Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa
File: tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa (raw, json)
Hash identifier: fDyZCQSZKGYKwS6K6RL9aN00NMCUW0dVIOA3MqfvcuM=
Subject key identifier: B4:23:5E:57:F2:7A:55:4F:BB:06:3F:8E:7E:9B:97:84:7C:B6:91:F1
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 01A0AA2B551FE2604B0D53F0A84FE1CE688E
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa
Signing time: Wed 16 Sep 2026 12:22:41 +0000
ROA not before: Wed 16 Sep 2026 12:22:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1680
IP address blocks: 37.26.144.0/21 maxlen: 21
37.26.145.0/24 maxlen: 24
37.26.146.0/24 maxlen: 24
37.26.147.0/24 maxlen: 24
37.26.148.0/24 maxlen: 24
37.26.149.0/24 maxlen: 24
37.26.150.0/24 maxlen: 24
37.26.151.0/24 maxlen: 24
46.116.0.0/16 maxlen: 18
46.117.0.0/16 maxlen: 18
46.210.0.0/16 maxlen: 24
62.0.0.0/16 maxlen: 23
62.0.87.0/24 maxlen: 24
62.0.88.0/22 maxlen: 24
62.0.92.0/23 maxlen: 24
62.0.94.0/24 maxlen: 24
62.0.114.0/23 maxlen: 24
62.0.116.0/22 maxlen: 24
62.0.120.0/21 maxlen: 24
62.0.128.0/23 maxlen: 24
62.90.0.0/16 maxlen: 24
62.90.135.0/24 maxlen: 24
62.90.143.0/24 maxlen: 24
80.250.144.0/20 maxlen: 24
82.166.0.0/16 maxlen: 24
82.166.100.0/22 maxlen: 24
82.166.112.0/21 maxlen: 24
82.166.201.128/25 maxlen: 25
85.64.0.0/16 maxlen: 16
85.65.0.0/16 maxlen: 16
85.250.0.0/16 maxlen: 16
89.138.0.0/16 maxlen: 16
89.139.0.0/16 maxlen: 16
93.172.0.0/16 maxlen: 16
93.173.0.0/16 maxlen: 16
95.35.0.0/16 maxlen: 24
109.186.0.0/16 maxlen: 16
109.253.0.0/16 maxlen: 24
141.226.132.0/24 maxlen: 24
141.226.134.0/24 maxlen: 24
147.161.8.0/21 maxlen: 24
147.234.22.0/24 maxlen: 24
147.234.27.0/24 maxlen: 24
147.234.27.0/25 maxlen: 25
147.234.27.128/25 maxlen: 25
147.234.28.0/24 maxlen: 24
147.234.43.0/24 maxlen: 24
147.234.83.0/24 maxlen: 24
147.234.84.0/24 maxlen: 24
147.234.86.0/24 maxlen: 24
176.12.128.0/17 maxlen: 24
176.13.0.0/16 maxlen: 24
192.115.84.0/22 maxlen: 24
192.115.112.0/20 maxlen: 24
192.115.140.0/22 maxlen: 24
192.115.152.0/21 maxlen: 24
192.115.160.0/22 maxlen: 24
192.115.200.0/21 maxlen: 24
192.116.32.0/19 maxlen: 24
192.118.28.0/22 maxlen: 22
192.118.28.0/23 maxlen: 23
192.118.30.0/23 maxlen: 23
192.118.84.0/22 maxlen: 24
194.90.0.0/16 maxlen: 24
194.90.1.0/24 maxlen: 24
194.90.229.0/24 maxlen: 24
199.203.0.0/16 maxlen: 24
199.203.1.0/24 maxlen: 24
199.203.21.0/24 maxlen: 24
199.203.76.0/24 maxlen: 24
199.203.191.0/24 maxlen: 24
207.232.0.0/18 maxlen: 18
207.232.50.0/24 maxlen: 24
212.29.192.0/18 maxlen: 18
212.29.244.0/24 maxlen: 24
212.143.0.0/16 maxlen: 24
