Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa
File: Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa (raw, json)
Hash identifier: QB6C0uxCV7SQdXcJHImW1BXzGq3++ihGTPgOICCuJd8=
Subject key identifier: 4E:3D:D4:29:66:22:F4:52:79:17:6C:8E:F0:F2:58:5D:B2:69:7D:CF
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 019D1E2F246379A876BB538837DB1AF5A7DF
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa
Signing time: Tue 24 Mar 2026 04:51:39 +0000
ROA not before: Tue 24 Mar 2026 04:51:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54253
IP address blocks: 51.170.4.0/22 maxlen: 24
79.72.22.0/23 maxlen: 24
79.72.36.0/23 maxlen: 24
79.72.39.0/24 maxlen: 24
79.72.96.0/22 maxlen: 24
79.72.96.0/23 maxlen: 24
79.72.98.0/23 maxlen: 24
79.72.100.0/23 maxlen: 24
79.72.104.0/21 maxlen: 24
79.72.112.0/21 maxlen: 24
79.72.128.0/22 maxlen: 24
79.72.128.0/23 maxlen: 24
79.72.130.0/23 maxlen: 24
79.72.132.0/23 maxlen: 24
79.72.136.0/21 maxlen: 24
79.72.144.0/21 maxlen: 24
79.76.21.0/24 maxlen: 24
79.76.22.0/23 maxlen: 24
79.76.64.0/22 maxlen: 24
79.76.64.0/23 maxlen: 24
79.76.66.0/23 maxlen: 24
79.76.68.0/23 maxlen: 24
79.76.72.0/21 maxlen: 24
79.76.80.0/21 maxlen: 24
80.225.0.0/22 maxlen: 24
80.225.0.0/23 maxlen: 24
80.225.2.0/23 maxlen: 24
80.225.4.0/23 maxlen: 24
80.225.8.0/21 maxlen: 24
80.225.16.0/21 maxlen: 24
80.225.32.0/22 maxlen: 24
80.225.32.0/23 maxlen: 24
80.225.34.0/23 maxlen: 24
80.225.36.0/23 maxlen: 24
80.225.40.0/21 maxlen: 24
80.225.48.0/21 maxlen: 24
80.225.96.0/22 maxlen: 24
80.225.96.0/23 maxlen: 24
80.225.98.0/23 maxlen: 24
80.225.100.0/23 maxlen: 24
80.225.104.0/21 maxlen: 24
80.225.112.0/21 maxlen: 24
84.8.0.0/22 maxlen: 24
84.8.0.0/23 maxlen: 24
84.8.2.0/23 maxlen: 24
84.8.4.0/23 maxlen: 24
84.8.8.0/21 maxlen: 24
84.8.16.0/21 maxlen: 24
84.8.32.0/22 maxlen: 24
84.8.32.0/23 maxlen: 24
84.8.34.0/23 maxlen: 24
84.8.36.0/23 maxlen: 24
84.8.40.0/21 maxlen: 24
84.8.48.0/21 maxlen: 24
84.8.160.0/22 maxlen: 24
84.8.160.0/23 maxlen: 24
84.8.162.0/23 maxlen: 24
84.8.164.0/23 maxlen: 24
84.8.168.0/21 maxlen: 24
84.8.176.0/21 maxlen: 24
84.235.128.0/22 maxlen: 24
84.235.128.0/23 maxlen: 24
84.235.130.0/23 maxlen: 24
84.235.132.0/23 maxlen: 24
84.235.136.0/21 maxlen: 24
84.235.144.0/21 maxlen: 24
84.235.194.0/23 maxlen: 24
92.4.0.0/22 maxlen: 24
92.4.0.0/23 maxlen: 24
92.4.2.0/23 maxlen: 24
92.4.4.0/23 maxlen: 24
92.4.8.0/21 maxlen: 24
92.4.16.0/21 maxlen: 24
92.4.96.0/22 maxlen: 24
92.4.96.0/23 maxlen: 24
92.4.98.0/23 maxlen: 24
92.4.100.0/23 maxlen: 24
92.4.104.0/21 maxlen: 24
92.4.112.0/21 maxlen: 24
141.253.128.0/22 maxlen: 22
141.253.128.0/23 maxlen: 23
141.253.130.0/23 maxlen: 23
141.253.132.0/23 maxlen: 23
141.253.136.0/21 maxlen: 21
141.253.144.0/21 maxlen: 21
141.253.224.0/22 maxlen: 22
141.253.224.0/23 maxlen: 23
141.253.226.0/23 maxlen: 23
141.253.228.0/23 maxlen: 23
141.253.232.0/21 maxlen: 21
141.253.240.0/21 maxlen: 21
145.241.136.0/22 maxlen: 24
213.35.64.0/22 maxlen: 22
213.35.64.0/23 maxlen: 23
213.35.66.0/23 maxlen: 23
213.35.68.0/23 maxlen: 23
213.35.72.0/21 maxlen: 21
213.35.80.0/21 maxlen: 21
217.142.192.0/22 maxlen: 22
217.142.192.0/23 maxlen: 23
217.142.194.0/23 maxlen: 23
217.142.196.0/23 maxlen: 23
