Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/TzoH-k-UGeNvhzqHQUEVAQIJuWw.roa
File: TzoH-k-UGeNvhzqHQUEVAQIJuWw.roa (raw, json)
Hash identifier: 7uHIJwdjpOn8htuzOnTlNgqjPCRA7LrnNNTVQoYjlzk=
Subject key identifier: 4F:3A:07:FA:4F:94:19:E3:6F:87:3A:87:41:41:15:01:02:09:B9:6C
Certificate issuer: /CN=48171672d53fdf8b2537764f537e365a5927bdaf
Certificate serial: 019F22A2839C6D7D8F96EFFF54C102390BE4
Authority key identifier: 48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/TzoH-k-UGeNvhzqHQUEVAQIJuWw.roa
Signing time: Thu 02 Jul 2026 11:41:43 +0000
ROA not before: Thu 02 Jul 2026 11:41:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21056
IP address blocks: 45.84.140.0/22 maxlen: 32
45.143.36.0/22 maxlen: 32
45.151.12.0/22 maxlen: 32
45.151.64.0/22 maxlen: 32
46.44.192.0/18 maxlen: 32
78.152.96.0/19 maxlen: 32
79.108.136.0/21 maxlen: 24
79.135.32.0/19 maxlen: 32
80.93.128.0/20 maxlen: 32
83.137.56.0/21 maxlen: 24
87.232.160.0/19 maxlen: 24
87.247.232.0/21 maxlen: 32
91.143.192.0/20 maxlen: 32
94.138.160.0/19 maxlen: 32
103.26.124.0/22 maxlen: 22
103.43.232.0/22 maxlen: 22
103.61.184.0/22 maxlen: 22
103.248.184.0/22 maxlen: 24
103.248.186.0/24 maxlen: 24
109.122.208.0/21 maxlen: 21
144.48.192.0/22 maxlen: 32
185.125.64.0/22 maxlen: 22
185.158.116.0/22 maxlen: 32
185.170.36.0/22 maxlen: 32
185.224.60.0/22 maxlen: 32
185.224.104.0/22 maxlen: 32
185.230.92.0/22 maxlen: 32
185.230.192.0/22 maxlen: 32
185.230.232.0/22 maxlen: 32
185.231.160.0/22 maxlen: 32
185.234.164.0/22 maxlen: 32
185.241.20.0/22 maxlen: 32
188.240.32.0/22 maxlen: 22
193.124.240.0/22 maxlen: 22
194.58.216.0/22 maxlen: 22
213.182.64.0/19 maxlen: 32
2a00:14f8::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:a2:83:9c:6d:7d:8f:96:ef:ff:54:c1:02:39:0b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48171672d53fdf8b2537764f537e365a5927bdaf
Validity
Not Before: Jul 2 11:41:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4f3a07fa4f9419e36f873a87414115010209b96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:fa:08:5a:b9:69:5b:24:fe:88:6c:61:07:
1a:62:dd:9a:50:bb:ac:98:50:65:3e:a3:50:25:3a:
14:0e:d1:d1:38:5a:d3:ca:cb:86:c1:88:cf:6e:a8:
f2:1a:b6:19:f1:01:c9:5e:1b:b6:b7:f1:e1:3b:d1:
83:2c:71:38:df:c3:04:e6:b1:80:d8:5d:cb:4c:2c:
cb:9e:c5:43:66:84:18:ff:39:ab:ed:7e:5a:0e:43:
8d:97:54:25:20:df:04:02:32:52:18:a5:d8:b6:69:
3c:40:cb:60:83:13:cc:e3:21:e2:ff:44:26:b3:ef:
a9:02:4b:2d:dd:ee:03:27:76:71:fc:3a:e9:cb:07:
68:9e:8c:d1:58:0b:8d:37:13:ee:1e:1e:02:d6:bf:
7a:da:06:1f:0f:b8:52:43:c4:d4:76:ae:5d:13:33:
64:54:7e:60:e1:95:96:6e:60:e5:bd:b9:7f:a9:91:
e2:a4:60:61:05:1c:23:e4:27:1f:94:02:46:af:09:
81:f4:ca:22:5b:ee:18:80:1b:06:87:4a:09:58:a3:
83:7b:95:35:bc:21:f2:e0:6f:7c:5f:8e:8b:13:43:
31:12:0c:a5:a5:73:37:3d:08:22:3c:91:4b:b6:3c:
83:26:73:5e:b8:3a:84:23:be:df:39:78:16:c1:d0:
d5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:07:FA:4F:94:19:E3:6F:87:3A:87:41:41:15:01:02:09:B9:6C
X509v3 Authority Key Identifier:
keyid:48:17:16:72:D5:3F:DF:8B:25:37:76:4F:53:7E:36:5A:59:27:BD:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SBcWctU_34slN3ZPU342Wlknva8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/TzoH-k-UGeNvhzqHQUEVAQIJuWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/55e138-56da-4492-a1f2-db04f21390a0/1/SBcWctU_34slN3ZPU342Wlknva8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.140.0/22
45.143.36.0/22
45.151.12.0/22
45.151.64.0/22
46.44.192.0/18
78.152.96.0/19
79.108.136.0/21
79.135.32.0/19
80.93.128.0/20
83.137.56.0/21
87.232.160.0/19
87.247.232.0/21
91.143.192.0/20
94.138.160.0/19
103.26.124.0/22
103.43.232.0/22
103.61.184.0/22
103.248.184.0/22
109.122.208.0/21
144.48.192.0/22
185.125.64.0/22
185.158.116.0/22
185.170.36.0/22
185.224.60.0/22
185.224.104.0/22
185.230.92.0/22
185.230.192.0/22
185.230.232.0/22
185.231.160.0/22
185.234.164.0/22
185.241.20.0/22
188.240.32.0/22
193.124.240.0/22
194.58.216.0/22
213.182.64.0/19
IPv6:
2a00:14f8::/32
Signature Algorithm: sha256WithRSAEncryption
9d:f1:ce:c0:b1:7e:c1:8e:aa:b8:fe:fd:5a:60:98:bd:47:1a:
7f:d1:0f:a3:e8:b9:7f:76:ce:8d:8f:ab:20:6d:b5:17:3a:8d:
92:fb:c6:df:b2:c4:fa:03:16:46:e6:c3:ba:23:ea:a4:af:e8:
ec:32:58:f9:f7:f4:32:ae:d5:af:51:dd:25:05:93:68:07:7a:
6a:98:6e:79:f1:9b:8e:7e:48:c3:dd:75:ab:e6:fb:d3:a1:f1:
a6:f4:58:cf:de:5e:42:6c:88:74:51:18:6d:0c:43:b7:31:57:
c7:bf:b4:60:69:9d:90:86:62:bf:56:e5:f9:21:8c:77:98:8c:
08:c0:05:80:94:94:0a:8d:b8:b0:90:34:51:ab:cd:66:fe:df:
fc:cf:e5:5d:89:f2:9b:9b:ab:94:9a:e7:ae:35:02:20:08:a7:
d6:cf:14:eb:5d:6b:d2:b3:de:d1:54:d0:7b:f7:e6:59:01:4f:
83:55:6c:25:3a:01:ab:e2:46:97:46:f6:71:e7:1f:47:8c:79:
59:fa:b4:b3:dd:94:d3:9d:09:29:02:74:c6:34:c3:16:03:8d:
fa:93:ca:de:b0:ba:59:6e:a1:0d:f9:00:fc:6b:3e:73:de:bc:
52:69:9e:6d:cc:14:cf:70:96:d2:35:62:55:96:67:ab:13:79:
34:ff:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:31:29 2026 by rpki-client