212.143.194.0/24 maxlen: 24
212.150.0.0/16 maxlen: 24
212.235.0.0/17 maxlen: 24
217.132.0.0/16 maxlen: 16
2001:4df0::/29 maxlen: 32
2001:4df0::/32 maxlen: 32
2001:4df1::/32 maxlen: 32
2001:4df2::/32 maxlen: 32
2001:4df3::/32 maxlen: 32
2001:4df4::/32 maxlen: 32
2001:4df5::/32 maxlen: 32
2001:4df6::/32 maxlen: 32
2001:4df7::/32 maxlen: 32
2a02:148::/29 maxlen: 32
2a02:148::/32 maxlen: 32
2a02:149::/32 maxlen: 32
2a02:14a::/32 maxlen: 32
2a02:14b::/32 maxlen: 32
2a02:14c::/32 maxlen: 32
2a02:14d::/32 maxlen: 32
2a02:14e::/32 maxlen: 32
2a02:14f::/32 maxlen: 32
2a03:c5c0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:2b:55:1f:e2:60:4b:0d:53:f0:a8:4f:e1:ce:68:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Sep 16 12:22:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b4235e57f27a554fbb063f8e7e9b97847cb691f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fd:dd:f9:bc:9a:d6:99:cb:93:cc:63:9b:0b:
b6:49:e4:01:7d:80:58:10:31:74:1e:2a:de:5a:95:
2e:bd:f6:c1:a4:fd:51:92:f7:d0:ad:2e:a9:5b:a9:
0e:29:c4:f5:e7:84:5a:64:6c:17:34:6d:bd:8a:dd:
1a:5e:16:7e:16:32:5b:8e:3e:43:c5:d5:9a:01:6d:
11:86:d9:d7:0d:34:41:99:35:bb:d7:58:19:d5:18:
07:59:ce:69:6a:1b:75:c7:f8:f2:62:d2:4c:95:90:
f4:95:f6:1a:17:5f:63:d2:5d:52:6a:1a:9a:31:da:
95:6e:8c:f9:2b:93:25:dc:55:1d:0d:0f:d6:f4:0d:
dc:65:9b:11:1f:f6:72:98:16:88:27:e3:04:8a:47:
d3:76:0d:2d:ee:fc:75:89:72:c3:2d:d2:82:7c:7d:
8b:ac:16:81:3b:6a:fb:da:3a:cf:51:cc:f2:80:54:
67:e3:48:b7:62:9e:35:a5:f5:3f:ee:f7:0b:2b:f0:
ab:a2:8a:70:5b:dc:bc:25:19:2b:71:81:58:fe:e9:
f9:ac:fe:b4:b2:b9:67:33:00:ad:ac:8a:68:69:42:
9c:e4:26:cd:18:48:b1:e1:f5:bc:17:b3:9e:f1:41:
10:5c:f5:ee:ad:32:c3:17:54:ae:4b:40:1c:8e:fb:
9b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:23:5E:57:F2:7A:55:4F:BB:06:3F:8E:7E:9B:97:84:7C:B6:91:F1
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/tCNeV_J6VU-7Bj-OfpuXhHy2kfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.144.0/21
46.116.0.0/15
46.210.0.0/16
62.0.0.0/16
62.90.0.0/16
80.250.144.0/20
82.166.0.0/16
85.64.0.0/15
85.250.0.0/16
89.138.0.0/15
93.172.0.0/15
95.35.0.0/16
109.186.0.0/16
109.253.0.0/16
141.226.132.0/24
141.226.134.0/24
147.161.8.0/21
147.234.22.0/24
147.234.27.0-147.234.28.255
147.234.43.0/24
147.234.83.0-147.234.84.255
147.234.86.0/24
176.12.128.0-176.13.255.255
192.115.84.0/22
192.115.112.0/20
192.115.140.0/22
192.115.152.0-192.115.163.255
192.115.200.0/21
192.116.32.0/19
192.118.28.0/22
192.118.84.0/22
194.90.0.0/16
199.203.0.0/16
207.232.0.0/18
212.29.192.0/18
212.143.0.0/16
212.150.0.0/16
212.235.0.0/17
217.132.0.0/16
IPv6:
2001:4df0::/29