217.142.200.0/21 maxlen: 21
217.142.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1e:2f:24:63:79:a8:76:bb:53:88:37:db:1a:f5:a7:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Mar 24 04:51:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e3dd4296622f45279176c8ef0f2585db2697dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:44:17:84:02:33:6c:46:c7:d7:27:dd:3d:
57:fc:53:e8:cb:e4:c8:20:80:75:09:53:fd:b9:de:
4a:9d:4d:13:77:4a:0b:7e:c0:37:cd:4f:e8:34:90:
72:2e:a3:0f:ba:b3:f7:26:f9:7c:49:16:c2:10:17:
4f:99:7d:96:30:bc:0a:6e:6d:1a:0a:66:99:8b:0a:
a5:ad:51:ae:ee:33:90:60:ba:f7:e5:26:2d:10:0b:
28:5a:93:3b:d8:06:83:9b:b8:aa:87:e9:5f:7e:83:
9f:73:2a:7f:d7:e2:0b:d7:ed:b3:05:c6:b2:3a:40:
1f:51:e6:e4:2e:e2:24:66:38:8b:ef:53:74:f7:74:
04:f0:eb:d3:18:6b:a8:88:df:e4:58:4c:2c:9a:29:
34:50:ef:c8:a7:79:7b:bd:4c:39:12:a5:e1:4d:45:
7e:e3:25:bf:29:8a:d5:ec:b0:96:cd:d8:06:f1:6e:
43:27:4a:0b:f0:84:14:4c:a6:56:08:9c:27:16:6d:
9a:f3:35:3f:a8:ef:e4:f9:e1:84:e5:28:53:46:72:
c4:7b:13:cd:b4:a9:28:77:69:d7:8a:6d:77:b4:43:
c7:dd:e8:1b:c5:99:af:d0:b5:5d:8a:18:64:4b:44:
41:7e:3e:1b:79:dc:e0:85:01:d6:96:2f:83:86:6c:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3D:D4:29:66:22:F4:52:79:17:6C:8E:F0:F2:58:5D:B2:69:7D:CF
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/Tj3UKWYi9FJ5F2yO8PJYXbJpfc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.170.4.0/22
79.72.22.0/23
79.72.36.0/23
79.72.39.0/24
79.72.96.0-79.72.101.255
79.72.104.0-79.72.119.255
79.72.128.0-79.72.133.255
79.72.136.0-79.72.151.255
79.76.21.0-79.76.23.255
79.76.64.0-79.76.69.255
79.76.72.0-79.76.87.255
80.225.0.0-80.225.5.255
80.225.8.0-80.225.23.255
80.225.32.0-80.225.37.255
80.225.40.0-80.225.55.255
80.225.96.0-80.225.101.255
80.225.104.0-80.225.119.255
84.8.0.0-84.8.5.255
84.8.8.0-84.8.23.255
84.8.32.0-84.8.37.255
84.8.40.0-84.8.55.255
84.8.160.0-84.8.165.255
84.8.168.0-84.8.183.255
84.235.128.0-84.235.133.255
84.235.136.0-84.235.151.255
84.235.194.0/23
92.4.0.0-92.4.5.255
92.4.8.0-92.4.23.255
92.4.96.0-92.4.101.255
92.4.104.0-92.4.119.255
141.253.128.0-141.253.133.255
141.253.136.0-141.253.151.255
141.253.224.0-141.253.229.255
141.253.232.0-141.253.247.255
145.241.136.0/22
213.35.64.0-213.35.69.255
213.35.72.0-213.35.87.255
217.142.192.0-217.142.197.255
217.142.200.0-217.142.215.255
Signature Algorithm: sha256WithRSAEncryption
1f:e3:dd:ab:01:44:54:de:a0:4b:c9:8b:63:9a:3d:f1:d4:08:
3f:63:82:37:4c:39:7a:53:ab:98:14:ee:56:df:26:b7:6a:38:
90:2f:4e:99:1c:e5:19:9c:70:52:40:d2:6b:7d:3a:e7:7b:20:
dc:48:5b:84:bb:fc:db:1d:21:75:53:68:00:0c:21:5b:e8:38:
b9:ff:22:81:93:1c:64:67:fe:c3:de:73:9f:4f:2e:8b:62:68:
e0:48:d5:b6:1a:2f:fe:a1:a9:fc:98:31:c5:40:d0:c5:1f:5e:
f8:d8:b5:b3:c7:93:b5:1d:22:2f:9d:34:88:9a:ad:be:de:ca:
6b:60:bd:78:59:4c:62:39:20:85:07:13:eb:e7:cf:fd:61:bb:
cb:d5:a7:21:11:ff:d9:bd:9d:9f:18:c8:87:d5:40:8f:c1:04:
f1:4e:c8:4c:2e:6f:48:b1:d5:4c:5c:0d:76:87:1c:7c:b1:cd:
4b:4d:4b:7d:91:40:5c:0d:0a:55:28:33:27:87:ba:47:61:14:
70:fa:f9:c2:9d:39:24:05:59:1a:15:51:db:30:8f:da:38:ad:
6b:9c:f8:eb:41:dd:1c:48:07:b5:62:10:6c:87:0e:00:1a:72:
5f:bb:ac:70:a4:cb:8f:7d:25:61:c1:92:35:07:04:cf:4d:de:
65:6e:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:03:06 2026 by rpki-client