Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/TFxdoaquIqH8vE1G0TfbaVcQfgc.roa
File: TFxdoaquIqH8vE1G0TfbaVcQfgc.roa (raw, json)
Hash identifier: XpBekycJaRcqmL/FgQfs6y2tHkUUKGYjMMHdix7FSFw=
Subject key identifier: 4C:5C:5D:A1:AA:AE:22:A1:FC:BC:4D:46:D1:37:DB:69:57:10:7E:07
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019C42E902CE601E69A4530BEF64018C8D7D
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/TFxdoaquIqH8vE1G0TfbaVcQfgc.roa
Signing time: Mon 09 Feb 2026 14:58:12 +0000
ROA not before: Mon 09 Feb 2026 14:58:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42772
IP address blocks: 37.17.0.0/17 maxlen: 17
37.17.6.0/23 maxlen: 23
37.17.8.0/21 maxlen: 21
37.17.16.0/22 maxlen: 22
37.17.20.0/22 maxlen: 22
37.17.24.0/21 maxlen: 21
37.17.32.0/21 maxlen: 21
37.17.40.0/21 maxlen: 21
37.17.48.0/20 maxlen: 20
37.17.64.0/19 maxlen: 19
37.17.96.0/20 maxlen: 20
37.17.112.0/22 maxlen: 22
37.17.117.0/24 maxlen: 24
37.17.118.0/24 maxlen: 24
37.17.119.0/24 maxlen: 24
37.17.120.0/21 maxlen: 21
46.53.128.0/21 maxlen: 21
46.53.128.0/24 maxlen: 24
46.53.129.0/24 maxlen: 24
46.53.130.0/24 maxlen: 24
46.53.131.0/24 maxlen: 24
46.53.132.0/24 maxlen: 24
46.53.133.0/24 maxlen: 24
46.53.134.0/24 maxlen: 24
46.53.135.0/24 maxlen: 24
46.53.136.0/21 maxlen: 21
46.53.136.0/24 maxlen: 24
46.53.137.0/24 maxlen: 24
46.53.138.0/24 maxlen: 24
46.53.139.0/24 maxlen: 24
46.53.140.0/24 maxlen: 24
46.53.141.0/24 maxlen: 24
46.53.142.0/24 maxlen: 24
46.53.143.0/24 maxlen: 24
46.53.144.0/21 maxlen: 21
46.53.144.0/24 maxlen: 24
46.53.145.0/24 maxlen: 24
46.53.146.0/24 maxlen: 24
46.53.147.0/24 maxlen: 24
46.53.148.0/24 maxlen: 24
46.53.149.0/24 maxlen: 24
46.53.150.0/24 maxlen: 24
46.53.151.0/24 maxlen: 24
46.53.152.0/21 maxlen: 21
46.53.160.0/21 maxlen: 21
46.53.163.0/24 maxlen: 24
46.53.164.0/24 maxlen: 24
46.53.167.0/24 maxlen: 24
46.53.168.0/21 maxlen: 21
46.53.173.0/24 maxlen: 24
46.53.174.0/23 maxlen: 23
46.53.176.0/22 maxlen: 22
46.53.180.0/22 maxlen: 22
46.53.184.0/21 maxlen: 21
46.53.189.0/24 maxlen: 24
46.53.192.0/22 maxlen: 22
46.53.192.0/24 maxlen: 24
46.53.193.0/24 maxlen: 24
46.53.194.0/24 maxlen: 24
46.53.195.0/24 maxlen: 24
46.53.197.0/24 maxlen: 24
46.53.198.0/23 maxlen: 23
46.53.200.0/22 maxlen: 22
46.53.204.0/24 maxlen: 24
46.53.205.0/24 maxlen: 24
46.53.206.0/24 maxlen: 24
