Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/TbTTZ-P2c2oKLxHAzaFKu1MWiOc.roa
File: TbTTZ-P2c2oKLxHAzaFKu1MWiOc.roa (raw, json)
Hash identifier: 3ytVgZVe5hScQPWAtYnYdviW70pMd2q5EFmWpIQV17E=
Subject key identifier: 4D:B4:D3:67:E3:F6:73:6A:0A:2F:11:C0:CD:A1:4A:BB:53:16:88:E7
Certificate issuer: /CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Certificate serial: 019A34854F49D4C3AFAD9EEC8E9446FDD3E1
Authority key identifier: 64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/TbTTZ-P2c2oKLxHAzaFKu1MWiOc.roa
Signing time: Thu 30 Oct 2025 09:49:03 +0000
ROA not before: Thu 30 Oct 2025 09:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 401783
IP address blocks: 94.176.164.0/24 maxlen: 24
188.215.68.0/24 maxlen: 24
188.215.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:34:85:4f:49:d4:c3:af:ad:9e:ec:8e:94:46:fd:d3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64fa66fb84a781a0584fd0d1c2df39bda4760519
Validity
Not Before: Oct 30 09:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4db4d367e3f6736a0a2f11c0cda14abb531688e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:27:b6:60:be:3a:b2:c0:92:94:4e:1c:b3:02:
7a:f0:7a:ad:eb:0f:67:0e:b7:28:ac:ce:7c:26:e2:
c6:19:72:99:de:cc:4f:b4:57:be:81:16:1e:eb:3f:
6e:5c:29:6f:9c:3f:ac:bc:d5:6a:fa:f3:53:67:97:
23:e0:33:14:9e:53:e6:dc:e1:8d:67:87:cf:b1:25:
1f:11:9a:18:19:b1:dd:8b:2d:3b:fc:5c:63:c1:23:
dc:bd:ed:66:ae:d4:e5:7b:13:d3:23:1b:d0:92:fb:
28:79:06:aa:fb:cc:ad:87:ce:f9:9b:f7:b4:7d:3c:
a3:a0:ec:dc:41:1f:3a:f1:b2:40:c9:e9:05:b2:04:
91:3a:c5:af:b9:7d:f8:eb:3e:0c:1c:e1:49:e5:2f:
58:7e:91:93:2b:43:a8:17:96:46:98:13:72:76:f0:
10:30:10:7a:5b:de:39:6d:3f:ba:8f:79:31:d7:1c:
65:35:a4:a3:81:ba:50:84:66:a2:2b:65:b5:ee:09:
73:bb:55:27:8b:93:55:99:f8:6a:19:ec:21:8b:bd:
63:ce:1a:42:04:d7:2f:f1:8e:d7:af:4e:f4:07:08:
16:64:eb:13:8e:24:95:42:21:67:ec:24:b6:69:71:
7e:4a:07:2e:09:47:34:27:7e:bd:50:c6:26:70:f1:
0a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B4:D3:67:E3:F6:73:6A:0A:2F:11:C0:CD:A1:4A:BB:53:16:88:E7
X509v3 Authority Key Identifier:
keyid:64:FA:66:FB:84:A7:81:A0:58:4F:D0:D1:C2:DF:39:BD:A4:76:05:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPpm-4SngaBYT9DRwt85vaR2BRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/TbTTZ-P2c2oKLxHAzaFKu1MWiOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/663b4d-b80e-4946-84c4-7408eb8bc586/1/ZPpm-4SngaBYT9DRwt85vaR2BRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.164.0/24
