF:75:E3:3F:5E:AD:66:27:4E:DE
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A0AFB96E50D54A5B11EB61F360F5C772C2
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jcO4fsZnt_ie-9914z9erWYnTt4.roa
Signing time: Thu 17 Sep 2026 14:16:00 +0000
ROA not before: Thu 17 Sep 2026 14:16:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 2.57.242.0/24 maxlen: 24
2.57.243.0/24 maxlen: 24
45.88.15.0/24 maxlen: 24
45.135.182.0/24 maxlen: 24
72.35.242.0/24 maxlen: 24
77.81.101.0/24 maxlen: 24
78.17.2.0/24 maxlen: 24
78.17.9.0/24 maxlen: 24
78.17.10.0/24 maxlen: 24
78.17.13.0/24 maxlen: 24
78.17.14.0/24 maxlen: 24
78.17.15.0/24 maxlen: 24
78.17.16.0/24 maxlen: 24
78.17.24.0/24 maxlen: 24
78.17.37.0/24 maxlen: 24
78.17.38.0/24 maxlen: 24
78.17.41.0/24 maxlen: 24
78.17.42.0/24 maxlen: 24
78.17.45.0/24 maxlen: 24
78.17.53.0/24 maxlen: 24
78.17.56.0/24 maxlen: 24
78.17.57.0/24 maxlen: 24
78.17.59.0/24 maxlen: 24
78.17.60.0/24 maxlen: 24
78.17.63.0/24 maxlen: 24
78.17.68.0/24 maxlen: 24
78.17.74.0/24 maxlen: 24
78.17.78.0/24 maxlen: 24
78.17.80.0/24 maxlen: 24
78.17.102.0/24 maxlen: 24
78.17.104.0/24 maxlen: 24
78.17.105.0/24 maxlen: 24
78.17.106.0/24 maxlen: 24
78.17.114.0/24 maxlen: 24
78.17.117.0/24 maxlen: 24
78.17.124.0/24 maxlen: 24
78.17.125.0/24 maxlen: 24
78.17.126.0/24 maxlen: 24
78.17.130.0/24 maxlen: 24
78.17.131.0/24 maxlen: 24
78.17.135.0/24 maxlen: 24
78.17.144.0/24 maxlen: 24
78.17.150.0/24 maxlen: 24
78.17.153.0/24 maxlen: 24
78.17.158.0/24 maxlen: 24
78.17.160.0/24 maxlen: 24
78.17.170.0/24 maxlen: 24
78.17.180.0/24 maxlen: 24
78.17.185.0/24 maxlen: 24
78.17.186.0/24 maxlen: 24
78.17.188.0/24 maxlen: 24
78.17.192.0/24 maxlen: 24
78.17.198.0/24 maxlen: 24
78.17.208.0/24 maxlen: 24
79.110.227.0/24 maxlen: 24
85.204.18.0/24 maxlen: 24
89.35.119.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
89.37.185.0/24 maxlen: 24
89.39.120.0/24 maxlen: 24
89.40.70.0/24 maxlen: 24
89.125.0.0/24 maxlen: 24
89.125.1.0/24 maxlen: 24
89.125.2.0/24 maxlen: 24
89.125.3.0/24 maxlen: 24
89.125.17.0/24 maxlen: 24
89.125.18.0/24 maxlen: 24
89.125.19.0/24 maxlen: 24
89.125.25.0/24 maxlen: 24
89.125.41.0/24 maxlen: 24
89.125.42.0/24 maxlen: 24
89.125.49.0/24 maxlen: 24
89.125.51.0/24 maxlen: 24
89.125.53.0/24 maxlen: 24
89.125.54.0/24 maxlen: 24
89.125.56.0/24 maxlen: 24
89.125.60.0/24 maxlen: 24
89.125.61.0/24 maxlen: 24
89.125.63.0/24 maxlen: 24
89.125.65.0/24 maxlen: 24
89.125.68.0/24 maxlen: 24
89.125.73.0/24 maxlen: 24
89.125.77.0/24 maxlen: 24
89.125.85.0/24 maxlen: 24
89.125.89.0/24 maxlen: 24
89.125.90.0/24 maxlen: 24
89.125.91.0/24 maxlen: 24
89.125.92.0/24 maxlen: 24
89.125.95.0/24 maxlen: 24
89.125.98.0/24 maxlen: 24
89.125.104.0/24 maxlen: 24
89.125.119.0/24 maxlen: 24
89.125.122.0/24 maxlen: 24
89.125.123.0/24 maxlen: 24
