Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/troWWXa36YRbR1Mq2b9pTEMryLY.roa
File: troWWXa36YRbR1Mq2b9pTEMryLY.roa (raw, json)
Hash identifier: VW5bjD3kL/xys7ihNKdXHrujPRwQ1hbRN4zDRH9dz/k=
Subject key identifier: B6:BA:16:59:76:B7:E9:84:5B:47:53:2A:D9:BF:69:4C:43:2B:C8:B6
Certificate issuer: /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial: 019C705698DB2CADC91C2FB3F0B4E36477E8
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/troWWXa36YRbR1Mq2b9pTEMryLY.roa
Signing time: Wed 18 Feb 2026 10:40:49 +0000
ROA not before: Wed 18 Feb 2026 10:40:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24940
IP address blocks: 5.9.0.0/16 maxlen: 24
5.75.128.0/17 maxlen: 24
5.161.0.0/16 maxlen: 24
23.88.0.0/17 maxlen: 24
37.27.0.0/16 maxlen: 24
46.4.0.0/16 maxlen: 24
46.62.128.0/17 maxlen: 24
46.224.0.0/15 maxlen: 24
49.12.0.0/16 maxlen: 24
49.13.0.0/16 maxlen: 24
65.21.0.0/16 maxlen: 24
65.108.0.0/16 maxlen: 24
65.109.0.0/16 maxlen: 24
77.42.0.0/17 maxlen: 24
78.46.0.0/15 maxlen: 24
85.10.192.0/18 maxlen: 24
88.99.0.0/16 maxlen: 24
88.198.0.0/16 maxlen: 24
89.167.0.0/17 maxlen: 24
91.98.0.0/16 maxlen: 24
91.99.0.0/16 maxlen: 24
91.107.128.0/17 maxlen: 24
94.130.0.0/16 maxlen: 24
95.216.0.0/16 maxlen: 24
95.217.0.0/16 maxlen: 24
116.202.0.0/16 maxlen: 24
116.203.0.0/16 maxlen: 24
128.140.0.0/17 maxlen: 24
135.181.0.0/16 maxlen: 24
138.199.128.0/17 maxlen: 24
142.132.128.0/17 maxlen: 24
157.90.0.0/16 maxlen: 24
157.180.0.0/17 maxlen: 24
159.69.0.0/16 maxlen: 24
162.55.0.0/16 maxlen: 24
167.233.0.0/16 maxlen: 24
167.235.0.0/16 maxlen: 24
168.119.0.0/16 maxlen: 24
176.9.0.0/16 maxlen: 24
178.63.0.0/16 maxlen: 24
178.104.0.0/15 maxlen: 24
185.12.64.0/22 maxlen: 24
188.34.128.0/17 maxlen: 24
188.40.0.0/16 maxlen: 24
188.245.0.0/16 maxlen: 24
195.201.0.0/16 maxlen: 24
204.168.128.0/17 maxlen: 24
213.133.96.0/19 maxlen: 24
213.239.192.0/18 maxlen: 24
2a01:4f8::/32 maxlen: 48
2a01:4f9::/32 maxlen: 48
2a01:4ff:ff01::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:56:98:db:2c:ad:c9:1c:2f:b3:f0:b4:e3:64:77:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Validity
Not Before: Feb 18 10:40:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6ba165976b7e9845b47532ad9bf694c432bc8b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:36:d2:18:0e:c7:47:b7:5f:01:07:37:b3:
