Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa
File: TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa (raw, json)
Hash identifier: yhOmAEnX77ZvAO8FCgQkABRqf6EUa68cBRvbl3kyrmE=
Subject key identifier: 4C:5B:18:B6:73:0A:F9:2D:4C:1E:38:41:EE:DB:48:31:35:18:BD:31
Certificate issuer: /CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Certificate serial: 01A0C99B350917A585CD1A7DDC986980DAEC
Authority key identifier: 09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa
Signing time: Tue 22 Sep 2026 14:53:07 +0000
ROA not before: Tue 22 Sep 2026 14:53:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202053
IP address blocks: 5.22.208.0/22 maxlen: 22
5.22.212.0/22 maxlen: 22
5.22.216.0/22 maxlen: 22
5.22.220.0/22 maxlen: 22
80.47.224.0/22 maxlen: 22
80.47.228.0/22 maxlen: 22
80.47.232.0/22 maxlen: 22
80.47.236.0/23 maxlen: 23
80.47.238.0/23 maxlen: 23
80.69.172.0/22 maxlen: 22
81.27.96.0/22 maxlen: 22
81.27.100.0/22 maxlen: 22
81.27.104.0/23 maxlen: 23
81.27.106.0/23 maxlen: 23
81.27.108.0/22 maxlen: 22
83.136.248.0/21 maxlen: 21
85.9.200.0/21 maxlen: 21
85.9.208.0/21 maxlen: 21
85.9.216.0/22 maxlen: 22
85.9.220.0/22 maxlen: 22
87.58.144.0/22 maxlen: 22
87.58.148.0/22 maxlen: 22
87.58.152.0/22 maxlen: 22
87.58.156.0/23 maxlen: 23
87.58.158.0/23 maxlen: 23
94.237.0.0/24 maxlen: 24
94.237.1.0/24 maxlen: 24
94.237.2.0/23 maxlen: 23
94.237.4.0/22 maxlen: 22
94.237.8.0/21 maxlen: 21
94.237.16.0/21 maxlen: 21
94.237.24.0/21 maxlen: 21
94.237.32.0/21 maxlen: 21
94.237.40.0/21 maxlen: 21
94.237.48.0/20 maxlen: 20
94.237.64.0/20 maxlen: 20
94.237.80.0/20 maxlen: 20
94.237.96.0/21 maxlen: 21
94.237.104.0/22 maxlen: 22
94.237.108.0/22 maxlen: 22
94.237.112.0/21 maxlen: 21
94.237.120.0/22 maxlen: 22
94.237.124.0/23 maxlen: 23
94.237.126.0/24 maxlen: 24
95.111.192.0/21 maxlen: 21
95.111.200.0/22 maxlen: 22
95.111.204.0/22 maxlen: 22
95.111.208.0/22 maxlen: 22
95.111.216.0/21 maxlen: 21
185.20.136.0/22 maxlen: 22
185.26.48.0/22 maxlen: 22
185.70.196.0/22 maxlen: 22
194.62.96.0/22 maxlen: 22
212.147.224.0/22 maxlen: 22
212.147.228.0/22 maxlen: 22
212.147.232.0/22 maxlen: 22
212.147.236.0/22 maxlen: 22
212.147.240.0/22 maxlen: 22
212.147.244.0/22 maxlen: 22
212.147.248.0/23 maxlen: 23
212.147.250.0/23 maxlen: 23
212.147.252.0/22 maxlen: 22
213.163.192.0/20 maxlen: 20
2a04:3540::/32 maxlen: 32
2a04:3541::/32 maxlen: 32
2a04:3541:8000::/34 maxlen: 34
2a04:3542::/32 maxlen: 32
2a04:3542:8000::/34 maxlen: 34
2a04:3543::/32 maxlen: 32
2a04:3544::/32 maxlen: 32
2a04:3544:8000::/34 maxlen: 34
2a04:3545::/32 maxlen: 32
2a04:3545:4000::/34 maxlen: 34
2a04:3545:8000::/34 maxlen: 34
2a04:3546::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:9b:35:09:17:a5:85:cd:1a:7d:dc:98:69:80:da:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=099a1f2dbf7b7a84ae57b8d67426b7e4e420fab5
