Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/TTmsDPG2FnkljDQIj20yFpPrAlc.roa
File: TTmsDPG2FnkljDQIj20yFpPrAlc.roa (raw, json)
Hash identifier: DusIlZNokXpl0mIysr+wEk2U7Cm/4kltJG+KnV9R0f8=
Subject key identifier: 4D:39:AC:0C:F1:B6:16:79:25:8C:34:08:8F:6D:32:16:93:EB:02:57
Certificate issuer: /CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Certificate serial: 019D6740135B74767119185209319B1FA878
Authority key identifier: 85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/TTmsDPG2FnkljDQIj20yFpPrAlc.roa
Signing time: Tue 07 Apr 2026 09:22:25 +0000
ROA not before: Tue 07 Apr 2026 09:22:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12392
IP address blocks: 62.197.64.0/18 maxlen: 18
62.197.64.0/20 maxlen: 20
62.197.80.0/20 maxlen: 20
62.197.96.0/20 maxlen: 20
62.197.112.0/20 maxlen: 20
78.129.0.0/17 maxlen: 17
78.129.0.0/20 maxlen: 20
78.129.16.0/20 maxlen: 20
78.129.32.0/20 maxlen: 20
78.129.48.0/20 maxlen: 20
78.129.64.0/20 maxlen: 20
78.129.80.0/20 maxlen: 20
78.129.96.0/20 maxlen: 20
78.129.112.0/20 maxlen: 20
82.212.128.0/18 maxlen: 18
82.212.128.0/20 maxlen: 20
82.212.144.0/20 maxlen: 20
82.212.160.0/20 maxlen: 20
82.212.176.0/20 maxlen: 20
85.26.0.0/17 maxlen: 17
85.26.0.0/20 maxlen: 20
85.26.16.0/20 maxlen: 20
85.26.32.0/20 maxlen: 20
85.26.48.0/20 maxlen: 20
85.26.64.0/20 maxlen: 20
85.26.80.0/20 maxlen: 20
85.26.96.0/20 maxlen: 20
85.26.112.0/20 maxlen: 20
85.27.0.0/17 maxlen: 17
85.27.32.0/20 maxlen: 20
85.27.48.0/20 maxlen: 20
85.201.0.0/16 maxlen: 16
85.201.0.0/20 maxlen: 20
85.201.16.0/20 maxlen: 20
85.201.32.0/20 maxlen: 20
85.201.48.0/20 maxlen: 20
85.201.64.0/20 maxlen: 20
85.201.80.0/20 maxlen: 20
85.201.96.0/20 maxlen: 20
85.201.112.0/20 maxlen: 20
85.201.128.0/20 maxlen: 20
85.201.144.0/20 maxlen: 20
85.201.160.0/20 maxlen: 20
85.201.176.0/20 maxlen: 20
85.201.192.0/20 maxlen: 20
85.201.208.0/20 maxlen: 20
85.201.224.0/20 maxlen: 20
85.201.240.0/20 maxlen: 20
95.182.128.0/17 maxlen: 17
95.182.128.0/20 maxlen: 20
95.182.144.0/20 maxlen: 20
95.182.192.0/20 maxlen: 20
95.182.208.0/20 maxlen: 20
95.182.224.0/20 maxlen: 20
95.182.240.0/20 maxlen: 20
109.88.0.0/15 maxlen: 15
109.88.0.0/20 maxlen: 20
109.88.16.0/20 maxlen: 20
109.88.32.0/20 maxlen: 20
109.88.48.0/20 maxlen: 20
109.88.64.0/20 maxlen: 20
109.88.80.0/20 maxlen: 20
109.88.96.0/19 maxlen: 19
109.88.128.0/19 maxlen: 19
109.88.160.0/20 maxlen: 20
109.88.176.0/20 maxlen: 20
109.88.192.0/20 maxlen: 20
109.88.208.0/20 maxlen: 20
109.88.224.0/20 maxlen: 20
109.88.240.0/20 maxlen: 20
109.89.0.0/20 maxlen: 20
109.89.16.0/20 maxlen: 20
109.89.32.0/20 maxlen: 20
109.89.48.0/20 maxlen: 20
109.89.64.0/20 maxlen: 20
109.89.80.0/20 maxlen: 20
109.89.96.0/20 maxlen: 20
109.89.112.0/20 maxlen: 20
109.89.128.0/20 maxlen: 20
109.89.144.0/20 maxlen: 20
109.89.160.0/20 maxlen: 20
109.89.176.0/20 maxlen: 20
109.89.192.0/20 maxlen: 20
109.89.208.0/20 maxlen: 20
109.89.224.0/20 maxlen: 20
109.89.240.0/20 maxlen: 20
149.154.192.0/18 maxlen: 18
185.3.160.0/22 maxlen: 22
212.68.192.0/18 maxlen: 18
212.68.192.0/20 maxlen: 20
212.68.208.0/20 maxlen: 20
212.68.224.0/20 maxlen: 20
212.68.240.0/20 maxlen: 20
213.189.160.0/19 maxlen: 19
213.189.160.0/20 maxlen: 20
213.189.176.0/20 maxlen: 20
213.213.192.0/18 maxlen: 18
213.213.192.0/20 maxlen: 20
213.213.208.0/20 maxlen: 20
213.213.224.0/20 maxlen: 20
