Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa
File: 3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa (raw, json)
Hash identifier: AfMPl1I4FCjIX3coVGZnaX03RsdIkobHgk2ozUg0CRU=
Subject key identifier: DE:12:6E:26:3D:C5:86:63:53:4C:07:4D:74:76:0A:16:FE:10:6E:17
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 019C9AAA6FD42241E25E5263B925F7A8981A
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa
Signing time: Thu 26 Feb 2026 15:56:26 +0000
ROA not before: Thu 26 Feb 2026 15:56:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8220
IP address blocks: 46.248.128.0/19 maxlen: 19
57.133.0.0/16 maxlen: 16
58.0.0.0/16 maxlen: 16
58.1.128.0/17 maxlen: 17
62.23.0.0/16 maxlen: 16
62.23.14.0/24 maxlen: 24
62.23.23.0/24 maxlen: 24
62.23.43.0/24 maxlen: 24
62.23.61.0/24 maxlen: 24
62.23.70.0/24 maxlen: 24
62.23.254.0/24 maxlen: 24
62.23.255.0/24 maxlen: 24
62.72.96.0/19 maxlen: 19
62.84.192.0/19 maxlen: 19
62.96.0.0/16 maxlen: 16
62.97.64.0/18 maxlen: 18
62.152.96.0/19 maxlen: 19
62.192.0.0/19 maxlen: 19
78.143.0.0/18 maxlen: 18
78.156.64.0/19 maxlen: 19
78.156.64.0/20 maxlen: 20
78.156.80.0/21 maxlen: 21
80.80.0.0/19 maxlen: 19
80.169.0.0/16 maxlen: 16
80.251.160.0/19 maxlen: 19
82.112.192.0/19 maxlen: 19
84.14.0.0/16 maxlen: 16
84.14.63.0/24 maxlen: 24
84.14.217.0/24 maxlen: 24
84.16.160.0/19 maxlen: 19
85.88.128.0/19 maxlen: 19
87.241.0.0/18 maxlen: 18
116.83.0.0/17 maxlen: 17
118.67.224.0/19 maxlen: 19
134.128.128.0/18 maxlen: 18
134.128.168.0/22 maxlen: 22
136.225.0.0/16 maxlen: 16
157.120.224.0/21 maxlen: 21
157.120.236.0/22 maxlen: 22
157.120.240.0/20 maxlen: 20
178.159.176.0/20 maxlen: 20
193.82.32.0/19 maxlen: 19
193.93.80.0/22 maxlen: 22
193.114.160.0/19 maxlen: 19
193.118.160.0/19 maxlen: 19
193.118.224.0/19 maxlen: 19
193.188.132.0/23 maxlen: 23
194.223.128.0/21 maxlen: 21
194.223.136.0/22 maxlen: 22
195.68.0.0/17 maxlen: 17
195.68.74.0/24 maxlen: 24
195.110.64.0/19 maxlen: 19
212.0.96.0/19 maxlen: 19
212.23.224.0/19 maxlen: 19
212.31.224.0/19 maxlen: 19
212.35.96.0/19 maxlen: 19
212.36.128.0/18 maxlen: 18
212.36.144.0/20 maxlen: 20
212.36.160.0/20 maxlen: 20
212.36.184.0/21 maxlen: 21
212.74.64.0/19 maxlen: 19
212.74.77.0/24 maxlen: 24
212.74.78.0/24 maxlen: 24
212.74.79.0/24 maxlen: 24
212.78.160.0/19 maxlen: 19
212.121.128.0/19 maxlen: 19
212.123.192.0/18 maxlen: 18
212.161.0.0/17 maxlen: 17
212.203.64.0/18 maxlen: 18
213.27.128.0/17 maxlen: 17
213.41.0.0/17 maxlen: 17
213.41.39.0/27 maxlen: 27
213.41.39.32/27 maxlen: 27
213.61.0.0/16 maxlen: 16
213.86.0.0/16 maxlen: 16
213.164.0.0/19 maxlen: 19
213.173.160.0/19 maxlen: 19
213.185.160.0/19 maxlen: 19
213.208.192.0/18 maxlen: 18
213.215.128.0/17 maxlen: 17
213.229.128.0/18 maxlen: 18
213.246.192.0/18 maxlen: 18
217.110.0.0/15 maxlen: 15
217.110.222.0/27 maxlen: 27
217.110.222.32/27 maxlen: 27
217.173.96.0/20 maxlen: 20
2001:920::/29 maxlen: 29
2001:920::/32 maxlen: 32
2001:921::/32 maxlen: 32
2001:924::/32 maxlen: 32
2001:925::/32 maxlen: 32
2001:926::/32 maxlen: 32
