Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tbTVotR_10xnyTb5YwqXbc5K5Xk.roa
File: tbTVotR_10xnyTb5YwqXbc5K5Xk.roa (raw, json)
Hash identifier: ciV6IqiE8TJp9MxBjKVbedo3G9pMtl4u7fzRAxc6nKg=
Subject key identifier: B5:B4:D5:A2:D4:7F:D7:4C:67:C9:36:F9:63:0A:97:6D:CE:4A:E5:79
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019EB69AB2FDC99DE3BBC952E2C2A3FBABC2
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tbTVotR_10xnyTb5YwqXbc5K5Xk.roa
Signing time: Thu 11 Jun 2026 12:14:12 +0000
ROA not before: Thu 11 Jun 2026 12:14:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 194.231.128.0/22 maxlen: 24
194.231.128.0/24 maxlen: 24
194.231.130.0/24 maxlen: 24
194.231.131.0/24 maxlen: 24
194.231.132.0/22 maxlen: 22
194.231.132.0/24 maxlen: 24
194.231.134.0/24 maxlen: 24
194.231.135.0/24 maxlen: 24
194.231.136.0/22 maxlen: 22
194.231.136.0/24 maxlen: 24
194.231.137.0/24 maxlen: 24
194.231.138.0/24 maxlen: 24
194.231.139.0/24 maxlen: 24
194.231.142.0/24 maxlen: 24
194.231.148.0/24 maxlen: 24
194.231.150.0/24 maxlen: 24
194.231.151.0/24 maxlen: 24
194.231.152.0/22 maxlen: 22
194.231.153.0/24 maxlen: 24
194.231.154.0/24 maxlen: 24
194.231.157.0/24 maxlen: 24
194.231.158.0/24 maxlen: 24
194.231.195.0/24 maxlen: 24
194.231.196.0/22 maxlen: 22
194.231.196.0/24 maxlen: 24
194.231.198.0/24 maxlen: 24
194.231.199.0/24 maxlen: 24
194.231.200.0/22 maxlen: 22
194.231.200.0/24 maxlen: 24
194.231.201.0/24 maxlen: 24
194.231.202.0/23 maxlen: 24
194.231.202.0/24 maxlen: 24
194.231.203.0/24 maxlen: 24
194.231.204.0/22 maxlen: 22
194.231.204.0/23 maxlen: 24
194.231.206.0/23 maxlen: 24
194.231.208.0/22 maxlen: 24
194.231.208.0/23 maxlen: 24
194.231.210.0/23 maxlen: 24
194.231.212.0/22 maxlen: 22
194.231.212.0/24 maxlen: 24
194.231.213.0/24 maxlen: 24
194.231.218.0/23 maxlen: 24
194.231.220.0/22 maxlen: 24
194.231.222.0/24 maxlen: 24
194.231.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:9a:b2:fd:c9:9d:e3:bb:c9:52:e2:c2:a3:fb:ab:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jun 11 12:14:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5b4d5a2d47fd74c67c936f9630a976dce4ae579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:7a:d0:33:ee:f4:08:8a:97:af:ac:41:e0:dc:
1b:ef:68:17:81:53:39:9f:9d:4a:74:8d:3a:72:5a:
39:56:8b:01:ee:92:34:e9:5e:de:0d:7d:c1:b9:e8:
0d:e4:59:e8:9a:d9:be:6f:69:b0:56:1d:59:13:23:
54:03:35:af:90:93:e1:f0:3f:d5:c5:10:17:3c:19:
9b:28:d7:00:24:e1:94:bd:85:28:20:ff:05:11:0a:
36:a6:0c:80:c1:cb:b7:ec:ea:57:e7:fb:69:67:3e:
13:79:96:30:c0:5b:a5:a9:10:da:5a:c2:c3:bb:3c:
0a:94:4e:fc:69:45:7e:b1:17:17:e3:38:30:1a:0e:
7f:16:60:8b:ca:e0:2c:26:bb:0b:a8:f7:6c:d1:59:
fb:5c:9d:ec:23:42:6c:ef:2b:d4:6a:80:47:a0:c4:
21:ef:61:8a:43:41:ee:d0:c4:ab:8d:01:32:94:cf:
6f:16:a3:7c:1a:30:1f:1c:c4:66:4f:fd:98:cd:b4:
ee:ce:fd:67:dc:d3:d0:c5:50:a4:ff:76:8e:9f:82:
