Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa
File: TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa (raw, json)
Hash identifier: 8czZJ0iGrV8f7eo8Glrc6/FdpLKC2UfW5wYgtnaT0dA=
Subject key identifier: 4C:89:89:25:48:47:48:F6:D0:91:15:2A:DC:60:F8:3E:8C:64:1D:B4
Certificate issuer: /CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Certificate serial: 01A0468B9CA6505F56267A825110319830F8
Authority key identifier: 0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa
Signing time: Fri 28 Aug 2026 04:05:49 +0000
ROA not before: Fri 28 Aug 2026 04:05:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29182
IP address blocks: 37.46.128.0/23 maxlen: 23
37.46.130.0/23 maxlen: 23
37.46.132.0/23 maxlen: 23
37.46.134.0/23 maxlen: 23
45.141.208.0/22 maxlen: 22
45.150.8.0/22 maxlen: 22
62.109.0.0/20 maxlen: 20
62.109.0.0/21 maxlen: 21
62.109.8.0/21 maxlen: 21
62.109.16.0/21 maxlen: 21
62.109.24.0/22 maxlen: 22
62.109.28.0/22 maxlen: 22
77.246.156.0/22 maxlen: 22
77.246.156.0/23 maxlen: 23
77.246.158.0/23 maxlen: 23
80.87.192.0/23 maxlen: 23
80.87.194.0/23 maxlen: 23
80.87.196.0/23 maxlen: 23
80.87.198.0/23 maxlen: 23
80.87.200.0/23 maxlen: 23
80.87.202.0/24 maxlen: 24
80.87.203.0/24 maxlen: 24
82.146.32.0/21 maxlen: 21
82.146.32.0/23 maxlen: 23
82.146.34.0/23 maxlen: 23
82.146.36.0/23 maxlen: 23
82.146.38.0/23 maxlen: 23
82.146.40.0/21 maxlen: 21
82.146.48.0/23 maxlen: 23
82.146.50.0/23 maxlen: 23
82.146.52.0/23 maxlen: 23
82.146.54.0/23 maxlen: 23
82.146.56.0/21 maxlen: 21
82.202.160.0/23 maxlen: 23
82.202.162.0/23 maxlen: 23
82.202.165.0/24 maxlen: 24
82.202.166.0/23 maxlen: 23
82.202.168.0/23 maxlen: 23
82.202.170.0/23 maxlen: 23
82.202.172.0/23 maxlen: 23
82.202.174.0/23 maxlen: 23
83.220.168.0/23 maxlen: 23
83.220.170.0/23 maxlen: 23
83.220.172.0/23 maxlen: 23
83.220.174.0/23 maxlen: 23
85.198.72.0/23 maxlen: 23
85.198.74.0/23 maxlen: 23
85.198.116.0/23 maxlen: 23
85.198.118.0/23 maxlen: 23
89.169.40.0/23 maxlen: 23
89.169.42.0/23 maxlen: 23
91.240.84.0/23 maxlen: 23
91.240.86.0/23 maxlen: 23
92.63.96.0/21 maxlen: 21
92.63.104.0/22 maxlen: 22
92.63.108.0/22 maxlen: 22
92.63.108.0/24 maxlen: 24
92.63.109.0/24 maxlen: 24
92.63.110.0/23 maxlen: 23
153.76.160.0/20 maxlen: 20
176.12.64.0/21 maxlen: 21
185.43.4.0/23 maxlen: 23
185.43.6.0/23 maxlen: 23
185.63.188.0/22 maxlen: 22
185.146.156.0/23 maxlen: 23
185.146.158.0/23 maxlen: 23
185.246.64.0/23 maxlen: 23
185.246.66.0/23 maxlen: 23
185.253.32.0/23 maxlen: 23
185.253.34.0/23 maxlen: 23
195.140.144.0/23 maxlen: 23
195.140.146.0/23 maxlen: 23
212.109.192.0/22 maxlen: 22