2a02:148::/29
2a03:c5c0::/32
Signature Algorithm: sha256WithRSAEncryption
08:09:6d:1d:ed:09:1f:e2:0e:de:cf:45:c3:f3:d4:7e:57:0e:
93:ae:ce:96:2c:f7:a5:9f:d3:8b:93:c0:8f:f5:85:61:2c:46:
75:f0:04:ba:19:b4:f9:43:60:69:7b:19:85:b6:c2:30:5c:da:
04:44:b2:f8:ff:9d:a2:cb:c7:ee:6a:03:fe:cf:71:6c:1b:15:
79:f1:c2:aa:13:72:49:a3:24:68:28:90:15:d8:22:47:e3:c5:
7e:02:39:27:16:85:d1:0b:e4:2d:0c:1b:05:69:69:b0:0b:63:
23:4c:53:2e:27:c8:a8:2b:63:f6:88:21:bb:ab:a1:b1:71:f4:
8d:a7:b6:0e:00:71:e3:ba:7c:ee:ab:d0:d5:18:b0:2f:5f:1f:
49:27:2b:c8:39:f5:64:95:90:b7:4d:ff:92:8f:42:8f:3f:ef:
f4:35:ff:19:84:6d:0f:7d:c3:65:80:30:97:f5:41:9c:17:f9:
22:35:b2:01:f3:52:a4:80:00:55:ab:47:de:f3:95:4b:0a:ed:
72:51:d4:ba:2b:72:ea:61:e6:c6:c5:5f:6c:02:38:c6:68:95:
b0:a0:db:b1:55:8c:b4:15:f8:54:37:03:67:fc:cb:ab:7c:04:
ee:ab:19:69:8e:5d:05:31:ce:79:27:ee:14:27:79:0a:5b:5c:
f9:bf:46:fb
-----BEGIN CERTIFICATE-----
MIIGFDCCBPygAwIBAgISAaCqK1Uf4mBLDVPwqE/hzmiOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjYwOTE2MTIyMjQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDIzNWU1N2YyN2E1NTRmYmIwNjNmOGU3ZTliOTc4NDdjYjY5MWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/3d+bya1pnLk8xjmwu2SeQBfYBY
EDF0HireWpUuvfbBpP1RkvfQrS6pW6kOKcT154RaZGwXNG29it0aXhZ+FjJbjj5D
xdWaAW0RhtnXDTRBmTW711gZ1RgHWc5paht1x/jyYtJMlZD0lfYaF19j0l1Sahqa
MdqVboz5K5Ml3FUdDQ/W9A3cZZsRH/ZymBaIJ+MEikfTdg0t7vx1iXLDLdKCfH2L
rBaBO2r72jrPUczygFRn40i3Yp41pfU/7vcLK/CroopwW9y8JRkrcYFY/un5rP60
srlnMwCtrIpoaUKc5CbNGEix4fW8F7Oe8UEQXPXurTLDF1SuS0AcjvubAwIDAQAB
o4IDIDCCAxwwHQYDVR0OBBYEFLQjXlfyelVPuwY/jn6bl4R8tpHxMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEvdENOZVZfSjZWVS03QmotT2ZwdVhoSHkya2ZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBNAYIKwYBBQUHAQcBAf8EggEjMIIBHzCB/wQCAAEwgfgD
BAMlGpADAwEudAMDAC7SAwMAPgADAwA+WgMEBFD6kAMDAFKmAwMBVUADAwBV+gMD
AVmKAwMBXawDAwBfIwMDAG26AwMAbf0DBACN4oQDBACN4oYDBAOToQgDBACT6hYw
DAMEAJPqGwMEAJPqHAMEAJPqKzAMAwQAk+pTAwQAk+pUAwQAk+pWMAsDBAewDIAD
AwGwDAMEAsBzVAMEBMBzcAMEAsBzjDAMAwQDwHOYAwQCwHOgAwQDwHPIAwQFwHQg
AwQCwHYcAwQCwHZUAwMAwloDAwDHywMEBs/oAAMEBtQdwAMDANSPAwMA1JYDBAfU
6wADAwDZhDAbBAIAAjAVAwUDIAFN8AMFAyoCAUgDBQAqA8XAMA0GCSqGSIb3DQEB
CwUAA4IBAQAICW0d7Qkf4g7ez0XD89R+Vw6Trs6WLPeln9OLk8CP9YVhLEZ18AS6
GbT5Q2BpexmFtsIwXNoERLL4/52iy8fuagP+z3FsGxV58cKqE3JJoyRoKJAV2CJH
48V+AjknFoXRC+QtDBsFaWmwC2MjTFMuJ8ioK2P2iCG7q6GxcfSNp7YOAHHjunzu
q9DVGLAvXx9JJyvIOfVklZC3Tf+Sj0KPP+/0Nf8ZhG0PfcNlgDCX9UGcF/kiNbIB
81KkgABVq0fe85VLCu1yUdS6K3LqYebGxV9sAjjGaJWwoNuxVYy0FfhUNwNn/Mur
fATuqxlpjl0FMc55J+4UJ3kKW1z5v0b7
-----END CERTIFICATE-----
Generated at Sat Oct 3 11:13:44 2026 by rpki-client