Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/TBzPRjDCxur1SMBfg4EIGmDznlo.roa
File: TBzPRjDCxur1SMBfg4EIGmDznlo.roa (raw, json)
Hash identifier: tjiJvgVc2yOrrGoxb5OMKXBf9DBc3ZsijSIeZIq0tRo=
Subject key identifier: 4C:1C:CF:46:30:C2:C6:EA:F5:48:C0:5F:83:81:08:1A:60:F3:9E:5A
Certificate issuer: /CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Certificate serial: 01A19C6FA219F8A6889B337CF82D7D787ED7
Authority key identifier: 51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/TBzPRjDCxur1SMBfg4EIGmDznlo.roa
Signing time: Mon 02 Nov 2026 13:25:23 +0000
ROA not before: Mon 02 Nov 2026 13:25:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62874
IP address blocks: 81.188.32.0/20 maxlen: 24
81.188.64.0/20 maxlen: 24
81.188.128.0/21 maxlen: 24
81.188.136.0/21 maxlen: 24
81.188.144.0/21 maxlen: 24
81.188.152.0/22 maxlen: 22
81.188.156.0/22 maxlen: 22
81.188.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 04 Nov 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9c:6f:a2:19:f8:a6:88:9b:33:7c:f8:2d:7d:78:7e:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b49ba0dd8615128618d50159cb0f3b5e9ee626
Validity
Not Before: Nov 2 13:25:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c1ccf4630c2c6eaf548c05f8381081a60f39e5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5d:2c:c4:df:5e:82:91:d2:db:ec:08:2d:c5:
e4:fd:43:45:69:44:6e:3c:f9:a9:3b:5a:a7:59:ea:
e5:94:e5:15:26:36:7d:ba:df:42:d3:ef:02:83:ec:
5d:62:75:d5:79:44:84:10:c1:2d:e1:2b:25:ae:a6:
f0:67:ea:86:70:7d:97:87:1f:4b:23:f3:ce:34:8d:
8d:d6:a2:fc:73:f1:68:0f:6a:49:53:50:a1:a2:ef:
25:24:a0:68:d1:ce:88:ed:93:5d:21:78:b5:ec:28:
63:11:a7:b9:33:c9:03:03:99:7a:9c:7a:bd:f9:af:
66:64:ef:a9:f7:c5:0c:af:e1:a7:50:fe:a8:51:c1:
35:d6:a2:a1:23:94:e8:dc:88:b7:70:23:37:45:13:
48:e6:7a:99:50:79:c2:3a:9e:9b:58:75:02:e0:c1:
47:f9:92:43:03:3e:df:15:d6:39:25:d0:ce:97:b8:
74:1c:de:f2:65:35:5d:f5:7a:e0:c8:4b:39:0f:b2:
d5:d1:a1:0e:6d:a0:73:01:59:0d:4d:3b:ef:17:d6:
29:13:55:8b:03:6c:05:41:62:98:a2:69:10:74:60:
d4:e1:be:5c:d6:20:ee:1f:38:3a:b6:1c:cd:f3:98:
b3:23:82:1f:ac:ed:dd:8e:70:e3:4f:db:8d:95:47:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:1C:CF:46:30:C2:C6:EA:F5:48:C0:5F:83:81:08:1A:60:F3:9E:5A
X509v3 Authority Key Identifier:
keyid:51:B4:9B:A0:DD:86:15:12:86:18:D5:01:59:CB:0F:3B:5E:9E:E6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbSboN2GFRKGGNUBWcsPO16e5iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/TBzPRjDCxur1SMBfg4EIGmDznlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/26c049-47ee-4886-9844-4ab9e8aa3262/1/UbSboN2GFRKGGNUBWcsPO16e5iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.188.32.0/20
81.188.64.0/20
81.188.128.0/19
81.188.176.0/20
Signature Algorithm: sha256WithRSAEncryption
61:74:12:1b:aa:11:73:27:fb:cc:7c:38:e6:a1:8d:40:d9:81:
c9:92:6b:84:56:c5:29:20:bd:88:9b:26:20:05:1b:b6:55:37:
5a:ed:49:c3:3d:8c:47:8d:08:ce:73:c0:8a:1f:41:d2:df:ad:
ac:7a:9b:2c:cb:c9:19:85:6c:2d:e6:11:1c:ed:82:bd:5e:96:
21:f5:9f:73:93:5f:97:46:44:e8:bb:cc:be:1f:50:13:14:f4:
70:44:86:90:22:28:80:c5:71:52:1a:20:b0:6f:7b:b8:8f:0f:
6b:c2:07:92:c2:54:4b:ad:d4:1f:46:db:1f:bb:4e:98:fe:1d:
86:89:f9:88:17:97:39:63:bd:dc:45:5a:64:4c:9b:06:23:06:
c9:e7:89:0f:b1:63:25:83:25:99:6f:9e:0a:0e:9d:e4:71:09:
f3:bc:53:8f:ee:e7:12:bb:d8:e3:cc:f3:38:70:81:ed:c2:6d:
5d:e2:a7:cf:e2:2a:d6:3b:58:ef:04:9f:db:47:51:4c:87:e8:
fe:90:21:81:55:cb:bb:b9:5d:71:00:bc:ea:3b:b2:13:4d:f6:
a4:c6:b2:ba:07:c0:32:e2:7c:e4:f9:74:ec:be:b2:95:1e:d6:
09:f7:56:82:48:53:3a:88:fd:b0:44:46:5a:5f:cb:e3:38:29:
0f:69:90:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 3 17:06:26 2026 by rpki-client