Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/TBWA66qOZBpSMKYtYX9R44gVfGI.roa
File: TBWA66qOZBpSMKYtYX9R44gVfGI.roa (raw, json)
Hash identifier: w8Vp6q6wDBRPTymvvevN/jqtzWee6UWIMnG6wpw6ePc=
Subject key identifier: 4C:15:80:EB:AA:8E:64:1A:52:30:A6:2D:61:7F:51:E3:88:15:7C:62
Certificate issuer: /CN=981a1187f56bdb637d56a7803a47cda54e0c62af
Certificate serial: 019F2368BFC8F35E46306CAD1B9A3B96F1C6
Authority key identifier: 98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/TBWA66qOZBpSMKYtYX9R44gVfGI.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25504
IP address blocks: 83.243.56.0/21 maxlen: 24
89.200.168.0/21 maxlen: 24
91.223.141.0/24 maxlen: 24
94.102.208.0/20 maxlen: 24
109.235.56.0/21 maxlen: 24
151.252.48.0/20 maxlen: 24
158.58.144.0/21 maxlen: 24
185.90.232.0/22 maxlen: 24
193.254.184.0/21 maxlen: 24
195.191.92.0/23 maxlen: 24
2001:67c:2394::/48 maxlen: 48
2a00:19e0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:c8:f3:5e:46:30:6c:ad:1b:9a:3b:96:f1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=981a1187f56bdb637d56a7803a47cda54e0c62af
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1580ebaa8e641a5230a62d617f51e388157c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:36:ea:36:b2:f8:32:e4:06:0f:d8:dd:b5:69:
6d:31:d3:00:a2:76:22:ae:e2:4b:d8:21:40:49:6a:
fc:6c:6d:ad:f9:b7:ea:1f:49:94:4e:64:78:f6:58:
5b:d2:27:d5:f8:20:89:d1:70:72:d3:5e:8f:b9:77:
17:32:7a:b0:8e:9e:83:5b:ce:8b:c6:0d:6c:27:70:
e0:21:64:11:c2:da:d6:ea:43:a4:b8:44:f8:3c:e2:
f6:8b:17:d8:e7:9a:97:26:1f:21:dd:83:63:46:5b:
1c:ba:12:06:a7:a8:9d:51:de:70:08:b4:39:4e:c2:
b1:a6:48:29:f8:00:83:7e:e3:76:b1:da:70:60:82:
de:7e:08:36:5f:06:2a:8b:f4:22:79:87:fc:95:f6:
28:c8:fd:ea:d3:80:b2:6c:af:e0:d5:a5:58:da:7b:
57:f6:48:06:43:89:02:af:3f:73:6f:4e:08:18:1b:
7c:3d:0b:bb:f5:e4:42:d2:6a:7d:5b:02:7e:03:83:
a8:9c:87:73:07:4d:c6:13:54:8d:99:34:70:c7:48:
30:c0:3c:a0:46:53:6a:6f:48:a0:81:fd:5f:c7:a2:
95:c4:6f:39:9f:e0:1a:ce:f3:36:26:67:6d:c8:37:
76:39:fc:1b:89:6d:68:1d:72:2e:e8:b0:02:95:ca:
04:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:80:EB:AA:8E:64:1A:52:30:A6:2D:61:7F:51:E3:88:15:7C:62
X509v3 Authority Key Identifier:
keyid:98:1A:11:87:F5:6B:DB:63:7D:56:A7:80:3A:47:CD:A5:4E:0C:62:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mBoRh_Vr22N9VqeAOkfNpU4MYq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/TBWA66qOZBpSMKYtYX9R44gVfGI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/mBoRh_Vr22N9VqeAOkfNpU4MYq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.243.56.0/21
89.200.168.0/21
91.223.141.0/24
94.102.208.0/20
109.235.56.0/21
151.252.48.0/20
158.58.144.0/21
185.90.232.0/22
193.254.184.0/21
195.191.92.0/23
IPv6:
2001:67c:2394::/48
2a00:19e0::/29
Signature Algorithm: sha256WithRSAEncryption
ad:f9:59:2f:e3:8d:07:c7:6e:44:2d:91:61:fe:06:f0:8c:b9:
b7:e2:f0:08:bb:5d:dd:9e:97:c5:94:78:05:9e:94:a1:36:8d:
04:f6:2f:8a:bd:07:9b:86:0b:02:fa:a6:59:07:d8:76:4e:d0:
f5:c0:0a:5e:e4:b2:dc:b5:11:e9:00:f9:cb:c2:17:f8:6b:dd:
b2:e8:a8:ce:fd:05:12:ed:fa:b9:61:5c:b0:ca:13:62:a8:97:
a3:be:16:92:87:db:2d:67:3e:ed:5a:05:e0:c2:9a:49:a1:c7:
d8:29:f2:55:d0:f7:ad:f4:b5:7d:22:46:1b:70:c5:30:73:1f:
6b:9c:ce:e7:b5:48:00:a7:5c:a2:b1:f5:30:31:28:0c:f3:ea:
10:b7:77:77:8f:4d:87:35:43:89:be:89:d4:70:b3:a3:7d:36:
13:9e:69:d1:d9:17:ba:18:84:a3:93:b8:81:6a:7d:b8:1f:7a:
d2:8b:26:cc:b7:fc:02:9b:52:25:26:65:ac:15:4e:8c:05:9a:
b8:16:54:a0:2b:18:f1:2f:3b:81:f3:ae:f0:69:ef:bd:2e:2f:
10:64:37:15:58:52:ec:97:7f:38:6e:c3:e9:f1:22:46:5b:5e:
a3:bc:99:bf:a4:69:99:47:f7:93:cf:b4:e6:20:62:e6:46:7f:
a7:41:69:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:31 2026 by rpki-client