Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/TFK2z9rJLLs0g2zUThlUPXPbcZI.roa
File: TFK2z9rJLLs0g2zUThlUPXPbcZI.roa (raw, json)
Hash identifier: 4U8zBLVFmSIojJwH6Y+ngj/B/PvZAr0d+/opEDYSw/Y=
Subject key identifier: 4C:52:B6:CF:DA:C9:2C:BB:34:83:6C:D4:4E:19:54:3D:73:DB:71:92
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 01A1C61572894E843B3569A37EA4A96DFFAE
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/TFK2z9rJLLs0g2zUThlUPXPbcZI.roa
Signing time: Tue 10 Nov 2026 15:30:56 +0000
ROA not before: Tue 10 Nov 2026 15:30:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8560
IP address blocks: 5.250.176.0/20 maxlen: 24
31.70.0.0/16 maxlen: 24
31.70.192.0/20 maxlen: 20
46.16.72.0/21 maxlen: 24
78.137.96.0/21 maxlen: 24
81.173.112.0/22 maxlen: 24
82.165.0.0/16 maxlen: 24
85.184.248.0/22 maxlen: 24
87.106.0.0/16 maxlen: 24
157.97.104.0/21 maxlen: 24
157.97.104.0/24 maxlen: 32
157.97.105.0/24 maxlen: 32
185.48.116.0/22 maxlen: 24
194.126.206.0/24 maxlen: 24
194.164.4.0/22 maxlen: 24
194.164.8.0/22 maxlen: 24
194.164.16.0/20 maxlen: 24
194.164.48.0/20 maxlen: 24
194.164.88.0/21 maxlen: 24
194.164.120.0/21 maxlen: 24
194.164.160.0/20 maxlen: 24
194.164.192.0/20 maxlen: 24
195.20.224.0/19 maxlen: 24
212.132.64.0/18 maxlen: 24
212.227.0.0/16 maxlen: 24
213.165.64.0/19 maxlen: 24
213.165.65.0/24 maxlen: 24
213.165.69.0/24 maxlen: 24
213.165.70.0/23 maxlen: 23
213.165.70.0/24 maxlen: 24
213.165.71.0/24 maxlen: 24
213.165.74.0/24 maxlen: 24
213.165.79.0/24 maxlen: 24
213.165.80.0/23 maxlen: 23
213.165.80.0/24 maxlen: 24
213.165.81.0/24 maxlen: 24
213.165.82.0/23 maxlen: 23
213.165.84.0/24 maxlen: 24
213.165.85.0/24 maxlen: 24
213.165.86.0/23 maxlen: 23
213.165.88.0/22 maxlen: 22
213.165.92.0/24 maxlen: 24
213.165.93.0/24 maxlen: 24
213.165.94.0/23 maxlen: 23
213.244.192.0/24 maxlen: 24
217.72.192.0/20 maxlen: 24
217.154.0.0/21 maxlen: 24
217.154.8.0/22 maxlen: 24
217.154.13.0/24 maxlen: 24
217.154.14.0/23 maxlen: 24
217.154.16.0/21 maxlen: 24
217.154.24.0/24 maxlen: 24
217.154.26.0/23 maxlen: 23
217.154.32.0/22 maxlen: 22
217.154.36.0/23 maxlen: 23
217.154.38.0/24 maxlen: 24
217.154.40.0/22 maxlen: 22
217.154.44.0/23 maxlen: 23
217.154.47.0/24 maxlen: 24
217.154.48.0/24 maxlen: 24
217.154.50.0/23 maxlen: 24
217.154.52.0/22 maxlen: 24
217.154.56.0/21 maxlen: 24
217.154.64.0/21 maxlen: 24
217.154.74.0/23 maxlen: 24
217.154.76.0/22 maxlen: 24
217.154.80.0/21 maxlen: 24
