Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TBAessNyKec7UduIqtEROOs6LtI.roa
File: TBAessNyKec7UduIqtEROOs6LtI.roa (raw, json)
Hash identifier: 2WWwiue1utWBFeXYE0p8Q6jmfZWBZnN64xfo1h1Mwzs=
Subject key identifier: 4C:10:1E:B2:C3:72:29:E7:3B:51:DB:88:AA:D1:11:38:EB:3A:2E:D2
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 019FACEE6FDA4EC2AF5B9E65845045BA26E0
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TBAessNyKec7UduIqtEROOs6LtI.roa
Signing time: Wed 29 Jul 2026 08:12:15 +0000
ROA not before: Wed 29 Jul 2026 08:12:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219113
IP address blocks: 5.181.43.0/24 maxlen: 24
45.9.120.0/24 maxlen: 24
45.9.122.0/24 maxlen: 24
45.86.247.0/24 maxlen: 24
45.92.168.0/24 maxlen: 24
45.92.169.0/24 maxlen: 24
45.118.248.0/24 maxlen: 24
45.133.208.0/24 maxlen: 24
45.146.91.0/24 maxlen: 24
193.58.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Aug 2026 21:32:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ee:6f:da:4e:c2:af:5b:9e:65:84:50:45:ba:26:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Jul 29 08:12:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c101eb2c37229e73b51db88aad11138eb3a2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:71:34:28:3e:d8:32:c4:b1:3b:8c:57:1f:51:
6d:68:22:b0:35:fb:6d:01:e1:b7:c1:33:6c:29:60:
11:36:2f:f6:a8:fc:70:48:a0:b6:b7:ca:ce:3f:78:
2a:d1:91:76:15:d4:7e:26:db:a6:4e:1c:ea:95:ff:
85:72:cf:6e:76:a5:6e:94:ca:b9:60:48:e0:89:07:
25:fd:f7:95:18:2a:a5:91:e3:d8:9d:c5:1f:3b:43:
29:f6:92:7f:73:1d:50:51:e6:10:8f:57:1b:36:20:
06:04:bc:ab:fb:4e:16:c0:ff:27:fb:1c:70:d8:7b:
9c:07:b0:12:82:d6:4c:e6:19:83:ec:4b:f0:9f:b8:
53:55:e9:6a:cd:82:35:f0:ac:5a:2f:f7:e0:1c:57:
79:24:8b:e0:59:87:03:27:b7:0f:dc:49:b7:fe:f7:
ac:4a:74:d0:d4:cb:f7:ed:b3:81:1c:24:d2:39:1e:
42:a9:79:8d:45:22:24:a5:d7:b8:1c:4b:1d:56:5f:
20:95:43:bc:51:44:90:18:66:e5:42:98:d7:cb:11:
39:53:bf:56:7b:d6:de:02:25:a9:49:cb:a2:c2:7b:
35:7f:f8:19:5a:b8:cc:ad:77:cc:e2:70:4f:83:88:
08:2e:5f:65:ac:57:be:f6:9a:16:63:34:01:a0:28:
f8:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:10:1E:B2:C3:72:29:E7:3B:51:DB:88:AA:D1:11:38:EB:3A:2E:D2
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/TBAessNyKec7UduIqtEROOs6LtI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.181.43.0/24
45.9.120.0/24
45.9.122.0/24
45.86.247.0/24
45.92.168.0/23
45.118.248.0/24
45.133.208.0/24
45.146.91.0/24
193.58.108.0/24
Signature Algorithm: sha256WithRSAEncryption
87:1f:3f:32:87:e8:2d:ac:64:fc:70:19:0b:cc:66:07:10:46:
16:a0:cb:03:aa:61:a8:aa:e1:42:94:38:53:5f:94:83:06:40:
8f:33:7e:63:dd:43:7a:c2:62:2d:16:b3:53:aa:31:8a:a8:c6:
c2:0c:25:25:fb:60:16:c1:fc:bc:e4:af:75:d1:d0:ae:11:6c:
f9:26:32:63:b9:b3:93:4c:0b:8c:88:e5:f5:26:96:8a:3d:1f:
3d:d7:77:02:f2:fd:ec:ab:d5:a4:b4:2a:58:67:a4:21:a7:32:
a8:c2:6b:c1:55:65:30:c7:7e:c8:5d:83:45:e7:1a:bd:c0:80:
e8:7c:ce:56:ae:c1:b8:3b:34:a5:b1:7e:ad:dc:cb:40:8f:37:
23:d1:98:dd:01:bb:08:cb:38:09:54:87:05:af:5e:bd:a8:77:
55:ed:86:40:ed:04:8a:6d:2b:07:c5:13:5f:55:14:a5:4f:40:
14:1f:01:d7:0d:81:f9:0d:cf:f5:95:2d:ad:84:14:34:18:b8:
85:4d:59:16:c8:86:c5:d0:19:af:ff:43:06:1b:f5:d4:e6:f6:
d2:3c:6a:6f:6c:fd:ad:38:07:3d:ea:da:44:8c:a3:7f:54:0b:
5e:a8:1d:48:2c:ec:7c:d1:8f:cd:98:10:a1:0e:fb:b8:4f:bf:
91:34:03:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 06:04:23 2026 by rpki-client