Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/TBzPDJSD-OPoY5YDRj-GVWldeIo.roa
File: TBzPDJSD-OPoY5YDRj-GVWldeIo.roa (raw, json)
Hash identifier: RtYdqmCGS0/udA9BSM3ibNGPD4ku1WnFAfDRmn6ORBQ=
Subject key identifier: 4C:1C:CF:0C:94:83:F8:E3:E8:63:96:03:46:3F:86:55:69:5D:78:8A
Certificate issuer: /CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Certificate serial: 019C55D6011656A8334BDA09C4742B270B80
Authority key identifier: A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/TBzPDJSD-OPoY5YDRj-GVWldeIo.roa
Signing time: Fri 13 Feb 2026 07:10:14 +0000
ROA not before: Fri 13 Feb 2026 07:10:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 37.64.0.0/13 maxlen: 24
46.35.0.0/19 maxlen: 24
46.165.64.0/18 maxlen: 24
62.8.0.0/19 maxlen: 24
62.39.0.0/16 maxlen: 24
62.62.128.0/17 maxlen: 24
62.62.169.0/24 maxlen: 24
62.85.128.0/19 maxlen: 24
62.106.128.0/17 maxlen: 24
62.129.160.0/19 maxlen: 24
62.241.64.0/18 maxlen: 24
77.84.0.0/16 maxlen: 24
77.128.0.0/13 maxlen: 24
77.136.0.0/16 maxlen: 24
77.137.196.0/22 maxlen: 24
77.137.200.0/21 maxlen: 24
77.137.208.0/20 maxlen: 24
77.137.224.0/19 maxlen: 24
77.140.0.0/14 maxlen: 24
77.144.0.0/12 maxlen: 24
77.192.0.0/12 maxlen: 24
77.233.96.0/19 maxlen: 24
78.112.0.0/12 maxlen: 24
78.155.128.0/19 maxlen: 24
78.159.0.0/19 maxlen: 24
79.80.0.0/12 maxlen: 24
79.132.32.0/19 maxlen: 24
79.174.192.0/18 maxlen: 24
80.70.32.0/20 maxlen: 24
80.118.0.0/15 maxlen: 24
80.124.0.0/15 maxlen: 24
80.185.0.0/16 maxlen: 24
80.236.0.0/17 maxlen: 24
81.1.0.0/18 maxlen: 24
81.64.0.0/14 maxlen: 24
81.185.0.0/16 maxlen: 24
81.220.0.0/16 maxlen: 24
82.151.0.0/19 maxlen: 24
82.216.0.0/16 maxlen: 24
83.141.128.0/17 maxlen: 24
84.4.0.0/14 maxlen: 24
84.55.128.0/18 maxlen: 24
84.96.0.0/13 maxlen: 24
84.205.128.0/19 maxlen: 24
85.68.0.0/15 maxlen: 24
85.117.128.0/19 maxlen: 24
85.168.0.0/14 maxlen: 24
85.192.192.0/18 maxlen: 24
86.63.224.0/19 maxlen: 24
86.64.0.0/12 maxlen: 24
87.100.0.0/17 maxlen: 24
87.231.0.0/16 maxlen: 24
87.255.128.0/19 maxlen: 24
88.136.0.0/13 maxlen: 24
88.219.0.0/16 maxlen: 24
89.2.0.0/15 maxlen: 24
89.156.0.0/14 maxlen: 24
89.170.0.0/16 maxlen: 24
89.185.160.0/19 maxlen: 24
91.68.0.0/14 maxlen: 24
91.88.0.0/16 maxlen: 24
91.91.0.0/16 maxlen: 24
91.151.112.0/20 maxlen: 24
92.88.0.0/13 maxlen: 24
93.0.0.0/11 maxlen: 24
93.182.192.0/18 maxlen: 24
93.191.80.0/21 maxlen: 24
95.136.128.0/17 maxlen: 24
95.157.128.0/18 maxlen: 24
95.157.192.0/18 maxlen: 18
95.168.0.0/19 maxlen: 24
95.171.128.0/19 maxlen: 24
95.174.160.0/19 maxlen: 24
95.175.160.0/19 maxlen: 24
95.181.220.0/22 maxlen: 24
109.0.0.0/11 maxlen: 24
130.0.96.0/19 maxlen: 19
141.170.216.0/21 maxlen: 24
159.20.8.0/21 maxlen: 24
176.52.224.0/20 maxlen: 20
178.18.176.0/20 maxlen: 24
178.19.0.0/20 maxlen: 24
185.39.216.0/22 maxlen: 24
185.147.204.0/22 maxlen: 24
185.147.232.0/22 maxlen: 22
185.150.120.0/22 maxlen: 24
