Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/TT4xF4Dyb738kO2dN8JItJaMoWE.roa
File: TT4xF4Dyb738kO2dN8JItJaMoWE.roa (raw, json)
Hash identifier: dg4Eqectcr3c1QNLlz5RcTz95oUMXRrTMjKfCdqKF0M=
Subject key identifier: 4D:3E:31:17:80:F2:6F:BD:FC:90:ED:9D:37:C2:48:B4:96:8C:A1:61
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 01A1AC7531DB761C48448A7072B777F68827
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/TT4xF4Dyb738kO2dN8JItJaMoWE.roa
Signing time: Thu 05 Nov 2026 16:05:23 +0000
ROA not before: Thu 05 Nov 2026 16:05:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6718
IP address blocks: 5.154.224.0/24 maxlen: 24
37.156.37.0/24 maxlen: 24
89.35.4.0/24 maxlen: 24
89.35.5.0/24 maxlen: 24
89.37.187.0/24 maxlen: 24
89.40.133.0/24 maxlen: 24
89.43.240.0/24 maxlen: 24
89.43.241.0/24 maxlen: 24
89.43.242.0/24 maxlen: 24
89.43.243.0/24 maxlen: 24
89.43.244.0/24 maxlen: 24
89.43.245.0/24 maxlen: 24
89.43.246.0/24 maxlen: 24
89.43.247.0/24 maxlen: 24
91.208.75.0/24 maxlen: 24
91.239.230.0/24 maxlen: 24
92.114.88.0/24 maxlen: 24
92.114.89.0/24 maxlen: 24
92.114.90.0/24 maxlen: 24
92.114.91.0/24 maxlen: 24
94.176.187.0/24 maxlen: 24
128.0.34.0/24 maxlen: 24
128.0.36.0/24 maxlen: 24
185.36.252.0/24 maxlen: 24
193.93.142.0/23 maxlen: 23
193.162.136.0/24 maxlen: 24
195.206.164.0/24 maxlen: 24
2a00:ece0::/32 maxlen: 32
2a04:6c80::/32 maxlen: 32
2a04:6c81::/32 maxlen: 32
2a04:6c82::/32 maxlen: 32
2a04:6c83::/32 maxlen: 32
2a04:6c84::/32 maxlen: 32
2a04:6c85::/32 maxlen: 32
2a04:6c86::/32 maxlen: 32
2a04:6c87::/32 maxlen: 32
2a05:1c00::/32 maxlen: 32
2a05:1c01::/32 maxlen: 32
2a05:1c02::/32 maxlen: 32
2a05:1c03::/32 maxlen: 32
2a05:1c04::/32 maxlen: 32
2a05:1c05::/32 maxlen: 32
2a05:1c06::/32 maxlen: 32
2a05:1c07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ac:75:31:db:76:1c:48:44:8a:70:72:b7:77:f6:88:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Nov 5 16:05:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d3e311780f26fbdfc90ed9d37c248b4968ca161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:42:5b:07:2c:c5:69:fb:c4:e9:f4:e1:af:09:
bb:ec:bd:54:8a:66:b1:a9:dd:e4:e0:8f:ae:14:53:
47:71:62:8e:8c:23:30:4d:29:dc:aa:87:31:0a:8d:
70:77:03:a2:00:c3:3d:79:86:5e:71:84:bf:80:c9:
b6:43:75:07:32:58:7f:80:96:a8:b3:d3:1f:e4:9a:
a2:bd:1c:2e:d6:8f:6c:77:83:59:d8:53:c1:69:11:
04:9d:4a:04:ac:14:8f:9d:03:d1:2d:79:46:be:ff:
a2:19:94:c4:b0:a3:0d:59:21:ef:48:23:b7:76:c3:
1e:53:e8:b9:0f:fd:58:63:dc:ea:74:14:f3:95:21:
1a:ad:d8:2f:b2:a3:d1:e4:40:88:0e:39:55:4d:3e:
79:c7:35:c2:a0:4e:3a:c2:2f:37:54:b4:8b:a8:ad:
d2:c9:ee:12:16:8c:6a:d6:b3:0c:5c:94:f1:ef:a5:
e0:3b:e3:e6:9a:6b:c8:e7:c3:db:ef:28:42:40:49:
f8:49:96:2a:15:46:fe:86:11:bf:b1:52:ca:96:22:
48:ee:3a:64:9e:26:aa:7e:ba:ed:d1:b4:6c:2f:67:
29:46:1a:6d:57:ea:0a:9b:2b:68:fc:71:a3:c4:f3:
50:f5:33:ca:d9:57:e7:77:cc:75:2d:d6:4b:88:f2:
79:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3E:31:17:80:F2:6F:BD:FC:90:ED:9D:37:C2:48:B4:96:8C:A1:61
