Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Th_TBTh4420tZ8XLo-s4PQiCHU8.roa
File: Th_TBTh4420tZ8XLo-s4PQiCHU8.roa (raw, json)
Hash identifier: 3cuouiOhWzknUOwwgncaV482R8+KXf5JiRfi6K3QCCo=
Subject key identifier: 4E:1F:D3:05:38:78:E3:6D:2D:67:C5:CB:A3:EB:38:3D:08:82:1D:4F
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 019D069F812F1724B79F6F7175DAC9C85BA6
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Th_TBTh4420tZ8XLo-s4PQiCHU8.roa
Signing time: Thu 19 Mar 2026 15:03:29 +0000
ROA not before: Thu 19 Mar 2026 15:03:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209641
IP address blocks: 46.243.7.0/24 maxlen: 24
91.200.14.0/24 maxlen: 24
91.200.15.0/24 maxlen: 24
92.62.119.0/24 maxlen: 24
94.232.248.0/24 maxlen: 24
95.81.76.0/24 maxlen: 24
95.81.114.0/24 maxlen: 24
95.81.115.0/24 maxlen: 24
95.81.123.0/24 maxlen: 24
95.81.124.0/24 maxlen: 24
95.81.125.0/24 maxlen: 24
103.82.103.0/24 maxlen: 24
104.128.128.0/24 maxlen: 24
104.128.129.0/24 maxlen: 24
109.69.60.0/24 maxlen: 24
185.87.48.0/22 maxlen: 22
185.87.48.0/24 maxlen: 24
185.87.49.0/24 maxlen: 24
185.87.50.0/24 maxlen: 24
185.87.51.0/24 maxlen: 24
185.117.152.0/22 maxlen: 22
2a06:ddc0::/29 maxlen: 29
2a0b:8040::/29 maxlen: 29
2a0b:d900::/29 maxlen: 29
2a0c:5d00:2001::/48 maxlen: 48
2a0c:6980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:06:9f:81:2f:17:24:b7:9f:6f:71:75:da:c9:c8:5b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 19 15:03:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e1fd3053878e36d2d67c5cba3eb383d08821d4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d8:c5:86:12:b9:51:ec:15:15:9e:48:4f:95:
76:8b:e4:a5:d9:08:f0:af:fc:71:c9:53:90:e7:4a:
37:5c:91:38:c0:2b:0f:45:c2:a2:3e:4b:89:7c:23:
de:3b:25:8b:6b:50:d0:93:4c:25:b1:40:6d:3d:f1:
dc:83:41:7d:bf:3b:61:7c:59:e3:82:57:e8:d6:97:
b0:13:97:40:0c:a0:ce:a7:d6:65:aa:4c:dc:8c:05:
f0:74:5a:68:2d:2c:98:a6:f6:b8:2b:b8:58:39:f6:
46:40:43:5f:c0:37:f6:37:63:e9:3d:75:82:66:fe:
2b:6d:0b:c2:05:64:85:fb:0b:5c:c8:30:59:bc:bf:
be:9d:df:d1:29:9e:08:96:d8:6f:ad:34:0b:7b:dc:
d0:24:f2:74:70:96:a5:ae:74:c2:53:c9:37:5f:fd:
a1:40:85:ea:a0:7b:14:f4:01:a8:11:d0:4e:45:d8:
a9:74:b0:22:10:b4:6f:84:a6:3c:3a:e3:dc:c0:65:
2d:22:b1:0b:3c:35:05:15:48:74:53:77:52:bd:33:
9e:18:64:d5:fe:ba:d2:61:69:07:94:1f:76:2f:e2:
b7:05:2c:ea:07:6d:72:49:06:c8:51:05:83:0c:f2:
41:81:b8:f2:51:8c:ef:03:93:45:8d:5d:09:ca:f4:
5e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:1F:D3:05:38:78:E3:6D:2D:67:C5:CB:A3:EB:38:3D:08:82:1D:4F
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Th_TBTh4420tZ8XLo-s4PQiCHU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.7.0/24