217.154.88.0/23 maxlen: 24
217.154.91.0/24 maxlen: 24
217.154.92.0/22 maxlen: 24
217.154.97.0/24 maxlen: 24
217.154.98.0/23 maxlen: 23
217.154.100.0/23 maxlen: 23
217.154.102.0/24 maxlen: 24
217.154.105.0/24 maxlen: 24
217.154.106.0/23 maxlen: 23
217.154.108.0/24 maxlen: 24
217.154.112.0/21 maxlen: 21
217.154.120.0/23 maxlen: 23
217.154.124.0/23 maxlen: 23
217.154.126.0/24 maxlen: 24
217.154.130.0/24 maxlen: 24
217.154.140.0/24 maxlen: 24
217.154.142.0/23 maxlen: 24
217.154.144.0/22 maxlen: 24
217.154.148.0/23 maxlen: 24
217.154.150.0/24 maxlen: 24
217.154.152.0/22 maxlen: 24
217.154.156.0/24 maxlen: 24
217.154.159.0/24 maxlen: 24
217.154.160.0/20 maxlen: 20
217.154.177.0/24 maxlen: 24
217.154.178.0/23 maxlen: 24
217.154.180.0/22 maxlen: 24
217.154.184.0/23 maxlen: 24
217.154.186.0/24 maxlen: 24
217.154.188.0/22 maxlen: 24
217.154.192.0/20 maxlen: 20
217.154.208.0/24 maxlen: 24
217.154.210.0/23 maxlen: 23
217.154.212.0/22 maxlen: 22
217.154.216.0/23 maxlen: 23
217.154.218.0/24 maxlen: 24
217.154.220.0/24 maxlen: 24
217.154.222.0/23 maxlen: 23
217.154.224.0/22 maxlen: 22
217.154.228.0/23 maxlen: 23
217.154.231.0/24 maxlen: 24
217.154.232.0/22 maxlen: 22
217.154.237.0/24 maxlen: 24
217.154.238.0/23 maxlen: 23
217.154.240.0/22 maxlen: 24
217.154.244.0/23 maxlen: 24
217.154.247.0/24 maxlen: 24
217.154.248.0/21 maxlen: 24
217.154.248.0/24 maxlen: 24
217.160.0.0/16 maxlen: 24
217.160.124.0/23 maxlen: 24
217.160.150.0/23 maxlen: 32
2001:8d8::/29 maxlen: 48
2a02:2478::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:15:72:89:4e:84:3b:35:69:a3:7e:a4:a9:6d:ff:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: Nov 10 15:30:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c52b6cfdac92cbb34836cd44e19543d73db7192
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:c7:7d:4d:38:fe:88:47:6e:f9:b7:8c:b8:e2:
f6:46:89:8c:48:a9:b2:66:61:79:bf:5b:28:12:59:
0a:fb:ac:ea:16:2f:9a:b2:d3:20:f4:71:e9:59:7e:
3a:07:3c:67:db:e0:91:80:fe:58:38:0e:c2:e7:4b:
91:1e:99:a9:90:49:20:5e:b4:18:8c:99:77:9a:59:
bb:c5:75:9e:3f:a7:9f:91:19:72:74:d9:fc:d1:e8:
89:56:e6:e2:be:65:99:8b:07:4d:e5:ab:55:ad:11:
67:fe:ee:14:5e:64:40:9f:d9:31:cf:39:0b:dc:cb:
c4:09:dc:44:d8:31:cc:d6:97:8a:9a:2a:a6:4b:8b:
45:ed:67:38:47:41:08:d2:a9:77:92:0c:fb:be:c8:
ca:c3:c1:4e:91:e8:6c:4a:a0:ae:7d:e4:a9:e2:b6:
fe:b5:b7:39:ce:ed:92:fb:0e:47:fa:98:0d:6e:78:
f4:09:58:5c:c7:4c:78:d1:25:2e:98:86:11:44:e6:
e5:ca:71:45:13:16:ad:04:1a:72:fe:f1:c0:3d:f4:
8f:1b:23:26:50:98:5b:2f:89:a3:82:e9:03:10:65:
42:95:33:9f:be:8d:27:74:46:ee:e5:56:59:a3:d1:
9d:2b:39:7d:5b:f3:f4:5a:f9:a5:96:66:71:09:d9:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:52:B6:CF:DA:C9:2C:BB:34:83:6C:D4:4E:19:54:3D:73:DB:71:92
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/TFK2z9rJLLs0g2zUThlUPXPbcZI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.176.0/20
31.70.0.0/16
46.16.72.0/21
78.137.96.0/21
81.173.112.0/22
82.165.0.0/16
85.184.248.0/22
87.106.0.0/16
157.97.104.0/21
185.48.116.0/22
194.126.206.0/24
194.164.4.0-194.164.11.255
194.164.16.0/20
194.164.48.0/20
194.164.88.0/21
194.164.120.0/21
194.164.160.0/20
194.164.192.0/20
195.20.224.0/19
212.132.64.0/18
212.227.0.0/16
213.165.64.0/19
213.244.192.0/24
217.72.192.0/20
217.154.0.0-217.154.11.255
217.154.13.0-217.154.24.255
217.154.26.0/23
217.154.32.0-217.154.38.255
217.154.40.0-217.154.45.255
217.154.47.0-217.154.48.255
217.154.50.0-217.154.71.255
217.154.74.0-217.154.89.255
217.154.91.0-217.154.95.255
217.154.97.0-217.154.102.255
217.154.105.0-217.154.108.255
217.154.112.0-217.154.121.255
217.154.124.0-217.154.126.255
217.154.130.0/24
217.154.140.0/24
217.154.142.0-217.154.150.255
217.154.152.0-217.154.156.255
217.154.159.0-217.154.175.255
217.154.177.0-217.154.186.255
217.154.188.0-217.154.208.255
217.154.210.0-217.154.218.255
217.154.220.0/24
217.154.222.0-217.154.229.255
217.154.231.0-217.154.235.255
217.154.237.0-217.154.245.255
217.154.247.0-217.154.255.255
217.160.0.0/16
IPv6:
2001:8d8::/29
2a02:2478::/29
Signature Algorithm: sha256WithRSAEncryption
10:dd:2e:ca:d7:4d:3b:84:86:55:2a:c6:e7:1c:6c:ca:17:08:
86:9e:41:58:8a:e3:03:36:5d:67:27:65:a1:b6:36:47:48:c7:
07:8b:e3:6a:42:e3:a8:31:76:40:66:4c:4c:a3:7f:b3:b4:79:
d4:8f:e9:28:60:2f:c0:36:ec:10:f6:46:da:8a:e6:f1:fc:aa:
f5:66:50:bc:9c:17:fe:67:8b:25:fb:db:48:bf:33:89:55:d4:
45:d1:4a:11:88:18:f1:d9:55:a0:47:33:29:6c:5a:0b:d4:2d:
46:38:3c:0c:16:8f:02:1f:fe:63:41:cf:cf:00:bd:ec:73:7f:
0c:7e:00:3d:8b:c9:16:d7:2e:99:73:ba:a5:65:bd:83:1f:12:
46:c5:c1:48:27:b1:47:b2:27:b9:20:2d:12:98:56:08:ef:47:
8b:e5:df:21:ea:b3:e8:2c:6e:ec:84:c7:1b:28:67:95:c3:c2:
40:6c:1b:50:2c:cc:fe:50:b0:c0:31:2d:a5:4b:42:1f:18:f0:
4b:56:ea:4c:64:12:6c:22:c2:3b:2d:eb:1c:b1:aa:32:d0:04:
0a:7f:47:d0:68:5e:dc:35:ee:6c:26:b1:6b:10:ef:61:4d:33:
c5:27:b7:dd:d5:99:6a:fa:4e:45:0b:99:96:4a:03:e2:d3:73:
d9:fb:92:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:18:19 2026 by rpki-client