46.53.207.0/24 maxlen: 24
46.53.208.0/22 maxlen: 22
46.53.210.0/24 maxlen: 24
46.53.211.0/24 maxlen: 24
46.53.212.0/22 maxlen: 22
46.53.216.0/21 maxlen: 21
46.53.216.0/22 maxlen: 22
46.53.216.0/24 maxlen: 24
46.53.217.0/24 maxlen: 24
46.53.218.0/24 maxlen: 24
46.53.219.0/24 maxlen: 24
46.53.220.0/22 maxlen: 22
46.53.220.0/24 maxlen: 24
46.53.221.0/24 maxlen: 24
46.53.222.0/24 maxlen: 24
46.53.223.0/24 maxlen: 24
46.53.224.0/21 maxlen: 21
46.53.224.0/24 maxlen: 24
46.53.225.0/24 maxlen: 24
46.53.226.0/24 maxlen: 24
46.53.227.0/24 maxlen: 24
46.53.228.0/24 maxlen: 24
46.53.229.0/24 maxlen: 24
46.53.230.0/24 maxlen: 24
46.53.231.0/24 maxlen: 24
46.53.232.0/21 maxlen: 21
46.53.240.0/21 maxlen: 21
46.53.240.0/22 maxlen: 22
46.53.248.0/21 maxlen: 21
46.53.248.0/22 maxlen: 22
46.56.129.0/24 maxlen: 24
46.56.130.0/23 maxlen: 23
46.56.132.0/24 maxlen: 24
46.56.133.0/24 maxlen: 24
46.56.134.0/24 maxlen: 24
46.56.135.0/24 maxlen: 24
46.56.136.0/23 maxlen: 23
46.56.138.0/23 maxlen: 23
46.56.140.0/22 maxlen: 22
46.56.144.0/20 maxlen: 20
46.56.160.0/21 maxlen: 21
46.56.168.0/21 maxlen: 21
46.56.176.0/20 maxlen: 20
46.56.176.0/21 maxlen: 21
46.56.184.0/21 maxlen: 21
46.56.192.0/21 maxlen: 21
46.56.200.0/21 maxlen: 21
46.56.208.0/24 maxlen: 24
46.56.209.0/24 maxlen: 24
46.56.210.0/24 maxlen: 24
46.56.211.0/24 maxlen: 24
46.56.212.0/24 maxlen: 24
46.56.213.0/24 maxlen: 24
46.56.214.0/23 maxlen: 23
46.56.214.0/24 maxlen: 24
46.56.216.0/21 maxlen: 21
46.56.224.0/21 maxlen: 21
46.56.232.0/21 maxlen: 21
46.56.240.0/21 maxlen: 21
46.56.248.0/21 maxlen: 21
46.182.48.0/21 maxlen: 21
77.74.32.0/21 maxlen: 21
77.74.34.0/24 maxlen: 24
77.74.35.0/24 maxlen: 24
77.74.37.0/24 maxlen: 24
77.74.38.0/24 maxlen: 24
77.74.39.0/24 maxlen: 24
93.191.96.0/22 maxlen: 22
93.191.100.0/24 maxlen: 24
93.191.101.0/24 maxlen: 24
93.191.102.0/24 maxlen: 24
93.191.103.0/24 maxlen: 24
128.65.0.0/18 maxlen: 18
128.65.0.0/24 maxlen: 24
128.65.1.0/24 maxlen: 24
128.65.2.0/23 maxlen: 23
128.65.4.0/23 maxlen: 23
128.65.6.0/23 maxlen: 23
128.65.8.0/21 maxlen: 21
128.65.16.0/22 maxlen: 22
128.65.20.0/22 maxlen: 22
128.65.24.0/21 maxlen: 21
128.65.24.0/22 maxlen: 22
128.65.28.0/22 maxlen: 22
128.65.32.0/21 maxlen: 21
128.65.40.0/21 maxlen: 21
128.65.48.0/20 maxlen: 20
128.65.56.0/21 maxlen: 21
128.65.56.0/22 maxlen: 22