91.200.14.0/23
92.62.119.0/24
94.232.248.0/24
95.81.76.0/24
95.81.114.0/23
95.81.123.0-95.81.125.255
103.82.103.0/24
104.128.128.0/23
109.69.60.0/24
185.87.48.0/22
185.117.152.0/22
IPv6:
2a06:ddc0::/29
2a0b:8040::/29
2a0b:d900::/29
2a0c:5d00:2001::/48
2a0c:6980::/29
Signature Algorithm: sha256WithRSAEncryption
6f:18:36:be:ab:9b:01:f1:0e:1c:84:4c:c7:a7:ad:2a:7d:fe:
34:9b:be:5b:0b:39:6b:50:77:41:e1:a8:c8:ab:c1:27:46:71:
71:03:8c:09:e0:2e:e4:de:79:fb:a5:3f:f1:b0:0e:a6:a5:71:
e4:91:f3:ff:23:c6:c8:4e:31:b8:30:ff:44:e0:f5:7d:71:18:
6f:06:72:c8:36:3a:05:b5:ed:72:45:60:52:cd:f6:db:30:08:
f2:99:46:f6:a8:3c:03:77:72:9f:ed:58:b5:29:00:22:40:5e:
e2:2e:f4:77:55:2c:c4:b1:7a:f3:97:38:91:cc:64:1e:a3:3c:
28:b7:f9:90:0a:c0:f2:48:03:34:94:b9:3c:5e:e1:8b:db:59:
8a:e9:79:ea:a4:95:6b:a6:d8:7c:06:33:20:0f:27:0b:78:36:
a5:da:a5:78:65:d5:c7:ca:e9:65:b6:82:b7:c1:7e:db:9b:d2:
5d:0e:aa:a4:0a:73:ff:96:cb:1e:10:0b:27:ad:f0:18:48:2f:
ea:eb:37:0d:50:0f:aa:f3:79:44:0b:2f:c3:8d:ed:a5:0e:14:
4e:37:62:f5:2c:4d:5e:cd:f2:55:a0:77:03:53:a7:29:94:40:
46:91:1b:20:eb:29:6a:cc:ac:d8:a5:db:42:d7:2a:5c:d0:14:
6e:a1:fb:d9
-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgISAZ0Gn4EvFyS3n29xddrJyFumMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjYwMzE5MTUwMzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTFmZDMwNTM4NzhlMzZkMmQ2N2M1Y2JhM2ViMzgzZDA4ODIxZDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNjFhhK5UewVFZ5IT5V2i+Sl2Qjw
r/xxyVOQ50o3XJE4wCsPRcKiPkuJfCPeOyWLa1DQk0wlsUBtPfHcg0F9vzthfFnj
glfo1pewE5dADKDOp9ZlqkzcjAXwdFpoLSyYpva4K7hYOfZGQENfwDf2N2PpPXWC
Zv4rbQvCBWSF+wtcyDBZvL++nd/RKZ4IlthvrTQLe9zQJPJ0cJalrnTCU8k3X/2h
QIXqoHsU9AGoEdBORdipdLAiELRvhKY8OuPcwGUtIrELPDUFFUh0U3dSvTOeGGTV
/rrSYWkHlB92L+K3BSzqB21ySQbIUQWDDPJBgbjyUYzvA5NFjV0JyvReZwIDAQAB
o4ICgzCCAn8wHQYDVR0OBBYEFE4f0wU4eONtLWfFy6PrOD0Igh1PMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvVGhfVEJUaDQ0MjB0WjhYTG8tczRQUWlDSFU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGYBggrBgEFBQcBBwEB/wSBiDCBhTBWBAIAATBQAwQALvMH
AwQBW8gOAwQAXD53AwQAXuj4AwQAX1FMAwQBX1FyMAwDBABfUXsDBAFfUXwDBABn
UmcDBAFogIADBABtRTwDBAK5VzADBAK5dZgwKwQCAAIwJQMFAyoG3cADBQMqC4BA
AwUDKgvZAAMHACoMXQAgAQMFAyoMaYAwDQYJKoZIhvcNAQELBQADggEBAG8YNr6r
mwHxDhyETMenrSp9/jSbvlsLOWtQd0HhqMirwSdGcXEDjAngLuTeefulP/GwDqal
ceSR8/8jxshOMbgw/0Tg9X1xGG8Gcsg2OgW17XJFYFLN9tswCPKZRvaoPAN3cp/t
WLUpACJAXuIu9HdVLMSxevOXOJHMZB6jPCi3+ZAKwPJIAzSUuTxe4YvbWYrpeeqk
lWum2HwGMyAPJwt4NqXapXhl1cfK6WW2grfBftub0l0OqqQKc/+Wyx4QCyet8BhI
L+rrNw1QD6rzeUQLL8ON7aUOFE43YvUsTV7N8lWgdwNTpymUQEaRGyDrKWrMrNil
20LXKlzQFG6h+9k=
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:35:02 2026 by rpki-client