Validity
Not Before: Sep 22 14:53:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5b18b6730af92d4c1e3841eedb48313518bd31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:9b:13:11:d8:c1:ae:04:ca:4e:0d:6d:35:
05:9e:01:0a:5e:37:6b:f7:12:70:48:46:8b:2d:4a:
44:4f:4c:2c:02:d3:65:53:8e:8e:4c:c4:3a:0c:1f:
8c:bf:3a:d2:bb:db:7a:4f:38:b2:23:40:a1:5b:cf:
ff:dc:c0:e9:a4:15:52:ae:ff:d7:60:9e:72:42:29:
f4:b7:fa:2d:51:a8:4d:95:4d:b6:66:54:c5:2c:f8:
43:91:ad:c5:ef:6d:29:b3:ec:3e:79:ac:f1:8d:e6:
fd:86:71:26:b8:e3:31:39:f3:8a:56:15:19:8d:71:
a3:8c:73:7b:5a:33:e5:9e:5e:10:d8:2b:ad:f2:dc:
6d:24:c2:63:59:2f:27:62:8c:9a:19:22:15:7d:d1:
54:04:eb:89:b9:06:62:1c:7c:50:76:c8:d9:d3:63:
73:65:31:58:dc:41:39:47:c9:80:58:ab:a2:75:08:
32:01:ca:77:be:88:aa:58:f3:a7:ca:e7:41:dc:23:
a9:d0:3b:06:0b:e3:5a:36:25:3c:1f:ff:21:2f:d8:
f9:50:6a:3b:23:51:7d:80:70:88:e1:12:e8:bb:e9:
d7:cf:62:e3:a9:b6:05:98:c9:b3:96:0c:53:8c:01:
2c:d0:82:88:2a:40:2c:2b:f4:05:c6:75:a2:7f:28:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5B:18:B6:73:0A:F9:2D:4C:1E:38:41:EE:DB:48:31:35:18:BD:31
X509v3 Authority Key Identifier:
keyid:09:9A:1F:2D:BF:7B:7A:84:AE:57:B8:D6:74:26:B7:E4:E4:20:FA:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZofLb97eoSuV7jWdCa35OQg-rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/TFsYtnMK-S1MHjhB7ttIMTUYvTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d42abb-3342-4887-af40-9cd68f221e21/1/CZofLb97eoSuV7jWdCa35OQg-rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.208.0/20
80.47.224.0/20
80.69.172.0/22
81.27.96.0/20
83.136.248.0/21
85.9.200.0-85.9.223.255
87.58.144.0/20
94.237.0.0-94.237.126.255
95.111.192.0-95.111.211.255
95.111.216.0/21
185.20.136.0/22
185.26.48.0/22
185.70.196.0/22
194.62.96.0/22
212.147.224.0/19
213.163.192.0/20
IPv6:
2a04:3540::-2a04:3546:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:e5:56:21:81:27:1d:35:2e:3f:99:b2:5a:44:50:c2:fd:c8:
a7:c5:3e:06:c5:c7:36:8d:b2:c1:c2:d5:ba:3b:45:9f:12:30:
e0:a7:1f:74:e9:dd:d7:a0:37:7d:7c:e6:d7:90:88:5f:85:ed:
1e:04:54:e7:5a:9e:d6:cb:c6:4d:10:42:4a:2f:3b:b2:5a:b4:
4d:c9:2f:48:65:bb:c8:c0:c4:69:c8:21:d7:b0:d0:d6:68:a6:
37:ce:26:22:de:08:3b:8d:36:11:e6:1e:71:87:ed:46:fa:88:
b3:cc:56:a4:5e:dd:c2:5f:74:44:b8:e7:e9:78:c7:bb:77:82:
2e:b3:89:db:50:45:ff:96:34:ac:24:57:71:0e:c8:c4:d7:26:
ff:fc:b8:83:ff:ca:02:5c:c5:c7:53:9f:ac:bd:0b:8f:c3:15:
72:cc:5b:4b:2b:96:cc:1b:fe:42:7a:46:38:e4:0e:91:1c:11:
bf:1d:5e:3e:ff:cd:41:8f:1e:af:64:e7:be:52:f0:4b:67:e4:
aa:86:12:89:71:c8:30:fd:d4:ed:c7:b3:44:a3:d9:c0:7f:ba:
b2:51:5a:a1:57:b0:d8:8c:b9:f2:a1:ab:a4:0e:cc:c5:b6:72:
9f:25:be:b0:bd:4e:e1:33:79:b5:02:b5:d2:7d:17:c3:7c:75:
9b:50:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:46:53 2026 by rpki-client