2001:926:40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:aa:6f:d4:22:41:e2:5e:52:63:b9:25:f7:a8:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Feb 26 15:56:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=de126e263dc58663534c074d74760a16fe106e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:26:f1:00:3d:16:96:74:f4:57:af:f9:bb:
16:64:d0:67:fa:e6:e1:99:64:5c:a8:1c:94:95:0a:
a9:58:d8:a4:b3:b9:a7:84:79:ac:b6:cd:90:ac:52:
84:7f:dc:f5:6b:97:1b:95:54:dc:d4:ff:81:92:31:
72:0e:f5:7b:69:7d:0b:74:3c:70:51:3c:2e:12:45:
9a:e6:35:41:e4:37:76:bc:ff:90:f3:17:a8:67:01:
fe:6f:93:fd:e2:24:f3:80:60:d5:2c:c4:6e:49:a0:
32:f4:43:2a:bf:d1:ef:24:ec:56:f0:c2:7d:29:93:
e9:3a:02:db:34:f5:1e:f8:bf:41:37:c7:b3:31:3f:
0c:64:95:bf:65:bf:de:da:44:64:af:2a:ad:a7:c2:
c3:15:fc:33:47:9f:50:76:50:88:8f:4c:cb:e9:c8:
ca:f2:00:82:16:de:b4:68:e3:53:1e:48:02:78:a6:
fe:a2:c0:b1:f7:a5:f3:d8:0d:e8:1d:d5:18:35:09:
f8:6a:29:b1:1e:ee:59:63:04:72:1f:57:2b:28:18:
cd:20:0d:f6:2a:ee:c7:8c:c0:f5:b8:6b:54:ab:e0:
d5:b5:f5:bd:5c:29:46:bc:95:4f:1d:da:51:c0:aa:
f6:d4:27:6c:73:29:23:2d:1b:45:3c:b7:8f:21:65:
03:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:12:6E:26:3D:C5:86:63:53:4C:07:4D:74:76:0A:16:FE:10:6E:17
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/3hJuJj3FhmNTTAdNdHYKFv4Qbhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.248.128.0/19
57.133.0.0/16
58.0.0.0/16
58.1.128.0/17
62.23.0.0/16
62.72.96.0/19
62.84.192.0/19
62.96.0.0/16
62.97.64.0/18
62.152.96.0/19
62.192.0.0/19
78.143.0.0/18
78.156.64.0/19
80.80.0.0/19
80.169.0.0/16
80.251.160.0/19
82.112.192.0/19
84.14.0.0/16
84.16.160.0/19
85.88.128.0/19
87.241.0.0/18
116.83.0.0/17
118.67.224.0/19
134.128.128.0/18
136.225.0.0/16
157.120.224.0/21
157.120.236.0-157.120.255.255
178.159.176.0/20
193.82.32.0/19
193.93.80.0/22
193.114.160.0/19
193.118.160.0/19
193.118.224.0/19
193.188.132.0/23
194.223.128.0-194.223.139.255
195.68.0.0/17
195.110.64.0/19
212.0.96.0/19
212.23.224.0/19
212.31.224.0/19
212.35.96.0/19
212.36.128.0/18
212.74.64.0/19
212.78.160.0/19
212.121.128.0/19
212.123.192.0/18
212.161.0.0/17
212.203.64.0/18
213.27.128.0/17
213.41.0.0/17
213.61.0.0/16
213.86.0.0/16
213.164.0.0/19
213.173.160.0/19
213.185.160.0/19
213.208.192.0/18
213.215.128.0/17
213.229.128.0/18
213.246.192.0/18
217.110.0.0/15
217.173.96.0/20
IPv6:
2001:920::/29
Signature Algorithm: sha256WithRSAEncryption
9d:b3:aa:bd:c4:9a:ad:db:cd:4c:cc:b4:db:ec:da:5a:6b:02:
a4:12:1e:4a:99:e7:b1:da:df:a6:fc:1f:b7:49:d3:cb:53:bc:
6a:52:22:19:e6:f1:79:b6:d9:ef:50:41:80:5e:9f:4a:6f:f7:
41:f8:53:c2:e1:11:54:80:43:f7:e5:d5:15:f1:c1:09:3e:f0:
d9:19:9b:cb:71:b8:af:50:f9:d8:82:15:e1:07:89:a6:54:19:
01:88:1f:e3:f0:58:48:02:bf:e4:e0:e2:dd:57:77:e8:46:d5:
84:3c:6d:d9:e5:7e:fc:5e:5c:fd:a0:e5:0e:c9:35:a0:9a:02:
3c:9a:b9:89:96:7b:4d:b2:ac:2d:2c:08:18:0b:67:d8:2b:b9:
66:3a:15:f1:21:9a:fa:0e:30:05:45:39:43:d8:ff:8d:32:ba:
5e:d9:be:66:aa:0d:ae:41:67:48:4b:a4:2e:a7:10:57:b2:cb:
0d:4a:9c:d4:d9:24:f6:87:9d:c9:96:f5:34:61:d6:04:cc:39:
46:e2:3d:98:d7:28:2a:f3:ed:6e:eb:08:39:18:c1:8e:1c:53:
10:52:19:a9:bc:a7:a4:ef:66:de:37:a2:49:80:91:e8:94:61:
0f:92:20:27:bd:e0:bf:1e:30:2b:99:9f:a7:7f:e9:59:5c:61:
f4:81:10:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:10:46 2026 by rpki-client