Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tkYx1damCIqipu5iZxNgS5MeKgY.roa
File: tkYx1damCIqipu5iZxNgS5MeKgY.roa (raw, json)
Hash identifier: vz+PugIdI4ZSqWDC53sn8BGafQECG0UFAaKLfvyxiEI=
Subject key identifier: B6:46:31:D5:D6:A6:08:8A:A2:A6:EE:62:67:13:60:4B:93:1E:2A:06
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A043E18E346FC2C65D29C2C24E1DDEBB94
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tkYx1damCIqipu5iZxNgS5MeKgY.roa
Signing time: Thu 27 Aug 2026 15:40:50 +0000
ROA not before: Thu 27 Aug 2026 15:40:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213459
IP address blocks: 31.207.5.0/24 maxlen: 24
72.35.246.0/24 maxlen: 24
78.17.0.0/24 maxlen: 24
78.17.1.0/24 maxlen: 24
78.17.3.0/24 maxlen: 24
78.17.4.0/24 maxlen: 24
78.17.5.0/24 maxlen: 24
78.17.6.0/24 maxlen: 24
78.17.7.0/24 maxlen: 24
78.17.11.0/24 maxlen: 24
78.17.12.0/24 maxlen: 24
78.17.17.0/24 maxlen: 24
78.17.18.0/24 maxlen: 24
78.17.27.0/24 maxlen: 24
78.17.28.0/24 maxlen: 24
78.17.29.0/24 maxlen: 24
78.17.33.0/24 maxlen: 24
78.17.34.0/24 maxlen: 24
78.17.35.0/24 maxlen: 24
78.17.36.0/24 maxlen: 24
78.17.39.0/24 maxlen: 24
78.17.40.0/24 maxlen: 24
78.17.43.0/24 maxlen: 24
78.17.44.0/24 maxlen: 24
78.17.46.0/24 maxlen: 24
78.17.47.0/24 maxlen: 24
78.17.54.0/24 maxlen: 24
78.17.55.0/24 maxlen: 24
78.17.64.0/24 maxlen: 24
78.17.65.0/24 maxlen: 24
78.17.66.0/24 maxlen: 24
78.17.67.0/24 maxlen: 24
78.17.76.0/24 maxlen: 24
78.17.84.0/24 maxlen: 24
78.17.85.0/24 maxlen: 24
78.17.86.0/24 maxlen: 24
78.17.87.0/24 maxlen: 24
78.17.96.0/24 maxlen: 24
78.17.97.0/24 maxlen: 24
78.17.99.0/24 maxlen: 24
78.17.100.0/24 maxlen: 24
78.17.101.0/24 maxlen: 24
78.17.103.0/24 maxlen: 24
78.17.107.0/24 maxlen: 24
78.17.109.0/24 maxlen: 24
78.17.110.0/24 maxlen: 24
78.17.111.0/24 maxlen: 24
78.17.112.0/24 maxlen: 24
78.17.113.0/24 maxlen: 24
78.17.116.0/24 maxlen: 24
78.17.118.0/24 maxlen: 24
78.17.128.0/24 maxlen: 24
78.17.129.0/24 maxlen: 24
78.17.134.0/24 maxlen: 24
78.17.145.0/24 maxlen: 24
78.17.146.0/24 maxlen: 24
78.17.151.0/24 maxlen: 24
78.17.152.0/24 maxlen: 24
78.17.154.0/24 maxlen: 24
78.17.155.0/24 maxlen: 24
78.17.156.0/24 maxlen: 24
78.17.159.0/24 maxlen: 24
78.17.161.0/24 maxlen: 24
78.17.162.0/24 maxlen: 24
78.17.173.0/24 maxlen: 24
78.17.176.0/24 maxlen: 24
78.17.216.0/24 maxlen: 24
78.17.240.0/24 maxlen: 24
89.44.76.0/24 maxlen: 24
89.125.24.0/24 maxlen: 24
89.125.26.0/24 maxlen: 24
89.125.27.0/24 maxlen: 24
89.125.32.0/24 maxlen: 24
89.125.38.0/24 maxlen: 24
89.125.39.0/24 maxlen: 24
89.125.52.0/24 maxlen: 24
89.125.57.0/24 maxlen: 24
89.125.59.0/24 maxlen: 24
89.125.62.0/24 maxlen: 24
89.125.72.0/24 maxlen: 24
89.125.74.0/24 maxlen: 24
89.125.75.0/24 maxlen: 24
89.125.81.0/24 maxlen: 24
89.125.84.0/24 maxlen: 24
