Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa
File: tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa (raw, json)
Hash identifier: 3Zet0K9hWLK6IRYOUnQC2wta7J6aQdy6xd+8jE8VWBU=
Subject key identifier: B6:3C:37:08:2B:27:04:12:D4:D7:2D:DB:29:2B:94:F0:60:1E:BB:7A
Certificate issuer: /CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Certificate serial: 019F272C5198029E3C64305BA25779F23E24
Authority key identifier: A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa
Signing time: Fri 03 Jul 2026 08:50:43 +0000
ROA not before: Fri 03 Jul 2026 08:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1836
IP address blocks: 80.86.192.0/20 maxlen: 21
80.86.192.0/24 maxlen: 24
80.86.193.0/24 maxlen: 24
80.253.80.0/21 maxlen: 22
80.254.160.0/19 maxlen: 20
81.6.0.0/19 maxlen: 20
81.6.48.0/20 maxlen: 21
81.221.0.0/16 maxlen: 17
81.221.250.0/24 maxlen: 24
81.221.252.0/24 maxlen: 24
81.221.254.0/24 maxlen: 24
82.195.224.0/19 maxlen: 20
146.228.0.0/16 maxlen: 17
146.228.64.0/24 maxlen: 24
193.72.0.0/18 maxlen: 19
193.72.64.0/21 maxlen: 21
193.72.72.0/22 maxlen: 22
193.72.76.0/23 maxlen: 23
193.72.78.0/24 maxlen: 24
193.72.81.0/24 maxlen: 24
193.72.82.0/23 maxlen: 24
193.72.84.0/22 maxlen: 23
193.72.88.0/21 maxlen: 22
193.72.96.0/19 maxlen: 20
193.72.128.0/20 maxlen: 21
193.72.148.0/22 maxlen: 23
193.72.152.0/21 maxlen: 22
193.72.160.0/22 maxlen: 23
193.72.164.0/23 maxlen: 24
193.72.167.0/24 maxlen: 24
193.72.168.0/21 maxlen: 22
193.72.176.0/21 maxlen: 22
193.72.184.0/23 maxlen: 24
193.72.187.0/24 maxlen: 24
193.72.188.0/22 maxlen: 23
193.72.192.0/20 maxlen: 21
193.72.208.0/21 maxlen: 22
193.72.217.0/24 maxlen: 24
193.72.218.0/23 maxlen: 24
193.72.220.0/22 maxlen: 23
193.72.224.0/19 maxlen: 20
193.73.0.0/18 maxlen: 19
193.73.64.0/19 maxlen: 20
193.73.80.0/20 maxlen: 20
193.73.96.0/21 maxlen: 21
193.73.96.0/22 maxlen: 22
193.73.100.0/22 maxlen: 22
193.73.104.0/23 maxlen: 24
193.73.108.0/22 maxlen: 23
193.73.112.0/24 maxlen: 24
193.73.115.0/24 maxlen: 24
193.73.116.0/22 maxlen: 23
193.73.120.0/23 maxlen: 24
193.73.123.0/24 maxlen: 24
193.73.124.0/24 maxlen: 24
193.73.126.0/23 maxlen: 24
193.73.128.0/18 maxlen: 19
193.73.192.0/20 maxlen: 21
193.73.209.0/24 maxlen: 24
193.73.210.0/24 maxlen: 24
193.73.212.0/22 maxlen: 23
193.73.216.0/21 maxlen: 22
193.73.224.0/21 maxlen: 22
193.73.232.0/22 maxlen: 23
193.73.236.0/23 maxlen: 24
193.73.239.0/24 maxlen: 24
193.73.240.0/23 maxlen: 24
193.73.244.0/22 maxlen: 23
193.73.248.0/23 maxlen: 24
193.73.252.0/22 maxlen: 23
193.193.128.0/19 maxlen: 20
194.191.0.0/16 maxlen: 17
194.191.16.0/24 maxlen: 24
194.191.18.0/24 maxlen: 24
194.191.19.0/24 maxlen: 24
194.191.20.0/24 maxlen: 24
194.191.24.0/24 maxlen: 24
194.191.25.0/24 maxlen: 24
194.191.26.0/24 maxlen: 24
194.191.28.0/24 maxlen: 24
194.191.29.0/24 maxlen: 24
194.191.30.0/24 maxlen: 24
194.191.31.0/24 maxlen: 24
195.48.0.0/16 maxlen: 17
195.49.0.0/17 maxlen: 18
195.49.6.0/24 maxlen: 24
195.49.16.0/24 maxlen: 24
195.49.78.0/24 maxlen: 24
195.49.79.0/24 maxlen: 24
195.130.160.0/19 maxlen: 20
212.59.128.0/18 maxlen: 19
2001:1b50::/29 maxlen: 29