10:c3:d9:31:be:c7:13:6c:0b:04:b0:2e:fe:a3:b3:
76:43:14:3b:ab:d1:e8:04:53:a0:3b:be:c9:84:94:
35:14:62:78:e9:63:d3:7e:cf:e9:0b:ba:a6:65:2a:
96:95:23:95:91:ef:27:1a:32:9b:b8:3a:b8:8c:0c:
29:72:dc:19:38:09:c1:1e:e9:f2:d1:11:07:b5:a8:
e4:ae:68:11:24:17:18:7e:71:5e:6e:55:39:7a:00:
85:1e:5b:69:ef:20:86:f1:4a:72:4d:b9:50:e6:38:
87:85:b5:96:ea:39:ed:fe:eb:37:60:90:8f:2b:67:
94:13:ca:a4:0d:7e:8a:1b:bc:27:25:c5:ed:d9:a2:
fb:1f:31:d4:e8:4c:1a:6d:7a:f8:d4:89:8e:3f:52:
42:b3:ce:b0:8b:f8:e2:ae:79:7f:c0:6d:87:89:6c:
44:5b:02:6a:34:6f:48:c7:7b:e1:83:b0:06:4d:f8:
44:f7:bd:cf:5b:06:74:8c:e5:a1:15:b5:65:73:6b:
51:e1:62:5b:5b:49:73:8f:b9:f4:97:82:e3:12:da:
b4:8c:00:8c:72:f1:68:4a:b2:00:40:f4:e9:30:c9:
88:66:dc:c4:22:6a:8f:25:01:fb:16:38:9f:fe:34:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BA:16:59:76:B7:E9:84:5B:47:53:2A:D9:BF:69:4C:43:2B:C8:B6
X509v3 Authority Key Identifier:
keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/troWWXa36YRbR1Mq2b9pTEMryLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.9.0.0/16
5.75.128.0/17
5.161.0.0/16
23.88.0.0/17
37.27.0.0/16
46.4.0.0/16
46.62.128.0/17
46.224.0.0/15
49.12.0.0/15
65.21.0.0/16
65.108.0.0/15
77.42.0.0/17
78.46.0.0/15
85.10.192.0/18
88.99.0.0/16
88.198.0.0/16
89.167.0.0/17
91.98.0.0/15
91.107.128.0/17
94.130.0.0/16
95.216.0.0/15
116.202.0.0/15
128.140.0.0/17
135.181.0.0/16
138.199.128.0/17
142.132.128.0/17
157.90.0.0/16
157.180.0.0/17
159.69.0.0/16
162.55.0.0/16
167.233.0.0/16
167.235.0.0/16
168.119.0.0/16
176.9.0.0/16
178.63.0.0/16
178.104.0.0/15
185.12.64.0/22
188.34.128.0/17
188.40.0.0/16
188.245.0.0/16
195.201.0.0/16
204.168.128.0/17
213.133.96.0/19
213.239.192.0/18
IPv6:
2a01:4f8::/31
2a01:4ff:ff01::/48
Signature Algorithm: sha256WithRSAEncryption
37:cf:31:08:a2:80:4e:b2:fb:a8:99:01:aa:dc:4a:e1:36:c6:
46:d4:d5:30:23:1d:34:60:bb:af:3d:79:cd:1d:f0:26:09:a5:
db:47:0d:a4:13:aa:cc:cb:d8:b9:1e:14:9b:77:2c:d6:35:00:
8d:4d:ba:31:64:b7:c9:49:08:41:68:c0:26:74:c1:3d:63:41:
84:83:18:3d:12:ec:07:35:b5:60:a1:57:9b:64:d7:c1:24:8b:
df:02:43:7f:95:52:26:cf:0f:68:15:17:98:73:14:f1:3b:49:
0e:89:09:c8:48:f1:fe:44:6c:16:35:7d:65:1c:2e:94:44:6a:
6b:17:97:e5:8a:a9:a7:31:25:60:ef:4b:82:37:90:76:30:0c:
6e:e4:5f:79:58:51:54:e5:66:ec:ba:ac:d4:a3:df:4a:d3:2d:
44:62:91:73:0b:0f:46:f6:aa:eb:45:2a:f7:be:2c:5c:bf:e9:
49:30:bf:2f:ce:97:47:3a:6f:fd:83:9d:d8:81:64:81:0a:cc:
86:0c:d4:62:10:95:f5:9e:e6:9b:07:5c:46:2e:0c:aa:f1:76:
2a:ae:4c:76:3c:82:22:b6:61:50:06:d7:85:0f:fe:ba:ce:91:
e9:31:0b:dc:e9:98:06:e9:8c:ec:88:6d:01:56:e8:56:04:10:
5a:4b:fd:a9
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgISAZxwVpjbLK3JHC+z8LTjZHfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDZmNTc3MzVhNGU2M2RiZWY4NDhlZTBkOWQxOTllMjE1
ZjgzMDQwHhcNMjYwMjE4MTA0MDQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJhMTY1OTc2YjdlOTg0NWI0NzUzMmFkOWJmNjk0YzQzMmJjOGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDw20hgOx0e3XwEHN7MQw9kxvscT
bAsEsC7+o7N2QxQ7q9HoBFOgO77JhJQ1FGJ46WPTfs/pC7qmZSqWlSOVke8nGjKb
uDq4jAwpctwZOAnBHuny0REHtajkrmgRJBcYfnFeblU5egCFHltp7yCG8UpyTblQ
5jiHhbWW6jnt/us3YJCPK2eUE8qkDX6KG7wnJcXt2aL7HzHU6EwabXr41ImOP1JC
s86wi/jirnl/wG2HiWxEWwJqNG9Ix3vhg7AGTfhE973PWwZ0jOWhFbVlc2tR4WJb
W0lzj7n0l4LjEtq0jACMcvFoSrIAQPTpMMmIZtzEImqPJQH7Fjif/jST8wIDAQAB
o4IDDzCCAwswHQYDVR0OBBYEFLa6Fll2t+mEW0dTKtm/aUxDK8i2MB8GA1UdIwQY
MBaAFB9G9Xc1pOY9vvhI7g2dGZ4hX4MEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzIt
YTdjOTg5OGVlY2JjLzEvdHJvV1dYYTM2WVJiUjFNcTJiOXBURU1yeUxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy8xMDcyNjYtYWI1MS00NjJiLTlmYzItYTdjOTg5OGVlY2Jj
LzEvSDBiMWR6V2s1ajItLUVqdURaMFpuaUZmZ3dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIIBIwYIKwYBBQUHAQcBAf8EggESMIIBDjCB8wQCAAEwgewD
AwAFCQMEBwVLgAMDAAWhAwQHF1gAAwMAJRsDAwAuBAMEBy4+gAMDAS7gAwMBMQwD
AwBBFQMDAUFsAwQHTSoAAwMBTi4DBAZVCsADAwBYYwMDAFjGAwQHWacAAwMBW2ID
BAdba4ADAwBeggMDAV/YAwMBdMoDBAeAjAADAwCHtQMEB4rHgAMEB46EgAMDAJ1a
AwQHnbQAAwMAn0UDAwCiNwMDAKfpAwMAp+sDAwCodwMDALAJAwMAsj8DAwGyaAME
ArkMQAMEB7wigAMDALwoAwMAvPUDAwDDyQMEB8yogAMEBdWFYAMEBtXvwDAWBAIA
AjAQAwUBKgEE+AMHACoBBP//ATANBgkqhkiG9w0BAQsFAAOCAQEAN88xCKKATrL7
qJkBqtxK4TbGRtTVMCMdNGC7rz15zR3wJgml20cNpBOqzMvYuR4Um3cs1jUAjU26
MWS3yUkIQWjAJnTBPWNBhIMYPRLsBzW1YKFXm2TXwSSL3wJDf5VSJs8PaBUXmHMU
8TtJDokJyEjx/kRsFjV9ZRwulERqaxeX5YqppzElYO9LgjeQdjAMbuRfeVhRVOVm
7Lqs1KPfStMtRGKRcwsPRvaq60Uq974sXL/pSTC/L86XRzpv/YOd2IFkgQrMhgzU
YhCV9Z7mmwdcRi4MqvF2Kq5MdjyCIrZhUAbXhQ/+us6R6TEL3OmYBumM7IhtAVbo
VgQQWkv9qQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:40 2026 by rpki-client