213.213.240.0/20 maxlen: 20
217.15.224.0/20 maxlen: 20
2a02:2788::/32 maxlen: 32
2a02:2788::/40 maxlen: 40
2a02:2788:100::/40 maxlen: 40
2a02:2788:200::/40 maxlen: 40
2a02:2788:300::/40 maxlen: 40
2a02:2788:400::/40 maxlen: 40
2a02:2788:500::/40 maxlen: 40
2a02:2788:600::/40 maxlen: 40
2a02:2788:700::/40 maxlen: 40
2a02:2788:800::/40 maxlen: 40
2a02:2788:900::/40 maxlen: 40
2a02:2788:a00::/40 maxlen: 40
2a02:2788:b00::/40 maxlen: 40
2a02:2788:c00::/40 maxlen: 40
2a02:2788:d00::/40 maxlen: 40
2a02:2788:e00::/40 maxlen: 40
2a02:2788:f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:67:40:13:5b:74:76:71:19:18:52:09:31:9b:1f:a8:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=859b5b6a3d82bd00ed31c6ceb3aea7ad591ee537
Validity
Not Before: Apr 7 09:22:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d39ac0cf1b61679258c34088f6d321693eb0257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b6:c5:f2:e8:e0:1e:47:34:48:90:f5:5f:ab:
0f:71:e4:ef:59:1e:f2:51:39:9a:ff:cd:74:00:f6:
76:06:7e:30:95:87:10:88:ff:63:77:17:fc:72:cb:
aa:c2:dd:e3:7b:e3:32:86:b5:dd:b7:d7:f3:f2:67:
8c:48:18:96:1c:86:54:ce:fb:44:8a:5b:d7:f9:72:
4d:66:ad:45:81:ec:ba:7b:59:56:33:dc:69:3b:98:
16:66:75:89:c3:d7:42:f0:7b:e5:0c:bf:10:9d:d1:
4a:59:3f:41:e8:6e:c3:9e:41:35:b7:82:d9:f3:64:
30:94:e9:f8:ac:a4:cb:ad:53:d8:22:3d:98:d6:97:
85:9c:6d:bf:9c:a5:f7:ad:f6:b3:2f:6f:f8:52:e6:
e3:68:13:12:10:80:fb:b9:fa:60:49:35:0c:0c:f1:
9f:20:25:ce:e1:e1:fd:73:1b:94:2b:8b:7d:88:3e:
22:36:55:50:95:6a:c6:dd:97:a3:01:2c:0d:36:da:
c1:0b:d8:3e:49:f8:bd:59:43:f7:c9:1c:f7:be:8e:
14:a9:cf:5e:5b:68:61:b4:03:a1:06:bc:21:74:a5:
45:68:33:9e:92:1f:3c:bc:af:6b:b2:7c:63:97:00:
57:73:db:47:06:17:ff:a4:c1:47:1d:ea:de:22:30:
10:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:39:AC:0C:F1:B6:16:79:25:8C:34:08:8F:6D:32:16:93:EB:02:57
X509v3 Authority Key Identifier:
keyid:85:9B:5B:6A:3D:82:BD:00:ED:31:C6:CE:B3:AE:A7:AD:59:1E:E5:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hZtbaj2CvQDtMcbOs66nrVke5Tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/TTmsDPG2FnkljDQIj20yFpPrAlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8edb82-ce2b-44e1-92cd-2fc9e6b6fc96/1/hZtbaj2CvQDtMcbOs66nrVke5Tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.64.0/18
78.129.0.0/17
82.212.128.0/18
85.26.0.0/17
85.27.0.0/17
85.201.0.0/16
95.182.128.0/17
109.88.0.0/15
149.154.192.0/18
185.3.160.0/22
212.68.192.0/18
213.189.160.0/19
213.213.192.0/18
217.15.224.0/20
IPv6:
2a02:2788::/32
Signature Algorithm: sha256WithRSAEncryption
58:5a:ae:ad:6c:d7:d2:28:1e:38:37:6d:9f:ec:a8:40:25:84:
82:84:b8:da:80:66:da:4c:52:c6:78:b1:23:f6:29:9f:e1:6c:
30:f1:57:22:63:a8:f2:fa:c7:5e:2d:d4:78:3d:99:ae:d4:86:
13:02:7d:e9:c9:61:a9:04:d9:9a:45:4a:6c:46:59:72:a7:43:
30:4e:88:50:a2:8e:b3:70:cc:07:c0:24:8c:e7:11:ec:62:6e:
62:e1:c4:fc:8b:4b:b7:7f:a0:c5:a7:29:dc:92:d4:47:97:d5:
6c:56:17:a9:02:ec:75:cb:dd:08:20:7a:82:43:26:cf:67:b3:
c1:45:bf:a2:0b:bb:d2:8c:47:ba:65:05:13:52:b9:63:a0:46:
a2:9e:2f:7a:9b:5f:a2:b1:52:6b:65:f1:c2:60:6c:98:5b:55:
95:a8:2e:6b:4d:10:13:31:8f:fc:0a:4b:70:ad:1c:33:3c:a1:
d5:35:30:0d:c3:72:e7:cb:57:6c:ee:bc:a8:b0:f7:d4:47:e6:
26:d4:b9:08:fb:3c:07:ae:54:f9:f2:5a:29:27:a6:9b:6a:76:
50:7a:23:91:70:b1:28:b2:ab:73:59:67:7f:8c:45:5b:d0:79:
86:4f:ce:93:e9:d6:51:c2:2b:4a:24:75:f9:5f:bc:4f:24:d8:
1b:55:6a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:12:15 2026 by rpki-client