2a01:2a8::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:27:2c:51:98:02:9e:3c:64:30:5b:a2:57:79:f2:3e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a74c6706e3fbebdff146a8a14ec2a3284a92ba62
Validity
Not Before: Jul 3 08:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b63c37082b270412d4d72ddb292b94f0601ebb7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:5e:ee:0f:10:4e:35:17:7c:3e:6d:7b:b2:
73:5d:02:c5:9c:4d:fa:1d:ba:32:78:eb:02:ba:f4:
31:1f:64:32:8c:dc:58:8d:8d:20:a2:d8:a2:c7:bd:
b0:5f:fb:e5:0b:c5:63:20:59:1f:6d:87:a4:ee:a7:
64:4b:93:b3:55:a6:6a:17:5a:23:32:70:46:55:0f:
ea:10:f0:1a:29:4f:94:f3:8e:e0:e2:57:1d:9c:7e:
8c:dd:73:12:e6:20:f2:9b:dd:54:52:83:9a:37:7a:
02:a0:ea:fe:5d:8d:16:e6:3b:cf:e5:2d:f3:52:d4:
48:c1:c6:2d:aa:bd:ec:d7:c5:81:ce:52:47:db:fd:
42:f6:7a:84:41:cc:60:53:b9:e5:e5:3f:5f:e5:13:
36:61:55:b7:28:7f:d2:9c:b5:93:70:06:f6:f1:d5:
cd:a6:60:dc:c0:17:70:e5:34:fc:75:d0:0b:23:bf:
a5:93:7c:a0:cd:af:b8:28:8c:f7:67:a7:3d:a2:53:
d3:2d:fe:59:68:dc:e1:b8:e7:96:d6:a1:ad:66:d0:
14:f5:95:f1:f8:56:4b:9b:ea:db:74:79:65:63:8c:
09:c6:86:4a:e1:18:43:0c:0d:d2:4c:a5:a7:9e:eb:
ca:8b:5a:5b:ee:be:79:a7:bd:ed:7f:50:0c:12:ab:
42:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3C:37:08:2B:27:04:12:D4:D7:2D:DB:29:2B:94:F0:60:1E:BB:7A
X509v3 Authority Key Identifier:
keyid:A7:4C:67:06:E3:FB:EB:DF:F1:46:A8:A1:4E:C2:A3:28:4A:92:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0xnBuP769_xRqihTsKjKEqSumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/tjw3CCsnBBLU1y3bKSuU8GAeu3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a0c444-9796-4f06-83f2-aa788a420aec/1/p0xnBuP769_xRqihTsKjKEqSumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.192.0/20
80.253.80.0/21
80.254.160.0/19
81.6.0.0/19
81.6.48.0/20
81.221.0.0/16
82.195.224.0/19
146.228.0.0/16
193.72.0.0-193.72.78.255
193.72.81.0-193.72.143.255
193.72.148.0-193.72.165.255
193.72.167.0-193.72.185.255
193.72.187.0-193.72.215.255
193.72.217.0-193.73.105.255
193.73.108.0-193.73.112.255
193.73.115.0-193.73.121.255
193.73.123.0-193.73.124.255
193.73.126.0-193.73.207.255
193.73.209.0-193.73.210.255
193.73.212.0-193.73.237.255
193.73.239.0-193.73.241.255
193.73.244.0-193.73.249.255
193.73.252.0/22
193.193.128.0/19
194.191.0.0/16
195.48.0.0-195.49.127.255
195.130.160.0/19
212.59.128.0/18
IPv6:
2001:1b50::/29
2a01:2a8::/29
Signature Algorithm: sha256WithRSAEncryption
bf:57:3b:4e:4b:27:3f:3b:af:b4:c4:02:f9:9a:66:d0:8c:bf:
1a:a8:2d:34:e9:99:8f:de:ac:16:98:1e:c0:9a:4b:e2:ee:b9:
ba:ae:cd:55:a1:16:8b:38:80:12:23:ae:13:db:e4:d5:3e:32:
1d:a8:de:27:28:c3:d1:bc:81:c1:25:0c:70:96:23:90:23:f1:
3f:e2:52:6c:3d:a5:2b:83:6f:8a:3d:7d:d9:24:52:7d:26:b8:
28:46:f5:f4:6d:7c:07:51:ec:af:38:3a:d4:a6:47:d2:18:ad:
ae:c5:d3:6c:5b:6c:34:2e:af:75:96:5c:db:a8:6a:cf:af:2f:
22:fb:2c:07:cc:22:ee:8c:3f:ac:02:18:e2:f9:1e:6a:b3:c2:
7e:84:e0:64:c9:f2:46:a7:6c:54:e9:2c:d7:68:86:bc:89:8b:
89:a4:08:23:f3:96:47:ec:7b:c1:36:49:3e:6a:63:52:93:22:
00:86:26:ba:24:dc:47:98:93:ef:d4:6a:d0:d2:3a:b3:14:48:
3a:e8:89:ce:4a:86:d3:1f:f2:eb:4a:7e:76:fa:dd:48:23:57:
24:2c:51:23:f2:0c:ad:cc:da:cc:be:85:72:4f:73:32:f9:95:
9e:83:97:29:fc:7a:88:b0:d3:b2:18:7a:36:0e:a6:0e:e6:c2:
5d:03:9e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:04 2026 by rpki-client