188.215.68.0/23
Signature Algorithm: sha256WithRSAEncryption
e4:bb:38:03:94:3e:3b:e3:57:95:33:97:39:6a:ac:9d:09:ac:
a3:25:d6:d0:a9:38:8d:06:b4:6f:3f:e4:03:10:ca:2f:22:b7:
ce:1d:20:b6:b6:ea:22:6a:68:8f:6b:55:38:04:83:83:1a:c0:
62:cc:a3:cd:05:c7:b0:10:7d:99:d4:fe:2a:dd:72:31:81:41:
c7:68:5d:30:81:da:46:75:e4:ea:95:1a:d9:cb:cf:ef:3c:c5:
a2:17:f2:d5:18:04:42:b3:03:b5:8f:20:c0:b4:67:11:8b:64:
e7:8a:6a:eb:15:ae:ab:4f:28:57:c9:79:43:d4:a7:40:5a:dc:
a5:f6:de:a3:be:20:0b:92:64:8d:1d:a6:76:7e:76:c8:e4:3e:
0e:9f:a3:11:88:06:c0:cd:ed:14:b9:7d:68:ef:a4:95:67:6d:
dc:4a:5f:f5:6f:08:7e:19:f4:50:60:63:09:a0:0d:24:34:ba:
15:b2:db:00:e6:ba:de:f8:ab:0c:2d:7c:68:fe:0a:67:c4:af:
2b:f9:dc:1e:fd:d0:c4:49:d2:7c:cf:be:5c:48:47:48:63:e4:
8e:82:e4:e5:64:9e:cf:48:c2:5d:27:21:26:28:41:07:85:de:
1c:c3:03:b7:e9:be:09:3c:1f:b5:77:43:4e:ba:64:97:d5:03:
fc:7a:a7:f5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZo0hU9J1MOvrZ7sjpRG/dPhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmE2NmZiODRhNzgxYTA1ODRmZDBkMWMyZGYzOWJkYTQ3
NjA1MTkwHhcNMjUxMDMwMDk0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGI0ZDM2N2UzZjY3MzZhMGEyZjExYzBjZGExNGFiYjUzMTY4OGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSe2YL46ssCSlE4cswJ68Hqt6w9n
DrcorM58JuLGGXKZ3sxPtFe+gRYe6z9uXClvnD+svNVq+vNTZ5cj4DMUnlPm3OGN
Z4fPsSUfEZoYGbHdiy07/FxjwSPcve1mrtTlexPTIxvQkvsoeQaq+8yth875m/e0
fTyjoOzcQR868bJAyekFsgSROsWvuX346z4MHOFJ5S9YfpGTK0OoF5ZGmBNydvAQ
MBB6W945bT+6j3kx1xxlNaSjgbpQhGaiK2W17glzu1Uni5NVmfhqGewhi71jzhpC
BNcv8Y7Xr070BwgWZOsTjiSVQiFn7CS2aXF+SgcuCUc0J369UMYmcPEK3QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE2002fj9nNqCi8RwM2hSrtTFojnMB8GA1UdIwQY
MBaAFGT6ZvuEp4GgWE/Q0cLfOb2kdgUZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQt
NzQwOGViOGJjNTg2LzEvVGJUVFotUDJjMm9LTHhIQXphRkt1MU1XaU9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi82NjNiNGQtYjgwZS00OTQ2LTg0YzQtNzQwOGViOGJjNTg2
LzEvWlBwbS00U25nYUJZVDlEUnd0ODV2YVIyQlJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXrCkAwQB
vNdEMA0GCSqGSIb3DQEBCwUAA4IBAQDkuzgDlD4741eVM5c5aqydCayjJdbQqTiN
BrRvP+QDEMovIrfOHSC2tuoiamiPa1U4BIODGsBizKPNBcewEH2Z1P4q3XIxgUHH
aF0wgdpGdeTqlRrZy8/vPMWiF/LVGARCswO1jyDAtGcRi2TnimrrFa6rTyhXyXlD
1KdAWtyl9t6jviALkmSNHaZ2fnbI5D4On6MRiAbAze0UuX1o76SVZ23cSl/1bwh+
GfRQYGMJoA0kNLoVstsA5rre+KsMLXxo/gpnxK8r+dwe/dDESdJ8z75cSEdIY+SO
guTlZJ7PSMJdJyEmKEEHhd4cwwO36b4JPB+1d0NOumSX1QP8eqf1
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:47:34 2025 by rpki-client