89.125.86.0/24 maxlen: 24
89.125.87.0/24 maxlen: 24
89.125.93.0/24 maxlen: 24
89.125.114.0/24 maxlen: 24
89.125.115.0/24 maxlen: 24
89.125.116.0/24 maxlen: 24
89.125.117.0/24 maxlen: 24
89.125.118.0/24 maxlen: 24
89.125.196.0/24 maxlen: 24
89.125.198.0/24 maxlen: 24
89.125.199.0/24 maxlen: 24
103.245.229.0/24 maxlen: 24
185.141.217.0/24 maxlen: 24
193.124.224.0/24 maxlen: 24
212.192.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:31:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:43:e1:8e:34:6f:c2:c6:5d:29:c2:c2:4e:1d:de:bb:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 27 15:40:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b64631d5d6a6088aa2a6ee626713604b931e2a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2a:a8:f4:62:e1:68:bc:76:92:3f:87:84:93:
97:01:f6:bd:64:e2:c4:f1:21:95:13:f4:8f:ff:17:
a4:c8:93:0c:de:4c:1a:60:2d:9e:d3:a5:02:41:7b:
19:f8:87:ca:2e:76:22:7e:d3:88:34:81:10:2e:d4:
1e:be:ed:c2:54:76:fc:24:79:b2:15:72:16:ea:a3:
08:2f:4c:55:66:cd:83:34:7c:65:2a:e4:8d:b4:91:
39:fd:ff:cd:b0:35:8b:fa:dd:f3:dc:40:da:26:0b:
17:3a:e3:cb:6a:1c:1c:cf:bb:f4:db:bd:3f:98:7e:
88:2d:2a:34:c7:b6:09:a0:a6:03:11:7b:9f:af:1c:
fd:58:52:78:c1:9c:de:b6:3d:9a:83:f6:2a:92:ae:
db:2d:ab:b8:a7:bf:2e:71:d2:bb:45:54:08:5d:04:
12:1d:21:2e:9f:6b:88:0a:a3:30:ca:31:aa:a5:79:
15:3f:dc:72:5a:db:49:70:a6:6a:5f:48:47:57:26:
ba:af:7d:53:26:c0:85:e8:54:33:a5:73:bc:b0:f5:
bb:32:ac:e3:18:e2:62:03:3f:84:94:52:42:89:75:
a8:99:38:ac:9e:d3:0b:21:d1:a5:24:e2:6a:df:bc:
1d:39:96:e5:ce:c6:08:27:f0:b4:59:84:0b:bf:73:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:46:31:D5:D6:A6:08:8A:A2:A6:EE:62:67:13:60:4B:93:1E:2A:06
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/tkYx1damCIqipu5iZxNgS5MeKgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.207.5.0/24
72.35.246.0/24
78.17.0.0/23
78.17.3.0-78.17.7.255
78.17.11.0-78.17.12.255
78.17.17.0-78.17.18.255
78.17.27.0-78.17.29.255
78.17.33.0-78.17.36.255
78.17.39.0-78.17.40.255
78.17.43.0-78.17.44.255
78.17.46.0/23
78.17.54.0/23
78.17.64.0/22
78.17.76.0/24
78.17.84.0/22
78.17.96.0/23
78.17.99.0-78.17.101.255
78.17.103.0/24
78.17.107.0/24
78.17.109.0-78.17.113.255
78.17.116.0/24
78.17.118.0/24
78.17.128.0/23
78.17.134.0/24
78.17.145.0-78.17.146.255
78.17.151.0-78.17.152.255
78.17.154.0-78.17.156.255
78.17.159.0/24
78.17.161.0-78.17.162.255
78.17.173.0/24
78.17.176.0/24
78.17.216.0/24
78.17.240.0/24
89.44.76.0/24
89.125.24.0/24
89.125.26.0/23
89.125.32.0/24
89.125.38.0/23
89.125.52.0/24
89.125.57.0/24
89.125.59.0/24
89.125.62.0/24
89.125.72.0/24
89.125.74.0/23
89.125.81.0/24
89.125.84.0/24
89.125.86.0/23
89.125.93.0/24
89.125.114.0-89.125.118.255
89.125.196.0/24
89.125.198.0/23
103.245.229.0/24
185.141.217.0/24
193.124.224.0/24
212.192.22.0/24
