Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa
File: tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa (raw, json)
Hash identifier: LilK2m+4vGz0x/pO6ZW3viZdV1XDW+8QHDp0GCFsdwY=
Subject key identifier: B4:53:AA:61:E0:C7:DE:52:DE:60:DB:7B:7F:05:7E:42:D0:19:52:71
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A00F92B48C4DBA3CDBB695C651EF6B0A3C
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa
Signing time: Mon 17 Aug 2026 11:54:27 +0000
ROA not before: Mon 17 Aug 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49981
IP address blocks: 2.59.168.0/22 maxlen: 22
2.59.168.0/24 maxlen: 24
2.59.169.0/24 maxlen: 24
2.59.170.0/24 maxlen: 24
2.59.171.0/24 maxlen: 24
45.14.132.0/22 maxlen: 22
45.14.132.0/24 maxlen: 24
45.14.133.0/24 maxlen: 24
45.14.134.0/24 maxlen: 24
45.14.135.0/24 maxlen: 24
45.82.64.0/22 maxlen: 22
45.82.64.0/24 maxlen: 24
45.82.65.0/24 maxlen: 24
45.82.66.0/24 maxlen: 24
45.82.67.0/24 maxlen: 24
62.112.8.0/22 maxlen: 22
62.112.8.0/24 maxlen: 24
62.112.9.0/24 maxlen: 24
62.112.10.0/24 maxlen: 24
62.112.11.0/24 maxlen: 24
80.79.4.0/22 maxlen: 22
80.79.4.0/24 maxlen: 24
80.79.5.0/24 maxlen: 24
80.79.6.0/24 maxlen: 24
80.79.7.0/24 maxlen: 24
83.98.152.0/22 maxlen: 22
83.98.160.0/22 maxlen: 22
89.38.96.0/22 maxlen: 22
89.38.96.0/24 maxlen: 24
89.38.97.0/24 maxlen: 24
89.38.98.0/24 maxlen: 24
89.38.99.0/24 maxlen: 24
89.39.104.0/22 maxlen: 22
89.39.104.0/24 maxlen: 24
89.39.105.0/24 maxlen: 24
89.39.106.0/24 maxlen: 24
89.39.107.0/24 maxlen: 24
91.229.23.0/24 maxlen: 24
91.232.105.0/24 maxlen: 24
93.190.136.0/21 maxlen: 21
93.190.136.0/24 maxlen: 24
93.190.137.0/24 maxlen: 24
93.190.138.0/24 maxlen: 24
93.190.139.0/24 maxlen: 24
93.190.140.0/22 maxlen: 22
93.190.140.0/24 maxlen: 24
93.190.141.0/24 maxlen: 24
93.190.142.0/24 maxlen: 24
93.190.143.0/24 maxlen: 24
109.236.80.0/20 maxlen: 20
109.236.80.0/24 maxlen: 24
109.236.81.0/24 maxlen: 24
109.236.82.0/24 maxlen: 24
109.236.83.0/24 maxlen: 24
109.236.84.0/24 maxlen: 24
109.236.85.0/24 maxlen: 24
109.236.86.0/24 maxlen: 24
109.236.87.0/24 maxlen: 24
109.236.88.0/24 maxlen: 24
109.236.89.0/24 maxlen: 24
109.236.90.0/24 maxlen: 24
109.236.91.0/24 maxlen: 24
109.236.92.0/24 maxlen: 24
109.236.93.0/24 maxlen: 24
109.236.94.0/24 maxlen: 24
109.236.95.0/24 maxlen: 24
175.110.112.0/20 maxlen: 20
175.110.112.0/24 maxlen: 24
175.110.113.0/24 maxlen: 24
175.110.114.0/24 maxlen: 24
175.110.115.0/24 maxlen: 24
175.110.116.0/24 maxlen: 24
175.110.117.0/24 maxlen: 24
175.110.118.0/24 maxlen: 24
175.110.119.0/24 maxlen: 24
175.110.120.0/24 maxlen: 24
175.110.121.0/24 maxlen: 24
175.110.122.0/24 maxlen: 24
175.110.123.0/24 maxlen: 24
175.110.124.0/24 maxlen: 24
175.110.125.0/24 maxlen: 24
175.110.126.0/24 maxlen: 24
175.110.127.0/24 maxlen: 24
178.132.0.0/21 maxlen: 21
178.132.0.0/24 maxlen: 24
178.132.1.0/24 maxlen: 24
178.132.2.0/24 maxlen: 24
178.132.3.0/24 maxlen: 24
178.132.4.0/24 maxlen: 24
178.132.5.0/24 maxlen: 24
178.132.6.0/24 maxlen: 24
178.132.7.0/24 maxlen: 24
178.218.196.0/22 maxlen: 22
178.218.196.0/24 maxlen: 24
178.218.197.0/24 maxlen: 24
178.218.198.0/24 maxlen: 24