db:5e:29:59:6a:1a:dd:47:5a:5e:a9:32:3f:55:11:
c0:3b:bb:29:3b:8c:b6:fe:71:d7:e5:85:ba:f8:f1:
e9:1b:d5:c8:f4:9c:63:b9:05:4d:a3:2a:fd:56:32:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:D5:A2:D4:7F:D7:4C:67:C9:36:F9:63:0A:97:6D:CE:4A:E5:79
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/tbTVotR_10xnyTb5YwqXbc5K5Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.231.128.0-194.231.139.255
194.231.142.0/24
194.231.148.0/24
194.231.150.0-194.231.155.255
194.231.157.0-194.231.158.255
194.231.195.0-194.231.215.255
194.231.218.0-194.231.223.255
Signature Algorithm: sha256WithRSAEncryption
34:74:aa:52:e3:22:c5:06:9b:16:01:d5:7a:95:8f:e4:f5:75:
4c:23:27:e3:84:82:8c:33:30:46:e8:ac:b1:70:87:d8:82:e7:
98:59:43:ff:9d:fd:3c:c5:79:3d:70:6d:bf:13:97:11:d6:ef:
94:e2:46:ea:58:3e:4a:bd:20:36:20:e1:a9:43:8f:16:8a:b3:
98:70:62:2b:b6:99:d5:74:65:90:8f:db:f5:c1:58:af:cb:31:
dc:06:78:da:58:4f:12:a4:af:1d:b8:b7:d0:e4:df:99:6b:e6:
b4:e9:97:ac:55:80:e1:22:c8:db:4a:b2:b1:4a:9f:d4:19:14:
13:80:c9:04:5a:a1:e7:99:a2:4f:77:4f:7c:ed:cd:ae:9c:30:
fc:06:25:6f:32:c2:8e:a2:03:f9:ec:69:94:bc:26:91:45:d3:
25:3b:12:73:8b:77:b9:78:5b:69:31:92:d7:fc:1a:49:b4:19:
98:3d:05:46:86:34:eb:b7:b7:b9:bb:07:b1:bc:27:9f:1a:7a:
39:20:28:3b:ed:31:95:e5:30:78:23:1f:17:69:28:84:66:0d:
60:ba:3b:de:6f:6e:5d:59:c2:40:44:c5:35:77:e2:5f:ee:74:
c8:57:66:1a:bf:4d:42:39:9e:91:7a:a5:18:22:2d:b9:4b:4f:
e1:b5:36:6b
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgISAZ62mrL9yZ3ju8lS4sKj+6vCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNjExMTIxNDEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWI0ZDVhMmQ0N2ZkNzRjNjdjOTM2Zjk2MzBhOTc2ZGNlNGFlNTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53rQM+70CIqXr6xB4Nwb72gXgVM5
n51KdI06clo5VosB7pI06V7eDX3BuegN5Fnomtm+b2mwVh1ZEyNUAzWvkJPh8D/V
xRAXPBmbKNcAJOGUvYUoIP8FEQo2pgyAwcu37OpX5/tpZz4TeZYwwFulqRDaWsLD
uzwKlE78aUV+sRcX4zgwGg5/FmCLyuAsJrsLqPds0Vn7XJ3sI0Js7yvUaoBHoMQh
72GKQ0Hu0MSrjQEylM9vFqN8GjAfHMRmT/2YzbTuzv1n3NPQxVCk/3aOn4LbXilZ
ahrdR1peqTI/VRHAO7spO4y2/nHX5YW6+PHpG9XI9JxjuQVNoyr9VjKW7QIDAQAB
o4ICVTCCAlEwHQYDVR0OBBYEFLW01aLUf9dMZ8k2+WMKl23OSuV5MB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvdGJUVm90Ul8xMHhueVRiNVl3cVhiYzVLNVhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGsGCCsGAQUFBwEHAQH/BFwwWjBYBAIAATBSMAwDBAfC54AD
BALC54gDBADC544DBADC55QwDAMEAcLnlgMEAsLnmDAMAwQAwuedAwQAwueeMAwD
BADC58MDBAPC59AwDAMEAcLn2gMEBcLnwDANBgkqhkiG9w0BAQsFAAOCAQEANHSq
UuMixQabFgHVepWP5PV1TCMn44SCjDMwRuissXCH2ILnmFlD/539PMV5PXBtvxOX
EdbvlOJG6lg+Sr0gNiDhqUOPFoqzmHBiK7aZ1XRlkI/b9cFYr8sx3AZ42lhPEqSv
Hbi30OTfmWvmtOmXrFWA4SLI20qysUqf1BkUE4DJBFqh55miT3dPfO3Nrpww/AYl
bzLCjqID+explLwmkUXTJTsSc4t3uXhbaTGS1/waSbQZmD0FRoY067e3ubsHsbwn
nxp6OSAoO+0xleUweCMfF2kohGYNYLo73m9uXVnCQETFNXfiX+50yFdmGr9NQjme
kXqlGCItuUtP4bU2aw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:34 2026 by rpki-client