Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa
File: Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa (raw, json)
Hash identifier: rOkLE593RKrLBDVcD6kE+cn2O/S1gntv8KcELVYe+nQ=
Subject key identifier: 4E:4F:AF:C3:43:8F:4C:77:3D:76:2A:40:A5:87:60:16:D8:3C:0E:77
Certificate issuer: /CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Certificate serial: 01A0F7AD83E02DA53821804EAEAA801EAF1A
Authority key identifier: CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa
Signing time: Thu 01 Oct 2026 13:35:38 +0000
ROA not before: Thu 01 Oct 2026 13:35:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8280
IP address blocks: 46.227.56.0/21 maxlen: 24
46.227.56.0/24 maxlen: 32
46.227.57.0/24 maxlen: 32
46.227.58.0/24 maxlen: 32
46.227.59.0/24 maxlen: 32
46.227.60.0/24 maxlen: 32
46.227.61.0/24 maxlen: 32
46.227.62.0/24 maxlen: 32
46.227.63.0/24 maxlen: 32
78.108.32.0/20 maxlen: 24
78.108.32.0/24 maxlen: 32
78.108.33.0/24 maxlen: 32
78.108.34.0/24 maxlen: 32
78.108.35.0/24 maxlen: 32
78.108.36.0/24 maxlen: 32
78.108.37.0/24 maxlen: 32
78.108.38.0/24 maxlen: 32
78.108.39.0/24 maxlen: 32
78.108.40.0/24 maxlen: 32
78.108.41.0/24 maxlen: 32
78.108.42.0/24 maxlen: 32
78.108.43.0/24 maxlen: 32
78.108.44.0/24 maxlen: 32
78.108.45.0/24 maxlen: 32
78.108.46.0/24 maxlen: 32
78.108.47.0/24 maxlen: 32
185.51.132.0/22 maxlen: 24
185.51.132.0/24 maxlen: 32
185.51.133.0/24 maxlen: 32
185.51.134.0/24 maxlen: 32
185.51.135.0/24 maxlen: 32
2001:1548::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.mft
rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:ad:83:e0:2d:a5:38:21:80:4e:ae:aa:80:1e:af:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf40fdd82a0fdf3b70be18221eeba60d801ed7bf
Validity
Not Before: Oct 1 13:35:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e4fafc3438f4c773d762a40a5876016d83c0e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b8:f5:a3:f7:60:f3:b6:99:e1:60:b2:81:3e:
9f:fe:e3:e5:42:4c:aa:1d:dc:b1:84:3f:17:c1:dc:
32:68:b9:39:62:90:4a:ec:0c:7c:99:93:f1:59:96:
37:34:73:32:e0:ed:55:33:83:87:e5:75:51:6f:34:
b7:da:49:4e:d6:08:79:18:3a:26:55:75:5d:ab:ba:
8a:26:01:53:3d:30:34:f0:8b:21:3b:59:d3:e6:f2:
fd:4a:e7:65:3a:31:65:59:94:48:01:28:b2:c7:c3:
c4:ca:79:2e:ee:79:3f:00:98:d3:cf:dc:8b:d6:e9:
52:bf:28:27:1e:70:7f:10:b8:a0:ff:33:98:35:4a:
a7:36:2b:33:1f:19:f1:bc:a0:3c:af:d4:81:0d:45:
a1:c0:3e:84:c2:0e:22:b4:31:f4:d4:95:59:a2:5f:
cf:f4:c5:a1:96:50:4a:a9:fb:69:ea:f6:89:ba:13:
1e:89:ab:84:bc:4f:4c:64:3f:b5:17:b2:3c:42:7f:
3b:97:a6:e1:08:53:d9:d1:7d:f3:14:be:9d:e8:10:
0b:39:19:af:b4:4f:80:33:89:1f:ed:bf:83:da:1a:
d4:6d:d3:b8:cd:6e:74:73:b7:76:51:a4:2f:74:9d:
fd:f2:a5:bf:94:c3:a5:fe:99:ac:40:20:d4:47:76:
79:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:4F:AF:C3:43:8F:4C:77:3D:76:2A:40:A5:87:60:16:D8:3C:0E:77
X509v3 Authority Key Identifier:
keyid:CF:40:FD:D8:2A:0F:DF:3B:70:BE:18:22:1E:EB:A6:0D:80:1E:D7:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0D92CoP3ztwvhgiHuumDYAe178.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/Tk-vw0OPTHc9dipApYdgFtg8Dnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/792737-6a02-424b-82cb-a29ce7da10fd/1/z0D92CoP3ztwvhgiHuumDYAe178.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.56.0/21
78.108.32.0/20
185.51.132.0/22
IPv6:
2001:1548::/29
Signature Algorithm: sha256WithRSAEncryption
5f:d0:96:1d:e3:14:60:05:15:cb:37:47:79:0f:4f:d2:4f:29:
51:1b:4a:38:f1:87:46:49:3d:ca:18:28:8e:d0:d3:00:f2:1a:
73:cd:5f:56:9f:1c:a6:08:8d:5d:c2:80:80:9c:0b:73:f4:d0:
62:ab:f9:8e:b1:fb:76:6d:63:df:28:21:b4:cf:a3:aa:02:3b:
6d:1c:2c:7e:d1:4d:d6:6e:e4:bf:38:f0:92:b1:51:32:52:c7:
88:13:b4:f7:d5:a6:66:48:66:ab:a4:3c:13:d0:33:37:43:45:
85:4e:43:df:df:42:5e:c0:8d:de:76:c1:f5:1a:f1:d4:79:59:
cb:65:85:a9:6f:bc:f0:1a:d4:cc:56:45:e0:93:4c:cc:fb:f6:
31:65:16:23:02:e9:30:bc:0c:0f:67:c1:7b:42:e3:f1:de:b5:
2c:ac:c9:71:57:68:58:55:c6:53:31:d1:67:5d:65:d7:64:92:
47:6e:63:f7:8c:1d:2c:a6:b5:78:7c:07:b1:fa:cf:67:6d:ac:
b8:c1:ec:85:68:5a:a2:30:38:01:a6:94:74:a9:bb:84:71:65:
77:09:32:15:fc:11:01:09:8b:97:82:a1:1b:f4:6f:5b:a9:5c:
4b:2c:3a:cd:18:16:04:a1:0a:18:73:59:83:3f:fe:b1:e3:43:
8d:82:b6:0a
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAaD3rYPgLaU4IYBOrqqAHq8aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmNDBmZGQ4MmEwZmRmM2I3MGJlMTgyMjFlZWJhNjBkODAx
ZWQ3YmYwHhcNMjYxMDAxMTMzNTM4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTRmYWZjMzQzOGY0Yzc3M2Q3NjJhNDBhNTg3NjAxNmQ4M2MwZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLj1o/dg87aZ4WCygT6f/uPlQkyq
HdyxhD8XwdwyaLk5YpBK7Ax8mZPxWZY3NHMy4O1VM4OH5XVRbzS32klO1gh5GDom
VXVdq7qKJgFTPTA08IshO1nT5vL9SudlOjFlWZRIASiyx8PEynku7nk/AJjTz9yL
1ulSvygnHnB/ELig/zOYNUqnNiszHxnxvKA8r9SBDUWhwD6Ewg4itDH01JVZol/P
9MWhllBKqftp6vaJuhMeiauEvE9MZD+1F7I8Qn87l6bhCFPZ0X3zFL6d6BALORmv
tE+AM4kf7b+D2hrUbdO4zW50c7d2UaQvdJ398qW/lMOl/pmsQCDUR3Z56QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFE5Pr8NDj0x3PXYqQKWHYBbYPA53MB8GA1UdIwQY
MBaAFM9A/dgqD987cL4YIh7rpg2AHte/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2It
YTI5Y2U3ZGExMGZkLzEvVGstdncwT1BUSGM5ZGlwQXBZZGdGdGc4RG5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS83OTI3MzctNmEwMi00MjRiLTgyY2ItYTI5Y2U3ZGExMGZk
LzEvejBEOTJDb1AzenR3dmhnaUh1dW1EWUFlMTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDLuM4AwQE
TmwgAwQCuTOEMA0EAgACMAcDBQMgARVIMA0GCSqGSIb3DQEBCwUAA4IBAQBf0JYd
4xRgBRXLN0d5D0/STylRG0o48YdGST3KGCiO0NMA8hpzzV9WnxymCI1dwoCAnAtz
9NBiq/mOsft2bWPfKCG0z6OqAjttHCx+0U3WbuS/OPCSsVEyUseIE7T31aZmSGar
pDwT0DM3Q0WFTkPf30JewI3edsH1GvHUeVnLZYWpb7zwGtTMVkXgk0zM+/YxZRYj
AukwvAwPZ8F7QuPx3rUsrMlxV2hYVcZTMdFnXWXXZJJHbmP3jB0sprV4fAex+s9n
bay4weyFaFqiMDgBppR0qbuEcWV3CTIV/BEBCYuXgqEb9G9bqVxLLDrNGBYEoQoY
c1mDP/6x40ONgrYK
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:30:16 2026 by rpki-client