128.65.60.0/22 maxlen: 22
128.140.240.0/20 maxlen: 20
128.140.240.0/24 maxlen: 24
128.140.244.0/22 maxlen: 22
128.140.248.0/22 maxlen: 22
178.163.128.0/17 maxlen: 17
178.163.128.0/24 maxlen: 24
178.163.129.0/24 maxlen: 24
178.163.130.0/24 maxlen: 24
178.163.131.0/24 maxlen: 24
178.163.132.0/24 maxlen: 24
178.163.133.0/24 maxlen: 24
178.163.134.0/24 maxlen: 24
178.163.135.0/24 maxlen: 24
178.163.136.0/24 maxlen: 24
178.163.138.0/24 maxlen: 24
178.163.140.0/22 maxlen: 22
178.163.144.0/21 maxlen: 21
178.163.152.0/21 maxlen: 21
178.163.160.0/24 maxlen: 24
178.163.161.0/24 maxlen: 24
178.163.162.0/24 maxlen: 24
178.163.163.0/24 maxlen: 24
178.163.168.0/21 maxlen: 21
178.163.176.0/21 maxlen: 21
178.163.184.0/21 maxlen: 21
178.163.192.0/22 maxlen: 22
178.163.196.0/22 maxlen: 22
178.163.200.0/23 maxlen: 23
178.163.202.0/23 maxlen: 23
178.163.204.0/23 maxlen: 23
178.163.206.0/23 maxlen: 23
178.163.208.0/21 maxlen: 21
178.163.216.0/22 maxlen: 22
185.61.104.0/23 maxlen: 23
185.61.105.0/24 maxlen: 24
185.61.106.0/23 maxlen: 23
195.222.64.0/20 maxlen: 20
195.222.64.0/24 maxlen: 24
195.222.66.0/24 maxlen: 24
195.222.70.0/24 maxlen: 24
195.222.71.0/24 maxlen: 24
195.222.73.0/24 maxlen: 24
195.222.79.0/24 maxlen: 24
195.222.80.0/21 maxlen: 21
195.222.80.0/24 maxlen: 24
195.222.81.0/24 maxlen: 24
195.222.82.0/24 maxlen: 24
195.222.88.0/23 maxlen: 23
195.222.90.0/24 maxlen: 24
195.222.91.0/24 maxlen: 24
195.222.92.0/22 maxlen: 22
195.222.92.0/24 maxlen: 24
195.222.95.0/24 maxlen: 24
2a00:1760::/32 maxlen: 32
2a00:1760:8000::/40 maxlen: 40
2a00:1760:8100::/40 maxlen: 40
2a00:1760:c000::/40 maxlen: 40
2a00:1760:c100::/40 maxlen: 40
2a00:1760:c200::/40 maxlen: 40
2a00:1760:c300::/40 maxlen: 40
2a00:1761::/32 maxlen: 32
2a00:1761:a000::/35 maxlen: 35
2a00:1761:a000::/40 maxlen: 40
2a00:1761:a100::/40 maxlen: 40
2a00:1761:a200::/40 maxlen: 40
2a00:1761:a300::/40 maxlen: 40
2a00:1762::/32 maxlen: 32
2a00:1762:8000::/40 maxlen: 40
2a00:1762:8100::/40 maxlen: 40
2a00:1763::/32 maxlen: 32
2a00:1763:8000::/40 maxlen: 40
2a00:1763:8100::/40 maxlen: 40
2a00:1765::/32 maxlen: 32
2a00:1765:8000::/40 maxlen: 40
2a00:1765:8100::/40 maxlen: 40