212.109.196.0/23 maxlen: 23
212.109.198.0/23 maxlen: 23
212.109.216.0/23 maxlen: 23
212.109.218.0/23 maxlen: 23
212.109.220.0/23 maxlen: 23
212.109.222.0/24 maxlen: 24
212.109.223.0/24 maxlen: 24
213.159.208.0/23 maxlen: 23
213.159.210.0/23 maxlen: 23
213.159.212.0/23 maxlen: 23
213.159.214.0/23 maxlen: 23
2a09:f900::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:46:8b:9c:a6:50:5f:56:26:7a:82:51:10:31:98:30:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a41a5a2a18339629cc1303e6dec8bb605ddca65
Validity
Not Before: Aug 28 04:05:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c898925484748f6d091152adc60f83e8c641db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:de:c2:fa:23:36:fc:cf:ee:94:c3:09:ec:
30:dc:aa:64:4e:76:39:12:14:89:6f:9d:31:3d:d1:
4d:e9:1c:eb:6c:62:24:88:3a:10:bd:ce:44:6b:88:
28:b5:b4:c7:59:bd:7c:3b:1f:9c:ca:ed:42:80:d9:
d4:56:1e:ce:de:f1:e7:cb:0a:64:0f:27:8d:0b:b5:
8a:4b:ef:df:80:39:02:cd:d3:17:3e:53:f5:55:78:
0b:77:8c:9c:1a:f9:82:a7:da:36:d5:c3:5e:86:59:
a3:48:31:77:37:22:03:38:3c:53:55:7b:c1:3c:dd:
58:08:f6:4e:0f:95:27:01:fe:54:25:ee:dc:86:21:
8d:88:5c:e4:20:98:17:f3:3c:b8:c6:c0:2e:69:39:
c7:53:b8:82:e2:b2:18:55:84:0c:88:6d:fe:5c:8d:
42:36:46:b7:08:af:08:3e:63:a6:a4:62:6a:8a:69:
bb:d2:b0:cf:df:21:af:5d:a6:85:fa:db:eb:23:de:
22:20:4a:e7:4f:ce:0d:fe:eb:27:26:c7:90:35:63:
87:36:29:4c:0e:32:9b:60:18:48:c6:98:15:69:cf:
2f:19:77:e6:dc:bc:a8:70:11:2f:81:e9:80:3d:6a:
cc:bb:53:70:98:f4:0a:e7:46:c5:37:93:57:6e:3e:
e7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:89:25:48:47:48:F6:D0:91:15:2A:DC:60:F8:3E:8C:64:1D:B4
X509v3 Authority Key Identifier:
keyid:0A:41:A5:A2:A1:83:39:62:9C:C1:30:3E:6D:EC:8B:B6:05:DD:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkGloqGDOWKcwTA-beyLtgXdymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/TImJJUhHSPbQkRUq3GD4PoxkHbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/d43c2c-74e9-47d4-bf62-80f7fd6ea9c9/1/CkGloqGDOWKcwTA-beyLtgXdymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.46.128.0/21
45.141.208.0/22
45.150.8.0/22
62.109.0.0/19
77.246.156.0/22
80.87.192.0-80.87.203.255
82.146.32.0/19
82.202.160.0/22
82.202.165.0-82.202.175.255
83.220.168.0/21
85.198.72.0/22
85.198.116.0/22
89.169.40.0/22
91.240.84.0/22
92.63.96.0/20
153.76.160.0/20
176.12.64.0/21
185.43.4.0/22
185.63.188.0/22
185.146.156.0/22
185.246.64.0/22
185.253.32.0/22
195.140.144.0/22
212.109.192.0/21
212.109.216.0/21
213.159.208.0/21
IPv6:
2a09:f900::/48
Signature Algorithm: sha256WithRSAEncryption
63:8b:2e:ff:3d:d0:bd:40:fb:93:4d:32:88:ea:fd:82:bc:56:
01:9a:e9:87:be:b2:28:6e:9f:d9:85:d0:fe:85:ea:c0:81:84:
7e:99:56:6d:1a:4a:ca:f2:98:c7:59:5d:bd:58:bd:eb:b9:8f:
79:4d:9f:1e:4b:00:5a:1a:d9:44:36:49:f9:73:d3:7e:9c:57:
6d:a8:98:6d:a4:d4:98:73:45:8c:6a:15:64:b7:84:9e:56:e2:
9d:4f:95:ca:ea:c9:43:93:9f:af:60:1b:ef:7b:81:18:95:dc:
86:e8:63:91:b7:4b:38:2c:2b:ab:ce:99:86:53:9b:6b:01:04:
91:fa:59:64:f5:08:44:6d:ea:ef:ab:9e:6b:0b:2d:9e:5f:fc:
2a:17:4b:b4:8b:8b:66:8d:b9:5d:33:5b:f3:03:0c:81:63:92:
ab:cb:bc:1c:77:b5:9f:96:e1:f9:f2:c0:f3:d0:40:5f:3a:60:
c4:67:a0:87:22:d7:ec:55:57:23:7d:6b:63:fc:7e:25:d7:05:
cd:fa:9e:4e:bf:90:ad:3a:8c:14:e7:ed:cd:0a:d9:45:d7:8e:
74:ec:b6:12:49:25:63:0c:1b:b1:8b:4a:29:c7:b5:cb:68:09:
4b:19:ca:de:94:ac:30:df:55:45:24:05:04:3d:df:84:63:45:
5c:5b:8e:be
-----BEGIN CERTIFICATE-----
MIIFuTCCBKGgAwIBAgISAaBGi5ymUF9WJnqCURAxmDD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhNDFhNWEyYTE4MzM5NjI5Y2MxMzAzZTZkZWM4YmI2MDVk
ZGNhNjUwHhcNMjYwODI4MDQwNTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Yzg5ODkyNTQ4NDc0OGY2ZDA5MTE1MmFkYzYwZjgzZThjNjQxZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2l/ewvojNvzP7pTDCeww3KpkTnY5
EhSJb50xPdFN6RzrbGIkiDoQvc5Ea4gotbTHWb18Ox+cyu1CgNnUVh7O3vHnywpk
DyeNC7WKS+/fgDkCzdMXPlP1VXgLd4ycGvmCp9o21cNehlmjSDF3NyIDODxTVXvB
PN1YCPZOD5UnAf5UJe7chiGNiFzkIJgX8zy4xsAuaTnHU7iC4rIYVYQMiG3+XI1C
Nka3CK8IPmOmpGJqimm70rDP3yGvXaaF+tvrI94iIErnT84N/usnJseQNWOHNilM
DjKbYBhIxpgVac8vGXfm3LyocBEvgemAPWrMu1NwmPQK50bFN5NXbj7n7QIDAQAB
o4ICxTCCAsEwHQYDVR0OBBYEFEyJiSVIR0j20JEVKtxg+D6MZB20MB8GA1UdIwQY
MBaAFApBpaKhgzlinMEwPm3si7YF3cplMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjIt
ODBmN2ZkNmVhOWM5LzEvVEltSkpVaEhTUGJRa1JVcTNHRDRQb3hrSGJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kNDNjMmMtNzRlOS00N2Q0LWJmNjItODBmN2ZkNmVhOWM5
LzEvQ2tHbG9xR0RPV0tjd1RBLWJleUx0Z1hkeW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIHaBggrBgEFBQcBBwEB/wSByjCBxzCBswQCAAEwgawDBAMl
LoADBAItjdADBAItlggDBAU+bQADBAJN9pwwDAMEBlBXwAMEAlBXyAMEBVKSIAME
AlLKoDAMAwQAUsqlAwQEUsqgAwQDU9yoAwQCVcZIAwQCVcZ0AwQCWakoAwQCW/BU
AwQEXD9gAwQEmUygAwQDsAxAAwQCuSsEAwQCuT+8AwQCuZKcAwQCufZAAwQCuf0g
AwQCw4yQAwQD1G3AAwQD1G3YAwQD1Z/QMA8EAgACMAkDBwAqCfkAAAAwDQYJKoZI
hvcNAQELBQADggEBAGOLLv890L1A+5NNMojq/YK8VgGa6Ye+sihun9mF0P6F6sCB
hH6ZVm0aSsrymMdZXb1Yveu5j3lNnx5LAFoa2UQ2Sflz036cV22omG2k1JhzRYxq
FWS3hJ5W4p1PlcrqyUOTn69gG+97gRiV3IboY5G3SzgsK6vOmYZTm2sBBJH6WWT1
CERt6u+rnmsLLZ5f/CoXS7SLi2aNuV0zW/MDDIFjkqvLvBx3tZ+W4fnywPPQQF86
YMRnoIci1+xVVyN9a2P8fiXXBc36nk6/kK06jBTn7c0K2UXXjnTsthJJJWMMG7GL
SinHtctoCUsZyt6UrDDfVUUkBQQ934RjRVxbjr4=
-----END CERTIFICATE-----
Generated at Thu Sep 10 20:29:01 2026 by rpki-client