Signature Algorithm: sha256WithRSAEncryption
21:c0:1d:ff:e3:73:a8:95:40:98:be:c1:9e:4d:44:81:a4:9f:
6a:07:d2:4e:8a:0a:e6:2e:11:3c:a5:c4:f1:8d:c6:67:6c:34:
89:60:48:5b:1e:9f:a5:f8:74:1a:85:7f:76:22:a8:77:fa:c2:
21:f9:6c:2e:91:66:6b:90:a1:8e:de:18:30:f7:58:52:ce:f9:
eb:83:a2:70:b2:e6:dd:92:8a:2d:bd:f2:4a:50:ec:ef:90:ac:
cc:3b:d4:1e:58:4a:13:7c:af:e1:e0:36:3c:32:24:c6:cc:7e:
53:57:91:fe:03:62:13:e9:e2:cb:c2:90:44:bb:7b:e8:dd:c8:
38:5c:8b:f0:6e:7d:23:56:7a:e9:09:34:a8:73:f2:46:fa:62:
53:5b:78:17:9b:f5:c8:65:53:1d:07:b1:8c:04:f5:fe:32:e1:
40:c8:01:3c:e4:0c:2b:27:59:7f:0f:34:b1:6d:67:26:12:7b:
9d:31:21:9c:fd:43:d3:84:d2:05:22:06:1b:b2:87:89:d2:81:
c1:2b:3f:34:3d:1b:d8:7b:ac:92:66:b9:09:25:2c:ca:3f:50:
de:2e:0e:46:8b:4e:70:2f:a8:6e:42:16:76:fe:72:30:40:99:
ae:8a:dc:e0:70:6d:56:5a:d3:b7:25:4c:f2:0c:66:38:9f:4e:
57:83:8f:73
-----BEGIN CERTIFICATE-----
MIIGuzCCBaOgAwIBAgISAaBD4Y40b8LGXSnCwk4d3ruUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjYwODI3MTU0MDUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjQ2MzFkNWQ2YTYwODhhYTJhNmVlNjI2NzEzNjA0YjkzMWUyYTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyqo9GLhaLx2kj+HhJOXAfa9ZOLE
8SGVE/SP/xekyJMM3kwaYC2e06UCQXsZ+IfKLnYiftOINIEQLtQevu3CVHb8JHmy
FXIW6qMIL0xVZs2DNHxlKuSNtJE5/f/NsDWL+t3z3EDaJgsXOuPLahwcz7v0270/
mH6ILSo0x7YJoKYDEXufrxz9WFJ4wZzetj2ag/Yqkq7bLau4p78ucdK7RVQIXQQS
HSEun2uICqMwyjGqpXkVP9xyWttJcKZqX0hHVya6r31TJsCF6FQzpXO8sPW7Mqzj
GOJiAz+ElFJCiXWomTisntMLIdGlJOJq37wdOZblzsYIJ/C0WYQLv3N7wwIDAQAB
o4IDxzCCA8MwHQYDVR0OBBYEFLZGMdXWpgiKoqbuYmcTYEuTHioGMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvdGtZeDFkYW1DSXFpcHU1aVp4TmdTNU1lS2dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIB2wYIKwYBBQUHAQcBAf8EggHKMIIBxjCCAcIEAgABMIIB
ugMEAB/PBQMEAEgj9gMEAU4RADAMAwQAThEDAwQDThEAMAwDBABOEQsDBABOEQww
DAMEAE4REQMEAE4REjAMAwQAThEbAwQBThEcMAwDBABOESEDBABOESQwDAMEAE4R
JwMEAE4RKDAMAwQAThErAwQAThEsAwQBThEuAwQBThE2AwQCThFAAwQAThFMAwQC
ThFUAwQBThFgMAwDBABOEWMDBAFOEWQDBABOEWcDBABOEWswDAMEAE4RbQMEAU4R
cAMEAE4RdAMEAE4RdgMEAU4RgAMEAE4RhjAMAwQAThGRAwQAThGSMAwDBABOEZcD
BABOEZgwDAMEAU4RmgMEAE4RnAMEAE4RnzAMAwQAThGhAwQAThGiAwQAThGtAwQA
ThGwAwQAThHYAwQAThHwAwQAWSxMAwQAWX0YAwQBWX0aAwQAWX0gAwQBWX0mAwQA
WX00AwQAWX05AwQAWX07AwQAWX0+AwQAWX1IAwQBWX1KAwQAWX1RAwQAWX1UAwQB
WX1WAwQAWX1dMAwDBAFZfXIDBABZfXYDBABZfcQDBAFZfcYDBABn9eUDBAC5jdkD
BADBfOADBADUwBYwDQYJKoZIhvcNAQELBQADggEBACHAHf/jc6iVQJi+wZ5NRIGk
n2oH0k6KCuYuETylxPGNxmdsNIlgSFsen6X4dBqFf3YiqHf6wiH5bC6RZmuQoY7e
GDD3WFLO+euDonCy5t2Sii298kpQ7O+QrMw71B5YShN8r+HgNjwyJMbMflNXkf4D
YhPp4svCkES7e+jdyDhci/BufSNWeukJNKhz8kb6YlNbeBeb9chlUx0HsYwE9f4y
4UDIATzkDCsnWX8PNLFtZyYSe50xIZz9Q9OE0gUiBhuyh4nSgcErPzQ9G9h7rJJm
uQklLMo/UN4uDkaLTnAvqG5CFnb+cjBAma6K3OBwbVZa07clTPIMZjifTleDj3M=
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:30 2026 by rpki-client