Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa
File: Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa (raw, json)
Hash identifier: EzrszZm8Tel+/kV3Hb11JBz6gi/eN1N+IU5w2IVFc9w=
Subject key identifier: 4E:0C:36:F9:03:C1:7C:7C:16:17:93:2D:E2:26:84:7C:A5:90:4E:D3
Certificate issuer: /CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Certificate serial: 019C700AF800CE875DFA73BDB23A756BEA8A
Authority key identifier: 65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa
Signing time: Wed 18 Feb 2026 09:18:12 +0000
ROA not before: Wed 18 Feb 2026 09:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205769
IP address blocks: 193.29.233.0/24 maxlen: 24
193.29.234.0/24 maxlen: 24
193.29.236.0/24 maxlen: 24
193.29.237.0/24 maxlen: 24
193.29.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:70:0a:f8:00:ce:87:5d:fa:73:bd:b2:3a:75:6b:ea:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506096695f7e6610b19b08e1d7fd9c4d914a4f0
Validity
Not Before: Feb 18 09:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e0c36f903c17c7c1617932de226847ca5904ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4f:0f:f9:81:d8:b9:32:01:ee:f7:09:89:b4:
d4:50:17:17:9f:7c:cd:4c:c9:a6:23:e8:c6:f2:f9:
0b:27:58:03:81:6b:ec:c5:ea:04:1f:85:d3:1a:b2:
fc:5b:91:3e:c8:1b:fb:42:16:2d:3c:6d:12:0f:fc:
1d:9c:10:13:a4:2e:b1:e6:aa:d6:11:07:d7:33:1c:
bb:8e:d2:9b:33:b0:03:ae:a6:2e:94:0f:88:a3:fe:
43:75:f9:ce:e5:d1:a8:1c:6c:aa:19:2d:8b:d5:41:
aa:10:e2:8a:c7:e3:b5:c4:3c:39:99:09:92:67:8d:
cb:1e:13:3f:29:72:12:11:3b:a8:2d:d4:fb:47:77:
7f:c2:85:d4:69:db:9d:b6:b2:aa:a7:6c:5a:45:e7:
0e:ca:1f:f1:d1:e5:86:e9:fd:6d:96:df:37:e2:ee:
7f:e7:8b:94:59:41:7c:2c:2d:6c:f9:09:35:b0:30:
d0:e9:47:e0:45:50:d0:c2:7a:fa:27:0f:59:8b:6e:
90:d3:f5:80:44:d9:e2:5c:e3:6b:e0:4e:e7:7b:be:
52:46:36:f7:e4:e8:65:78:db:08:61:ac:13:3f:e1:
52:6a:59:61:71:84:94:d3:ee:5a:7c:02:c3:00:71:
f4:12:ad:5c:3b:81:bf:2f:6b:8e:29:07:07:f1:dd:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:0C:36:F9:03:C1:7C:7C:16:17:93:2D:E2:26:84:7C:A5:90:4E:D3
X509v3 Authority Key Identifier:
keyid:65:06:09:66:95:F7:E6:61:0B:19:B0:8E:1D:7F:D9:C4:D9:14:A4:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZQYJZpX35mELGbCOHX_ZxNkUpPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/Tgw2-QPBfHwWF5Mt4iaEfKWQTtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f5baa4-f670-4385-bc38-a4152558d18c/1/ZQYJZpX35mELGbCOHX_ZxNkUpPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.233.0-193.29.234.255
193.29.236.0/23
