Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tiUj1DqfhynHHmNoT-TaTgHswco.roa
File: tiUj1DqfhynHHmNoT-TaTgHswco.roa (raw, json)
Hash identifier: X3caFqbpdTZgfrE4dS+Yy6VAnlZUL1QUubKkfr27SZw=
Subject key identifier: B6:25:23:D4:3A:9F:87:29:C7:1E:63:68:4F:E4:DA:4E:01:EC:C1:CA
Certificate issuer: /CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Certificate serial: 019C9A621D4D76D2F4DACB02BB8107DABA2A
Authority key identifier: 77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tiUj1DqfhynHHmNoT-TaTgHswco.roa
Signing time: Thu 26 Feb 2026 14:37:27 +0000
ROA not before: Thu 26 Feb 2026 14:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8426
IP address blocks: 62.173.64.0/18 maxlen: 24
62.231.128.0/19 maxlen: 24
79.123.0.0/17 maxlen: 24
80.168.0.0/16 maxlen: 24
81.171.128.0/17 maxlen: 24
89.206.128.0/17 maxlen: 24
89.206.216.0/22 maxlen: 22
89.206.216.0/23 maxlen: 23
89.206.218.0/23 maxlen: 23
176.52.208.0/21 maxlen: 24
185.22.164.0/23 maxlen: 24
185.39.232.0/23 maxlen: 24
185.77.72.0/22 maxlen: 24
185.77.74.0/24 maxlen: 24
185.77.200.0/22 maxlen: 24
185.78.204.0/22 maxlen: 24
194.88.132.0/23 maxlen: 24
194.112.32.0/19 maxlen: 24
194.119.128.0/18 maxlen: 24
195.8.64.0/19 maxlen: 24
195.58.192.0/19 maxlen: 24
195.102.0.0/16 maxlen: 24
195.157.0.0/16 maxlen: 24
195.216.0.0/19 maxlen: 24
195.245.201.0/24 maxlen: 24
212.49.192.0/18 maxlen: 24
212.125.64.0/19 maxlen: 24
212.126.128.0/19 maxlen: 24
212.169.0.0/18 maxlen: 24
212.188.128.0/17 maxlen: 24
213.2.0.0/16 maxlen: 24
213.165.128.0/19 maxlen: 24
213.253.0.0/18 maxlen: 24
217.158.0.0/16 maxlen: 24
2001:67c:1088::/47 maxlen: 48
2001:67c:1089::/48 maxlen: 48
2001:67c:27dc::/48 maxlen: 48
2001:a88::/32 maxlen: 32
2a00:ed0::/32 maxlen: 32
2a00:62e0::/32 maxlen: 32
2a00:62e0::/33 maxlen: 33
2a00:62e0:8000::/33 maxlen: 33
2a02:e100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:62:1d:4d:76:d2:f4:da:cb:02:bb:81:07:da:ba:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b8cf454b0962d16a4855808fd3abc15852bbd8
Validity
Not Before: Feb 26 14:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b62523d43a9f8729c71e63684fe4da4e01ecc1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:3b:04:02:1a:fc:62:78:79:6c:a3:5f:46:
22:52:f8:2f:e1:50:ee:8e:cc:eb:42:34:45:2b:91:
58:45:47:e1:03:84:bc:5d:23:e2:b0:cd:3c:b2:4b:
02:b4:21:ed:08:97:e0:99:ab:64:af:50:76:7e:13:
c8:94:de:bd:e3:2a:ae:ed:1a:18:68:67:b9:d4:c0:
fc:ef:e9:cd:88:c5:66:f2:1c:81:77:e7:44:67:52:
46:b4:37:73:23:90:55:90:89:09:3b:a9:6a:32:87:
ea:b1:83:ab:5f:9b:73:51:1c:73:95:a4:8b:ed:60:
31:11:11:15:59:27:8a:3a:8b:4a:c8:f9:0b:85:7a:
c0:67:ab:e4:42:7c:4a:e7:a7:12:5d:f8:b0:c1:b9:
0b:c0:c5:d2:de:3a:76:7e:1b:08:37:d1:c6:61:b7:
72:d6:e1:27:48:9b:34:9b:0a:5c:a6:80:19:ae:38:
3e:94:58:fd:cd:da:fe:aa:ff:32:7a:83:f7:f2:9d:
84:95:cb:e3:00:10:7c:4b:3c:c5:4d:70:2a:c9:49:
81:fb:a8:59:27:c2:85:5a:e1:28:63:5d:ef:ee:44:
35:5f:5a:75:5b:7d:5d:20:4f:1d:16:b9:1d:f3:66:
aa:ba:ff:98:ae:08:99:d0:58:f2:7a:cc:ea:80:80:
25:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:25:23:D4:3A:9F:87:29:C7:1E:63:68:4F:E4:DA:4E:01:EC:C1:CA
X509v3 Authority Key Identifier:
keyid:77:B8:CF:45:4B:09:62:D1:6A:48:55:80:8F:D3:AB:C1:58:52:BB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7jPRUsJYtFqSFWAj9OrwVhSu9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/tiUj1DqfhynHHmNoT-TaTgHswco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c171ca-4b1b-4187-ba46-a4fc9e2458ec/1/d7jPRUsJYtFqSFWAj9OrwVhSu9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.173.64.0/18
62.231.128.0/19
79.123.0.0/17
80.168.0.0/16
81.171.128.0/17
89.206.128.0/17
176.52.208.0/21
185.22.164.0/23
185.39.232.0/23
185.77.72.0/22
185.77.200.0/22
185.78.204.0/22
194.88.132.0/23
194.112.32.0/19
194.119.128.0/18
195.8.64.0/19
195.58.192.0/19
195.102.0.0/16
195.157.0.0/16
195.216.0.0/19
195.245.201.0/24
212.49.192.0/18
212.125.64.0/19
212.126.128.0/19
212.169.0.0/18
212.188.128.0/17
213.2.0.0/16
213.165.128.0/19
213.253.0.0/18
217.158.0.0/16
IPv6:
2001:67c:1088::/47
2001:67c:27dc::/48
2001:a88::/32
2a00:ed0::/32
2a00:62e0::/32
2a02:e100::/29
Signature Algorithm: sha256WithRSAEncryption
27:e3:54:f5:a9:84:6c:15:e9:8a:6a:63:72:89:83:02:4c:6f:
8d:77:5f:51:25:d5:22:75:cc:83:43:47:4b:f5:ac:4e:11:47:
5e:20:15:68:52:43:8a:e2:ca:e0:0a:b8:88:72:93:97:b3:25:
b8:93:20:d9:54:2b:25:50:7e:d7:3f:7f:fa:24:e2:8b:28:4a:
37:69:a7:16:83:32:8e:66:8b:cd:2d:e9:61:7b:64:bf:3a:c3:
b3:c7:9e:6c:04:00:08:6f:c5:cb:8c:d3:cf:1f:62:fc:f8:28:
df:ea:6f:9f:5a:ea:1c:eb:40:0a:12:4a:09:ba:85:6b:77:a7:
52:d8:c7:0b:53:a5:fa:e5:cc:47:0a:5d:4e:d7:1d:0a:55:19:
6e:28:d4:a3:8d:79:11:c8:c4:23:d7:28:ce:d8:1c:ce:e0:62:
90:49:64:cf:c3:96:74:81:ee:8b:53:92:a1:de:37:d5:d3:46:
b5:3d:8a:4d:6c:2f:98:70:4b:ac:9e:90:33:28:e9:e4:8b:f1:
57:d1:ca:9e:0f:cc:a4:e0:44:e8:81:ae:88:94:80:f2:a8:a0:
06:a2:b8:3c:0b:41:96:bc:d2:b7:74:0d:cc:3e:21:29:e8:e9:
5f:31:21:91:e0:e3:a1:85:a6:7a:61:45:8c:5d:e3:a1:80:85:
45:cc:d5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:37:16 2026 by rpki-client