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/TT4xF4Dyb738kO2dN8JItJaMoWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.154.224.0/24
37.156.37.0/24
89.35.4.0/23
89.37.187.0/24
89.40.133.0/24
89.43.240.0/21
91.208.75.0/24
91.239.230.0/24
92.114.88.0/22
94.176.187.0/24
128.0.34.0/24
128.0.36.0/24
185.36.252.0/24
193.93.142.0/23
193.162.136.0/24
195.206.164.0/24
IPv6:
2a00:ece0::/32
2a04:6c80::/29
2a05:1c00::/29
Signature Algorithm: sha256WithRSAEncryption
a6:2d:d6:1d:35:24:b2:3b:0d:f8:e8:bf:d7:c4:59:2b:30:45:
40:a5:63:ce:57:99:22:51:9e:4f:a1:27:79:f2:43:f0:e2:47:
77:05:ff:74:a6:37:a9:1e:8a:28:74:12:b1:b3:14:ea:66:48:
f4:86:8a:91:a5:c0:be:3c:0e:95:c9:aa:a7:0d:ab:6f:a5:b5:
a7:2a:c1:4d:2d:0d:96:b1:60:dd:f2:ae:c4:d0:d0:30:7d:c1:
23:57:02:b7:c8:b0:72:fb:1b:c9:a5:53:a4:9c:b1:99:58:e0:
59:4e:2a:f6:f2:17:23:fd:a6:71:a2:6c:1e:88:e5:cc:ad:64:
9e:59:82:a2:ff:17:99:03:7c:b5:1d:54:40:3a:f6:09:3c:da:
a2:a0:40:ef:85:10:b2:48:7e:64:cb:da:87:29:c6:66:46:9d:
fe:6d:9a:59:e5:87:38:2c:73:54:00:b3:2e:f1:c1:03:6b:90:
d5:0b:c3:e7:51:50:fa:9c:be:95:5a:89:45:f8:4f:48:2f:2a:
99:61:f9:6c:27:9b:bf:77:76:3a:7d:2a:02:51:9b:66:13:23:
03:7d:a4:55:9f:c2:84:d0:ad:91:41:b5:14:95:6f:d0:6a:84:
dc:ed:8a:fb:b9:30:9a:ae:5a:e6:70:c8:d6:c0:09:ab:f9:2f:
0b:9d:c5:92
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAaGsdTHbdhxIRIpwcrd39ognMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk
YmM3YjMwHhcNMjYxMTA1MTYwNTIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDNlMzExNzgwZjI2ZmJkZmM5MGVkOWQzN2MyNDhiNDk2OGNhMTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkJbByzFafvE6fThrwm77L1Uimax
qd3k4I+uFFNHcWKOjCMwTSncqocxCo1wdwOiAMM9eYZecYS/gMm2Q3UHMlh/gJao
s9Mf5JqivRwu1o9sd4NZ2FPBaREEnUoErBSPnQPRLXlGvv+iGZTEsKMNWSHvSCO3
dsMeU+i5D/1YY9zqdBTzlSEardgvsqPR5ECIDjlVTT55xzXCoE46wi83VLSLqK3S
ye4SFoxq1rMMXJTx76XgO+PmmmvI58Pb7yhCQEn4SZYqFUb+hhG/sVLKliJI7jpk
niaqfrrt0bRsL2cpRhptV+oKmyto/HGjxPNQ9TPK2Vfnd8x1LdZLiPJ55wIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFE0+MReA8m+9/JDtnTfCSLSWjKFhMB8GA1UdIwQY
MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt
NTQ4NDQwMmNlYjdhLzEvVFQ0eEY0RHliNzM4a08yZE44Skl0SmFNb1dFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh
LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBmBAIAATBgAwQABZrg
AwQAJZwlAwQBWSMEAwQAWSW7AwQAWSiFAwQDWSvwAwQAW9BLAwQAW+/mAwQCXHJY
AwQAXrC7AwQAgAAiAwQAgAAkAwQAuST8AwQBwV2OAwQAwaKIAwQAw86kMBsEAgAC
MBUDBQAqAOzgAwUDKgRsgAMFAyoFHAAwDQYJKoZIhvcNAQELBQADggEBAKYt1h01
JLI7Dfjov9fEWSswRUClY85XmSJRnk+hJ3nyQ/DiR3cF/3SmN6keiih0ErGzFOpm
SPSGipGlwL48DpXJqqcNq2+ltacqwU0tDZaxYN3yrsTQ0DB9wSNXArfIsHL7G8ml
U6ScsZlY4FlOKvbyFyP9pnGibB6I5cytZJ5ZgqL/F5kDfLUdVEA69gk82qKgQO+F
ELJIfmTL2ocpxmZGnf5tmlnlhzgsc1QAsy7xwQNrkNULw+dRUPqcvpVaiUX4T0gv
Kplh+Wwnm793djp9KgJRm2YTIwN9pFWfwoTQrZFBtRSVb9BqhNztivu5MJquWuZw
yNbACav5LwudxZI=
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:00:48 2026 by rpki-client