193.29.239.0/24
Signature Algorithm: sha256WithRSAEncryption
43:33:8c:95:73:2c:0a:a3:6a:32:53:f8:d9:c1:21:f1:f1:c1:
05:fe:16:e3:c9:ad:5c:eb:bd:43:c4:8e:eb:23:98:f0:42:36:
9c:7c:4e:1b:21:f2:ca:05:4d:43:62:8a:17:91:e8:36:6a:66:
3b:1d:85:ca:48:6f:02:be:b7:50:11:3d:60:16:95:aa:6e:e9:
9b:0b:20:a2:ed:8d:72:b7:ed:77:78:22:cf:21:ba:5d:cc:8d:
69:3e:b1:7a:9f:41:db:d8:2b:b8:c9:d9:ca:68:d8:80:d2:33:
88:68:06:f6:d9:61:b2:71:a2:9d:03:63:47:b6:46:62:eb:c0:
02:d6:d4:f8:74:90:76:a3:ef:54:57:62:97:a0:7e:1d:59:53:
0e:fa:74:da:38:4d:23:38:d9:7e:bf:9e:4c:3d:ab:d5:fd:f7:
d5:d6:8a:2a:ca:e5:f2:c4:e4:bf:b0:b1:88:b8:b7:0b:f5:d3:
6c:01:79:80:68:b2:80:e4:7c:b7:0e:4e:fd:a6:ce:71:4b:e1:
f3:e1:f2:a4:0b:4e:a7:d8:4a:72:f1:1c:e7:72:64:0d:67:38:
c9:7c:7e:b3:de:26:d2:a9:4b:e6:3f:aa:49:f8:00:dd:67:c6:
3d:7a:98:d3:e4:f2:94:d5:ea:e8:d7:20:22:8f:55:36:30:e6:
56:88:e0:09
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZxwCvgAzodd+nO9sjp1a+qKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1MDYwOTY2OTVmN2U2NjEwYjE5YjA4ZTFkN2ZkOWM0ZDkx
NGE0ZjAwHhcNMjYwMjE4MDkxODEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTBjMzZmOTAzYzE3YzdjMTYxNzkzMmRlMjI2ODQ3Y2E1OTA0ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqk8P+YHYuTIB7vcJibTUUBcXn3zN
TMmmI+jG8vkLJ1gDgWvsxeoEH4XTGrL8W5E+yBv7QhYtPG0SD/wdnBATpC6x5qrW
EQfXMxy7jtKbM7ADrqYulA+Io/5DdfnO5dGoHGyqGS2L1UGqEOKKx+O1xDw5mQmS
Z43LHhM/KXISETuoLdT7R3d/woXUadudtrKqp2xaRecOyh/x0eWG6f1tlt834u5/
54uUWUF8LC1s+Qk1sDDQ6UfgRVDQwnr6Jw9Zi26Q0/WARNniXONr4E7ne75SRjb3
5OhleNsIYawTP+FSallhcYSU0+5afALDAHH0Eq1cO4G/L2uOKQcH8d0fLwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFE4MNvkDwXx8FheTLeImhHylkE7TMB8GA1UdIwQY
MBaAFGUGCWaV9+ZhCxmwjh1/2cTZFKTwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgt
YTQxNTI1NThkMThjLzEvVGd3Mi1RUEJmSHdXRjVNdDRpYUVmS1dRVHRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9mNWJhYTQtZjY3MC00Mzg1LWJjMzgtYTQxNTI1NThkMThj
LzEvWlFZSlpwWDM1bUVMR2JDT0hYX1p4TmtVcFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBADBHekD
BADBHeoDBAHBHewDBADBHe8wDQYJKoZIhvcNAQELBQADggEBAEMzjJVzLAqjajJT
+NnBIfHxwQX+FuPJrVzrvUPEjusjmPBCNpx8Thsh8soFTUNiiheR6DZqZjsdhcpI
bwK+t1ARPWAWlapu6ZsLIKLtjXK37Xd4Is8hul3MjWk+sXqfQdvYK7jJ2cpo2IDS
M4hoBvbZYbJxop0DY0e2RmLrwALW1Ph0kHaj71RXYpegfh1ZUw76dNo4TSM42X6/
nkw9q9X999XWiirK5fLE5L+wsYi4twv102wBeYBosoDkfLcOTv2mznFL4fPh8qQL
TqfYSnLxHOdyZA1nOMl8frPeJtKpS+Y/qkn4AN1nxj16mNPk8pTV6ujXICKPVTYw
5laI4Ak=
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:39:55 2026 by rpki-client