178.218.199.0/24 maxlen: 24
185.2.80.0/22 maxlen: 22
185.2.80.0/24 maxlen: 24
185.2.81.0/24 maxlen: 24
185.2.82.0/24 maxlen: 24
185.2.83.0/24 maxlen: 24
185.4.112.0/22 maxlen: 22
185.21.60.0/22 maxlen: 22
185.21.60.0/24 maxlen: 24
185.21.61.0/24 maxlen: 24
185.21.62.0/24 maxlen: 24
185.21.63.0/24 maxlen: 24
185.100.232.0/22 maxlen: 22
185.100.232.0/24 maxlen: 24
185.100.233.0/24 maxlen: 24
185.100.234.0/24 maxlen: 24
185.100.235.0/24 maxlen: 24
185.132.132.0/22 maxlen: 22
185.132.132.0/24 maxlen: 24
185.132.133.0/24 maxlen: 24
185.132.134.0/24 maxlen: 24
185.132.135.0/24 maxlen: 24
185.132.176.0/22 maxlen: 22
185.132.176.0/24 maxlen: 24
185.132.177.0/24 maxlen: 24
185.132.178.0/24 maxlen: 24
185.132.179.0/24 maxlen: 24
185.165.240.0/22 maxlen: 22
185.165.240.0/24 maxlen: 24
185.165.241.0/24 maxlen: 24
185.165.242.0/24 maxlen: 24
185.165.243.0/24 maxlen: 24
185.172.88.0/22 maxlen: 22
185.172.88.0/24 maxlen: 24
185.172.89.0/24 maxlen: 24
185.172.90.0/24 maxlen: 24
185.172.91.0/24 maxlen: 24
185.173.160.0/22 maxlen: 22
185.173.160.0/24 maxlen: 24
185.173.161.0/24 maxlen: 24
185.173.162.0/24 maxlen: 24
185.173.163.0/24 maxlen: 24
185.177.124.0/22 maxlen: 22
185.177.124.0/24 maxlen: 24
185.177.125.0/24 maxlen: 24
185.177.126.0/24 maxlen: 24
185.177.127.0/24 maxlen: 24
185.180.220.0/22 maxlen: 22
185.180.220.0/24 maxlen: 24
185.180.221.0/24 maxlen: 24
185.180.222.0/24 maxlen: 24
185.180.223.0/24 maxlen: 24
185.182.192.0/22 maxlen: 22
185.182.192.0/24 maxlen: 24
185.182.193.0/24 maxlen: 24
185.182.194.0/24 maxlen: 24
185.182.195.0/24 maxlen: 24
185.183.32.0/22 maxlen: 22
185.183.32.0/24 maxlen: 24
185.183.33.0/24 maxlen: 24
185.183.34.0/24 maxlen: 24
185.183.35.0/24 maxlen: 24
185.184.192.0/22 maxlen: 22
185.184.192.0/24 maxlen: 24
185.184.193.0/24 maxlen: 24
185.184.194.0/24 maxlen: 24
185.184.195.0/24 maxlen: 24
185.185.48.0/22 maxlen: 22
185.185.48.0/24 maxlen: 24
185.185.49.0/24 maxlen: 24
185.185.50.0/24 maxlen: 24
185.185.51.0/24 maxlen: 24
185.191.0.0/22 maxlen: 22
185.191.0.0/24 maxlen: 24
185.191.1.0/24 maxlen: 24
185.191.2.0/24 maxlen: 24
185.191.3.0/24 maxlen: 24
193.200.164.0/24 maxlen: 24
194.88.104.0/22 maxlen: 22
194.88.104.0/24 maxlen: 24
194.88.105.0/24 maxlen: 24
194.88.106.0/24 maxlen: 24
194.88.107.0/24 maxlen: 24
212.8.240.0/24 maxlen: 24
212.8.242.0/23 maxlen: 23
212.8.242.0/24 maxlen: 24
212.8.243.0/24 maxlen: 24
212.8.248.0/23 maxlen: 23
212.8.248.0/24 maxlen: 24
212.8.249.0/24 maxlen: 24
212.8.250.0/24 maxlen: 24
212.8.252.0/23 maxlen: 23
212.8.252.0/24 maxlen: 24
212.8.253.0/24 maxlen: 24
213.189.8.0/22 maxlen: 22
217.23.0.0/20 maxlen: 20
217.23.0.0/24 maxlen: 24
217.23.1.0/24 maxlen: 24
217.23.2.0/24 maxlen: 24
217.23.3.0/24 maxlen: 24
217.23.4.0/24 maxlen: 24
217.23.5.0/24 maxlen: 24
217.23.6.0/24 maxlen: 24
217.23.7.0/24 maxlen: 24
217.23.8.0/24 maxlen: 24
217.23.9.0/24 maxlen: 24
217.23.10.0/24 maxlen: 24
217.23.11.0/24 maxlen: 24
217.23.12.0/24 maxlen: 24
217.23.13.0/24 maxlen: 24
217.23.14.0/24 maxlen: 24
217.23.15.0/24 maxlen: 24
2a00:7c80::/29 maxlen: 32
2a00:7c80::/32 maxlen: 32
2a00:7c81::/32 maxlen: 32
