Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbu_Y2j4MHVN-Fmdi_uL76NcWLs.roa
File: tbu_Y2j4MHVN-Fmdi_uL76NcWLs.roa (raw, json)
Hash identifier: sS1nqv1/9RnTc1uNtdqUXAJylpNmwGvt1V7UcmY9P8c=
Subject key identifier: B5:BB:BF:63:68:F8:30:75:4D:F8:59:9D:8B:FB:8B:EF:A3:5C:58:BB
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 019C7C9076467A4980EF07AA7533FA77D61A
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbu_Y2j4MHVN-Fmdi_uL76NcWLs.roa
Signing time: Fri 20 Feb 2026 19:39:28 +0000
ROA not before: Fri 20 Feb 2026 19:39:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 31.56.182.0/23 maxlen: 24
31.56.184.0/22 maxlen: 24
31.56.188.0/23 maxlen: 24
31.56.208.0/23 maxlen: 24
31.56.211.0/24 maxlen: 24
31.57.36.0/23 maxlen: 24
31.57.184.0/23 maxlen: 24
31.57.200.0/24 maxlen: 24
31.57.208.0/22 maxlen: 22
31.57.216.0/23 maxlen: 24
31.58.92.0/22 maxlen: 24
31.58.184.0/21 maxlen: 24
31.58.192.0/21 maxlen: 24
31.58.204.0/22 maxlen: 24
31.58.208.0/23 maxlen: 24
31.58.232.0/23 maxlen: 24
31.58.239.0/24 maxlen: 24
31.59.38.0/23 maxlen: 24
31.59.44.0/22 maxlen: 24
31.59.84.0/22 maxlen: 24
31.59.90.0/23 maxlen: 24
31.59.140.0/22 maxlen: 24
31.59.148.0/22 maxlen: 24
31.59.152.0/21 maxlen: 24
31.59.160.0/22 maxlen: 24
31.59.164.0/23 maxlen: 24
94.183.152.0/24 maxlen: 24
94.183.192.0/22 maxlen: 22
94.183.196.0/22 maxlen: 22
94.183.200.0/22 maxlen: 22
94.183.204.0/22 maxlen: 22
94.183.208.0/22 maxlen: 22
94.183.212.0/22 maxlen: 22
94.183.216.0/22 maxlen: 22
94.183.220.0/22 maxlen: 22
94.183.224.0/22 maxlen: 22
94.183.228.0/22 maxlen: 22
94.183.240.0/22 maxlen: 22
94.183.244.0/22 maxlen: 22
94.183.248.0/22 maxlen: 22
94.183.252.0/22 maxlen: 22
217.60.8.0/22 maxlen: 24
217.60.12.0/24 maxlen: 24
217.60.15.0/24 maxlen: 24
217.60.16.0/21 maxlen: 24
217.60.25.0/24 maxlen: 24
217.60.28.0/22 maxlen: 24
217.60.32.0/22 maxlen: 24
217.60.52.0/22 maxlen: 24
217.60.56.0/22 maxlen: 24
217.60.160.0/20 maxlen: 24
217.60.176.0/21 maxlen: 24
217.60.188.0/22 maxlen: 24
217.60.192.0/24 maxlen: 24
217.60.199.0/24 maxlen: 24
2a14:6e40:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Feb 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:7c:90:76:46:7a:49:80:ef:07:aa:75:33:fa:77:d6:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Feb 20 19:39:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5bbbf6368f830754df8599d8bfb8befa35c58bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:69:b6:df:78:50:00:78:ee:0b:8f:c0:12:e2:
b3:1e:da:1d:97:ea:85:19:6e:80:20:a2:41:9b:5c:
84:34:4f:fc:fb:ab:2f:26:df:ae:67:6b:39:70:1b:
9e:08:c5:16:af:d2:96:94:d1:83:90:87:49:7d:b3:
21:8f:ab:f3:35:e2:2f:f4:cd:9d:17:92:02:80:f4:
2e:8a:c3:43:bc:db:fd:6f:ee:bf:c6:ff:d4:f7:4e:
d7:ef:5f:de:b9:27:c0:a9:fb:4b:d5:a5:d9:d6:86:
2a:45:33:09:c5:30:00:56:14:b1:b3:ed:bc:46:28:
f8:22:f4:12:53:8f:c8:81:34:09:6c:0f:a9:6a:fa:
0e:86:2e:b0:4d:8f:4b:4b:a8:c6:20:40:b1:70:fd:
c4:c1:06:b2:32:39:43:2c:b6:ef:81:48:f8:9d:db:
79:65:73:cb:f8:53:bd:7b:cf:4d:b4:b4:f0:0c:e2:
c2:96:37:27:2d:88:9c:cd:b2:38:1e:d9:be:c0:e9:
2f:d7:4c:6b:6d:20:78:2b:77:1e:7d:95:c2:5d:26:
f2:83:8d:a5:ce:e1:54:cb:2f:d9:b1:21:c0:c6:ea:
0d:5f:4d:9e:7a:db:b9:c4:1f:36:bd:fd:66:bd:35:
42:55:e0:b9:29:90:68:82:cf:c6:3f:60:0c:96:54:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:BB:BF:63:68:F8:30:75:4D:F8:59:9D:8B:FB:8B:EF:A3:5C:58:BB
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/tbu_Y2j4MHVN-Fmdi_uL76NcWLs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.56.182.0-31.56.189.255
31.56.208.0/23
31.56.211.0/24
31.57.36.0/23
31.57.184.0/23
31.57.200.0/24
31.57.208.0/22
31.57.216.0/23
31.58.92.0/22
31.58.184.0-31.58.199.255
31.58.204.0-31.58.209.255
31.58.232.0/23
31.58.239.0/24
31.59.38.0/23
31.59.44.0/22
31.59.84.0/22
31.59.90.0/23
31.59.140.0/22
31.59.148.0-31.59.165.255
94.183.152.0/24
94.183.192.0-94.183.231.255
94.183.240.0/20
217.60.8.0-217.60.12.255
217.60.15.0-217.60.23.255
217.60.25.0/24
217.60.28.0-217.60.35.255
217.60.52.0-217.60.59.255
217.60.160.0-217.60.183.255
217.60.188.0-217.60.192.255
217.60.199.0/24
IPv6:
2a14:6e40:1::/48
Signature Algorithm: sha256WithRSAEncryption
bf:2d:11:5c:02:5d:02:b8:4c:23:e7:e9:f8:49:7e:a3:56:40:
5b:ff:0d:95:13:cd:d0:41:be:8a:85:a2:ad:be:f5:35:89:9c:
47:37:2a:1e:65:b9:97:e3:2c:03:4b:ff:d1:7d:3d:ee:aa:ae:
fb:92:d9:d0:55:72:43:37:f6:71:72:05:70:1e:2f:3c:cc:89:
40:da:03:5a:4b:a4:81:86:fd:a2:f8:8f:b4:d1:fb:0b:8b:b0:
01:34:ec:cc:81:4b:54:49:ac:f0:ca:c8:4c:20:03:73:9d:ef:
cc:72:28:95:57:4c:a0:dd:9e:7b:39:53:7d:44:02:24:db:d4:
66:c9:96:b3:84:9e:3a:82:fc:e9:16:3e:70:3c:2d:03:21:55:
0d:42:ca:12:75:2e:23:15:35:23:1b:4e:49:fa:91:65:36:24:
c2:be:01:88:18:a1:f4:f5:da:14:a6:81:fe:8b:3e:8e:16:64:
26:76:2a:86:72:33:09:da:89:c3:94:5b:5e:0a:aa:f9:1d:f9:
f5:9e:d2:89:e8:2d:48:1f:3d:c3:e1:f0:9f:35:db:ce:77:d7:
28:f4:6d:27:2c:dc:c5:8f:11:a6:23:a7:f6:4a:61:3a:89:c0:
6a:81:3c:3d:74:b0:20:83:b6:e6:39:4d:84:39:1d:d7:cd:e8:
09:2a:58:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 21 03:40:33 2026 by rpki-client