188.7.0.0/16 maxlen: 24
188.141.128.0/17 maxlen: 24
188.224.0.0/17 maxlen: 24
194.6.128.0/19 maxlen: 24
194.153.88.0/23 maxlen: 24
194.153.90.0/24 maxlen: 24
194.153.92.0/24 maxlen: 24
194.153.97.0/24 maxlen: 24
194.183.192.0/19 maxlen: 24
194.242.176.0/20 maxlen: 24
195.3.0.0/18 maxlen: 24
195.7.96.0/19 maxlen: 24
195.98.96.0/19 maxlen: 24
195.115.0.0/16 maxlen: 24
195.132.0.0/16 maxlen: 24
195.146.192.0/19 maxlen: 24
212.23.160.0/19 maxlen: 24
212.30.96.0/19 maxlen: 24
212.39.128.0/19 maxlen: 24
212.94.160.0/19 maxlen: 24
212.198.0.0/16 maxlen: 24
213.128.32.0/19 maxlen: 24
213.144.192.0/19 maxlen: 24
213.169.160.0/19 maxlen: 24
213.176.192.0/19 maxlen: 24
213.203.64.0/18 maxlen: 24
213.222.64.0/18 maxlen: 24
213.223.0.0/16 maxlen: 24
213.245.0.0/16 maxlen: 24
217.19.192.0/20 maxlen: 24
217.70.80.0/20 maxlen: 24
217.112.224.0/20 maxlen: 24
2a00:5e80::/32 maxlen: 48
2a00:6200::/29 maxlen: 48
2a00:7180::/32 maxlen: 48
2a00:8d80::/32 maxlen: 48
2a00:9380::/32 maxlen: 32
2a00:a580::/32 maxlen: 48
2a00:b280::/32 maxlen: 48
2a00:ba80::/32 maxlen: 48
2a00:c780::/32 maxlen: 48
2a00:cc80::/32 maxlen: 48
2a00:d780::/32 maxlen: 48
2a00:e880::/32 maxlen: 48
2a00:ec80::/29 maxlen: 48
2a00:ec80::/32 maxlen: 48
2a00:ec81::/32 maxlen: 48
2a02:8400::/25 maxlen: 48
2a04:800::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:d6:01:16:56:a8:33:4b:da:09:c4:74:2b:27:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0ef5fbbfca7a93cfee965eeb6bdee6fb43c403e
Validity
Not Before: Feb 13 07:10:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1ccf0c9483f8e3e8639603463f8655695d788a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:c3:a2:ef:23:1e:df:b6:89:da:9c:6f:2a:
cf:4b:de:52:f6:a4:e2:fe:47:c9:5a:f3:d6:87:34:
fa:8e:74:74:e4:0d:40:bd:6e:e8:0e:d8:62:4d:9f:
c0:30:27:e5:d4:d3:a1:61:12:bc:dd:0a:00:45:8a:
d7:4a:58:04:ca:c2:62:86:c2:2f:df:55:0b:82:f1:
38:30:67:64:c1:0c:8d:39:88:c3:9b:fb:d2:73:83:
65:85:b5:80:78:61:0f:fa:92:12:80:9d:3a:fd:2b:
b1:c9:f5:88:b2:1b:f8:bd:17:d3:39:d7:cb:6d:20:
7d:5c:63:ee:dd:f7:9f:25:a5:65:48:e5:a3:70:c9:
70:c0:fb:46:58:56:71:7c:96:05:24:50:69:38:b0:
fd:77:a0:e7:72:1a:42:18:86:7b:29:9c:f7:83:74:
17:4f:c1:d9:c9:41:c2:c0:66:95:b7:c2:7a:b6:e1:
cd:0e:08:af:9d:5b:43:49:ea:9f:35:91:d4:e6:61:
31:58:6b:f0:f5:16:d1:4a:fc:ec:6e:08:74:8f:48:
69:a0:1d:a4:df:ce:2b:4a:7d:8e:01:0d:d4:52:f9:
57:fc:c6:10:34:81:1c:f3:ac:f8:12:5d:34:98:ff:
53:94:b3:19:38:bb:3f:11:5f:7c:53:64:0c:dd:ae:
be:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:CF:0C:94:83:F8:E3:E8:63:96:03:46:3F:86:55:69:5D:78:8A
X509v3 Authority Key Identifier:
keyid:A0:EF:5F:BB:FC:A7:A9:3C:FE:E9:65:EE:B6:BD:EE:6F:B4:3C:40:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oO9fu_ynqTz-6WXutr3ub7Q8QD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/TBzPDJSD-OPoY5YDRj-GVWldeIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/fe915c-bf70-4602-8a3c-0292b020150a/1/oO9fu_ynqTz-6WXutr3ub7Q8QD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.64.0.0/13