2a03:3000::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:42:e9:02:ce:60:1e:69:a4:53:0b:ef:64:01:8c:8d:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Feb 9 14:58:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c5c5da1aaae22a1fcbc4d46d137db6957107e07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:51:47:48:cc:08:b7:71:e8:dd:3b:92:aa:
a9:39:9b:dd:62:e1:69:39:c3:2d:04:67:28:6e:7d:
a3:7f:23:97:75:80:f1:3d:42:bb:aa:eb:48:c3:db:
b5:f8:22:bd:3b:d5:7f:49:22:58:12:d8:cd:50:52:
11:c4:64:6f:76:d9:a1:0a:81:ff:d5:e5:46:50:a9:
7a:8b:a6:a7:ad:e3:20:9e:11:17:01:cc:c5:90:23:
75:d8:3c:ca:fb:d3:01:ee:60:9c:0b:14:9e:7a:f6:
5d:01:83:5f:a6:ae:cd:c8:8b:d5:a4:fd:17:a7:ec:
22:3d:d9:a1:cc:34:82:ab:cd:b9:28:69:28:71:54:
52:12:77:35:6d:bf:7c:87:24:f2:63:74:57:7e:6f:
ef:25:e1:48:87:e4:b6:e6:c1:37:9c:19:0d:d5:cb:
37:91:94:55:4c:ca:b6:9d:95:2a:e6:ef:19:10:74:
29:e4:fe:85:5e:7b:57:46:cf:48:fa:19:0e:f3:73:
0f:27:10:22:aa:7a:be:e2:c9:79:9f:89:2e:3c:3f:
94:57:00:59:24:05:9c:5f:f9:6b:7e:b1:49:a6:ac:
b1:6d:fd:ec:d8:5d:66:f4:c5:df:68:38:fe:7d:7f:
93:24:10:9f:50:59:ef:01:90:f5:0a:7e:ee:5a:20:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5C:5D:A1:AA:AE:22:A1:FC:BC:4D:46:D1:37:DB:69:57:10:7E:07
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/TFxdoaquIqH8vE1G0TfbaVcQfgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.0.0/17
46.53.128.0-46.53.195.255
46.53.197.0-46.53.255.255
46.56.129.0-46.56.255.255
46.182.48.0/21
77.74.32.0/21
93.191.96.0/21
128.65.0.0/18
128.140.240.0/20
178.163.128.0/17
185.61.104.0/22
195.222.64.0/19
IPv6:
2a00:1760::/30
2a00:1765::/32
2a03:3000::/32
Signature Algorithm: sha256WithRSAEncryption
2b:dd:d8:e9:e6:89:34:92:a4:43:c2:23:ca:4e:37:73:20:92:
a1:73:f5:47:b0:37:9b:7d:7c:9f:f8:7c:5d:8a:45:cd:4e:f4:
8c:39:ac:88:86:7f:aa:c6:fd:73:5d:2b:94:94:01:c7:89:02:
5a:79:6b:bf:a4:f1:d2:21:24:37:03:ba:1e:d3:f2:be:a3:61:
b7:90:ee:a3:97:51:af:ba:b6:8d:b9:84:cb:c7:39:58:cb:c4:
be:af:c5:ff:4b:05:08:93:eb:39:c8:e7:98:83:2a:f2:ee:11:
09:a1:e3:be:3e:e6:eb:15:73:d3:ae:f7:bd:31:b1:7f:93:9e:
43:87:59:64:e3:61:08:27:5c:4b:79:44:ac:50:77:9a:05:0b:
af:60:f5:71:de:57:95:b9:9d:9c:67:6b:84:ef:52:47:fb:ab:
a3:96:57:24:02:7a:5a:39:a0:4b:b9:71:43:40:ec:71:45:d1:
b9:71:8b:76:2b:8f:a6:cd:a7:24:6f:c1:66:61:0e:5e:e5:47:
63:12:b3:09:8b:93:cb:a5:02:88:35:bb:a5:ef:60:ed:94:77:
00:ba:8f:d5:d2:c1:8d:22:6e:84:06:22:66:7b:81:e5:ee:aa:
8b:bd:ae:a6:00:d9:50:6d:f1:f8:ef:85:d3:b5:a9:1f:89:f2:
95:e9:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:34 2026 by rpki-client