2a00:7c82::/32 maxlen: 32
2a00:7c83::/32 maxlen: 32
2a02:20b3:100::/40 maxlen: 40
2a02:20b3:200::/40 maxlen: 40
2a02:20b3:300::/40 maxlen: 40
2a02:20b4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:92:b4:8c:4d:ba:3c:db:b6:95:c6:51:ef:6b:0a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Aug 17 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b453aa61e0c7de52de60db7b7f057e42d0195271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fe:8c:ef:e4:7a:ff:14:8e:ee:21:76:d2:6f:
6e:31:7b:d8:37:73:ba:b5:d6:d9:f9:2a:06:6c:de:
b6:1b:a1:61:38:50:70:16:96:bf:be:8e:7a:80:a0:
0e:59:3b:d6:e6:44:d8:07:37:9e:dd:fb:0f:23:ca:
b8:d8:48:64:46:fc:35:ab:79:84:e0:46:38:cf:55:
9c:49:a6:0e:c9:0f:77:71:bc:27:6b:a9:c3:d6:03:
86:04:01:0f:81:24:3e:99:00:45:76:d9:f8:b7:7f:
65:0a:27:51:2c:ca:48:0e:e5:bc:a0:53:c2:a1:2c:
78:71:8d:ad:f8:65:a0:a4:fb:2b:8c:cb:c6:0f:2a:
e6:02:35:ab:67:fe:c1:ff:54:e9:c4:73:15:9d:06:
50:fc:0b:eb:db:8e:0a:8d:f6:69:77:23:53:a0:41:
57:22:8b:22:16:20:81:34:34:5c:b1:b9:96:53:0a:
ab:ca:5e:24:2c:b7:d1:69:17:e8:2c:09:69:71:4e:
25:57:93:ad:43:07:e3:a0:0a:e6:09:95:54:57:84:
0f:db:7d:43:a4:be:42:81:f2:fd:61:20:fa:ba:44:
17:20:12:c1:ce:be:0d:f5:cf:49:22:71:ba:5f:61:
75:2b:54:cd:c6:8f:41:07:a5:df:af:b2:d0:a2:10:
7c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:53:AA:61:E0:C7:DE:52:DE:60:DB:7B:7F:05:7E:42:D0:19:52:71
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/tFOqYeDH3lLeYNt7fwV-QtAZUnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.168.0/22
45.14.132.0/22
45.82.64.0/22
62.112.8.0/22
80.79.4.0/22
83.98.152.0/22
83.98.160.0/22
89.38.96.0/22
89.39.104.0/22
91.229.23.0/24
91.232.105.0/24
93.190.136.0/21
109.236.80.0/20
175.110.112.0/20
178.132.0.0/21
178.218.196.0/22
185.2.80.0/22
185.4.112.0/22
185.21.60.0/22
185.100.232.0/22
185.132.132.0/22
185.132.176.0/22
185.165.240.0/22
185.172.88.0/22
185.173.160.0/22
185.177.124.0/22
185.180.220.0/22
185.182.192.0/22
185.183.32.0/22
185.184.192.0/22
185.185.48.0/22
185.191.0.0/22
193.200.164.0/24
194.88.104.0/22
212.8.240.0/24
212.8.242.0/23
212.8.248.0-212.8.250.255
212.8.252.0/23
213.189.8.0/22
217.23.0.0/20
IPv6:
2a00:7c80::/29
2a02:20b3:100::-2a02:20b3:3ff:ffff:ffff:ffff:ffff:ffff
2a02:20b4::/32
Signature Algorithm: sha256WithRSAEncryption
60:4a:0f:ae:19:8e:b4:dc:ab:cf:6b:c7:f6:11:c4:ad:23:eb:
08:78:50:d1:98:06:9b:4a:a1:ae:b8:12:89:9e:44:57:77:24:
18:30:92:11:2b:ea:95:78:84:25:83:de:fe:50:87:67:ea:56:
54:f0:0c:b3:cc:0d:b8:eb:77:ef:3f:90:21:75:0f:31:ee:84:
f8:f7:78:3b:b5:aa:d7:66:21:57:f8:49:5c:36:ab:4c:5a:ca:
cf:7c:e3:be:cb:d9:d7:26:c5:bf:c9:75:71:8e:66:c4:cb:ee:
f2:59:fa:8e:ae:e8:63:ee:64:17:88:9e:80:66:b4:f4:8a:fe:
33:89:df:a6:93:20:80:cf:22:77:51:ca:10:fe:7c:9c:ce:ed:
2f:34:58:56:c0:2e:78:cf:d9:17:04:1d:81:79:c1:b3:3b:08:
7a:2e:5d:4a:90:c4:07:7a:5f:df:6a:2f:f2:d7:4d:a1:55:33:
93:f5:17:28:ec:3d:a0:76:f5:0c:34:b3:c9:c6:03:e5:1c:d8:
f8:71:05:ed:f8:51:47:eb:b1:9c:5f:4f:dd:6d:1a:a8:2d:be:
2b:ac:dc:a6:25:d8:64:f2:58:9f:5d:26:f4:17:94:c2:49:5b:
5c:67:a9:ac:13:39:ef:8f:b0:d6:8f:17:f8:01:2c:28:8f:12:
9a:58:ff:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 23:30:39 2026 by rpki-client