46.35.0.0/19
46.165.64.0/18
62.8.0.0/19
62.39.0.0/16
62.62.128.0/17
62.85.128.0/19
62.106.128.0/17
62.129.160.0/19
62.241.64.0/18
77.84.0.0/16
77.128.0.0-77.136.255.255
77.137.196.0-77.137.255.255
77.140.0.0-77.159.255.255
77.192.0.0/12
77.233.96.0/19
78.112.0.0/12
78.155.128.0/19
78.159.0.0/19
79.80.0.0/12
79.132.32.0/19
79.174.192.0/18
80.70.32.0/20
80.118.0.0/15
80.124.0.0/15
80.185.0.0/16
80.236.0.0/17
81.1.0.0/18
81.64.0.0/14
81.185.0.0/16
81.220.0.0/16
82.151.0.0/19
82.216.0.0/16
83.141.128.0/17
84.4.0.0/14
84.55.128.0/18
84.96.0.0/13
84.205.128.0/19
85.68.0.0/15
85.117.128.0/19
85.168.0.0/14
85.192.192.0/18
86.63.224.0-86.79.255.255
87.100.0.0/17
87.231.0.0/16
87.255.128.0/19
88.136.0.0/13
88.219.0.0/16
89.2.0.0/15
89.156.0.0/14
89.170.0.0/16
89.185.160.0/19
91.68.0.0/14
91.88.0.0/16
91.91.0.0/16
91.151.112.0/20
92.88.0.0/13
93.0.0.0/11
93.182.192.0/18
93.191.80.0/21
95.136.128.0/17
95.157.128.0/17
95.168.0.0/19
95.171.128.0/19
95.174.160.0/19
95.175.160.0/19
95.181.220.0/22
109.0.0.0/11
130.0.96.0/19
141.170.216.0/21
159.20.8.0/21
176.52.224.0/20
178.18.176.0/20
178.19.0.0/20
185.39.216.0/22
185.147.204.0/22
185.147.232.0/22
185.150.120.0/22
188.7.0.0/16
188.141.128.0/17
188.224.0.0/17
194.6.128.0/19
194.153.88.0-194.153.90.255
194.153.92.0/24
194.153.97.0/24
194.183.192.0/19
194.242.176.0/20
195.3.0.0/18
195.7.96.0/19
195.98.96.0/19
195.115.0.0/16
195.132.0.0/16
195.146.192.0/19
212.23.160.0/19
212.30.96.0/19
212.39.128.0/19
212.94.160.0/19
212.198.0.0/16
213.128.32.0/19
213.144.192.0/19
213.169.160.0/19
213.176.192.0/19
213.203.64.0/18
213.222.64.0/18
213.223.0.0/16
213.245.0.0/16
217.19.192.0/20
217.70.80.0/20
217.112.224.0/20
IPv6:
2a00:5e80::/32
2a00:6200::/29
2a00:7180::/32
2a00:8d80::/32
2a00:9380::/32
2a00:a580::/32
2a00:b280::/32
2a00:ba80::/32
2a00:c780::/32
2a00:cc80::/32
2a00:d780::/32
2a00:e880::/32
2a00:ec80::/29
2a02:8400::/25
2a04:800::/29
Signature Algorithm: sha256WithRSAEncryption
3c:ed:8a:49:06:e5:dd:a2:5f:4e:9c:94:04:df:b9:e2:b4:d1:
7c:6b:10:84:07:59:a3:00:18:9e:c4:b2:40:7e:23:09:a4:ef:
17:61:d5:60:13:e7:fc:18:b8:b8:f2:95:9b:71:bb:5e:5d:ff:
5c:a2:73:11:27:97:b7:21:52:dd:95:6c:fb:a2:f2:ca:ca:2d:
bb:24:cc:6d:92:19:f2:a8:98:9a:29:f9:2c:c1:2a:34:d8:d2:
2e:36:dd:17:f1:29:e9:6d:a5:ca:62:9e:f1:ce:4a:2a:bd:29:
62:09:94:9c:16:41:cb:7b:32:0f:4b:e5:00:f2:73:37:cd:56:
41:0c:ba:01:b3:12:c5:cd:ed:07:af:3b:a9:c2:7c:48:97:e8:
c5:3c:d7:e8:75:7f:3a:ab:73:bb:9d:7b:3b:68:0e:9b:76:f1:
86:36:44:c6:cb:41:c8:cb:21:51:5e:3c:fe:62:bf:40:c5:5e:
38:76:9c:56:ee:9b:86:15:1a:43:d8:c9:cf:b3:e6:c2:e9:6a:
e1:32:3b:4a:dc:cf:a0:cb:01:f7:ab:8a:5a:5b:f4:41:40:0f:
f7:12:0c:d7:8e:d0:77:31:b0:36:f7:46:0e:9c:eb:7e:e3:89:
bb:fc:c8:87:fc:73:37:53:20:1c:05:9a:f9:bc:48:d1:68:a3:
77:f5:aa:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:55:33 2026 by rpki-client