89.125.124.0/24 maxlen: 24
89.125.130.0/24 maxlen: 24
89.125.131.0/24 maxlen: 24
89.125.151.0/24 maxlen: 24
89.125.152.0/24 maxlen: 24
89.125.159.0/24 maxlen: 24
89.125.181.0/24 maxlen: 24
89.125.185.0/24 maxlen: 24
89.125.188.0/24 maxlen: 24
89.125.197.0/24 maxlen: 24
89.125.203.0/24 maxlen: 24
89.125.210.0/24 maxlen: 24
89.125.212.0/24 maxlen: 24
89.125.250.0/24 maxlen: 24
89.125.253.0/24 maxlen: 24
94.177.13.0/24 maxlen: 24
94.177.106.0/24 maxlen: 24
94.177.145.0/24 maxlen: 24
103.56.84.0/24 maxlen: 24
103.73.35.0/24 maxlen: 24
104.143.205.0/24 maxlen: 24
167.17.40.0/24 maxlen: 24
167.17.176.0/24 maxlen: 24
167.17.177.0/24 maxlen: 24
167.17.178.0/24 maxlen: 24
167.17.180.0/24 maxlen: 24
167.17.182.0/24 maxlen: 24
185.212.119.0/24 maxlen: 24
188.208.103.0/24 maxlen: 24
188.213.0.0/24 maxlen: 24
188.214.107.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.225.0/24 maxlen: 24
194.85.249.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.135.124.0/24 maxlen: 24
202.71.12.0/24 maxlen: 24
202.71.13.0/24 maxlen: 24
202.71.15.0/24 maxlen: 24
204.77.1.0/24 maxlen: 24
206.245.129.0/24 maxlen: 24
206.245.131.0/24 maxlen: 24
206.245.133.0/24 maxlen: 24
206.245.134.0/24 maxlen: 24
206.245.135.0/24 maxlen: 24
206.245.157.0/24 maxlen: 24
206.245.159.0/24 maxlen: 24
208.123.185.0/24 maxlen: 24
208.123.190.0/24 maxlen: 24
208.123.191.0/24 maxlen: 24
212.192.0.0/24 maxlen: 24
212.192.8.0/24 maxlen: 24
212.192.11.0/24 maxlen: 24
212.192.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:af:b9:6e:50:d5:4a:5b:11:eb:61:f3:60:f5:c7:72:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 17 14:16:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8dc3b87ec667b7f89efbdf75e33f5ead66274ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:72:bd:69:0e:d1:81:c1:c6:55:cf:9e:a9:
cc:d8:1d:94:33:47:d6:be:d1:fc:bf:e5:7b:fd:60:
bc:25:c2:18:ba:d6:48:73:2c:ab:82:ae:39:dd:3d:
d0:71:fb:f7:9b:e6:86:33:ed:a1:a3:65:85:f2:33:
25:be:c7:40:4d:1d:c7:2a:4c:82:9f:bf:16:43:3b:
02:47:5d:6e:5f:13:47:6f:f2:c0:8a:93:23:86:21:
f1:ea:c3:49:ec:a1:83:f7:69:ae:cf:70:f8:77:ed:
be:56:6c:02:5f:ff:d0:67:76:e3:61:7c:e6:7e:bc:
9d:e9:f9:65:5a:ea:a4:68:cf:fe:18:bd:02:60:b4:
e9:ca:29:89:7c:83:10:73:1d:d1:54:4a:78:ad:62:
36:70:24:3a:3b:30:94:b3:40:ff:aa:2f:59:80:52:
eb:da:33:58:97:0a:7e:af:77:72:02:6d:ef:57:12:
26:04:92:47:6a:b0:d6:d1:48:b9:07:c4:36:36:00:
04:ab:f2:16:d6:2f:2b:61:e0:c0:2a:f9:f5:71:cb:
1d:42:f8:16:2a:5b:c8:ea:26:6b:e0:ef:dd:86:3d:
de:f3:44:21:9d:89:39:e0:cf:42:39:52:dc:ba:d0:
e9:28:d3:26:f8:d5:9d:c3:19:21:22:1e:27:ec:c2:
18:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C3:B8:7E:C6:67:B7:F8:9E:FB:DF:75:E3:3F:5E:AD:66:27:4E:DE
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/jcO4fsZnt_ie-9914z9erWYnTt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.242.0/23
45.88.15.0/24
45.135.182.0/24
72.35.242.0/24
77.81.101.0/24
78.17.2.0/24
78.17.9.0-78.17.10.255
78.17.13.0-78.17.16.255
78.17.24.0/24
78.17.37.0-78.17.38.255
78.17.41.0-78.17.42.255
78.17.45.0/24
78.17.53.0/24
78.17.56.0/23
78.17.59.0-78.17.60.255
78.17.63.0/24
78.17.68.0/24
78.17.74.0/24
78.17.78.0/24
78.17.80.0/24
78.17.102.0/24
78.17.104.0-78.17.106.255
78.17.114.0/24
78.17.117.0/24
78.17.124.0-78.17.126.255
78.17.130.0/23
78.17.135.0/24
78.17.144.0/24
78.17.150.0/24
78.17.153.0/24
78.17.158.0/24
78.17.160.0/24
78.17.170.0/24
78.17.180.0/24
78.17.185.0-78.17.186.255
78.17.188.0/24
78.17.192.0/24
78.17.198.0/24
78.17.208.0/24
79.110.227.0/24
85.204.18.0/24
89.35.119.0/24
89.35.129.0/24
89.37.185.0/24
89.39.120.0/24
89.40.70.0/24
89.125.0.0/22
89.125.17.0-89.125.19.255
89.125.25.0/24
89.125.41.0-89.125.42.255
89.125.49.0/24
89.125.51.0/24
89.125.53.0-89.125.54.255
89.125.56.0/24
89.125.60.0/23
89.125.63.0/24
89.125.65.0/24
89.125.68.0/24
89.125.73.0/24
89.125.77.0/24
89.125.85.0/24
89.125.89.0-89.125.92.255
89.125.95.0/24
89.125.98.0/24
89.125.104.0/24
89.125.119.0/24
89.125.122.0-89.125.124.255
89.125.130.0/23
89.125.151.0-89.125.152.255
89.125.159.0/24
89.125.181.0/24
89.125.185.0/24
89.125.188.0/24
89.125.197.0/24
89.125.203.0/24
89.125.210.0/24
89.125.212.0/24
89.125.250.0/24
89.125.253.0/24
94.177.13.0/24
94.177.106.0/24
94.177.145.0/24
103.56.84.0/24
103.73.35.0/24
104.143.205.0/24
167.17.40.0/24
167.17.176.0-167.17.178.255
167.17.180.0/24
167.17.182.0/24
185.212.119.0/24
188.208.103.0/24
188.213.0.0/24
188.214.107.0/24
193.124.36.0/24
193.124.225.0/24
194.85.249.0/24
194.85.251.0/24
194.135.124.0/24
202.71.12.0/23
202.71.15.0/24
204.77.1.0/24
206.245.129.0/24
206.245.131.0/24
206.245.133.0-206.245.135.255
206.245.157.0/24
206.245.159.0/24
208.123.185.0/24
208.123.190.0/23
212.192.0.0/24
212.192.8.0/24
212.192.11.0/24
212.192.212.0/24
Signature Algorithm: sha256WithRSAEncryption
20:d1:10:6e:2a:f9:ff:63:66:88:57:c9:61:67:cb:b2:78:34:
7e:0a:07:49:57:b3:0a:d7:06:19:a5:24:0a:19:73:33:71:bc:
bd:0d:9c:78:62:ac:31:23:3b:6f:d5:c9:d8:bd:20:dd:31:8c:
8b:9a:a9:e2:c9:86:83:99:da:e6:62:17:46:02:0d:82:ad:ad:
a0:43:7d:0e:91:c7:53:89:1d:ab:80:9f:7a:56:ce:d3:90:82:
11:6f:b2:e9:3e:b1:1c:35:d7:f6:93:5d:2a:51:eb:c1:32:d4:
7f:87:ea:dc:4c:ab:90:85:81:6b:62:e1:22:90:03:da:ad:75:
bd:fd:59:c2:5c:bd:b1:7a:64:d2:4e:7a:e2:ee:f6:6e:47:eb:
96:49:0b:bd:c4:d7:c5:9b:ef:93:ed:e8:ab:bf:cd:0a:cf:ab:
bc:08:a4:aa:77:1e:72:57:78:8a:fa:21:a2:c3:07:01:8c:d0:
13:64:f3:b9:6e:94:db:3a:1d:39:06:6c:4e:99:6e:61:a6:3a:
0c:2d:89:f4:4c:9c:a0:b3:8a:ca:b7:1e:f1:86:81:6e:66:66:
9f:0b:fe:57:8e:0d:5a:b4:87:a9:23:bc:18:37:50:b0:50:27:
b9:12:ee:2e:aa:4e:7e:24:b1:7d:dc:62:3f:af:7f:5e:30:73:
e0:e2:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:09:02 2026 by rpki-client