Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TSvfkpnpteBkB9fRO2oiZHeULmc.roa
File: TSvfkpnpteBkB9fRO2oiZHeULmc.roa (raw, json)
Hash identifier: bP1UMVEMAFkKunTT4PjHON09c+LjFhAsDdNTKNpoJIc=
Subject key identifier: 4D:2B:DF:92:99:E9:B5:E0:64:07:D7:D1:3B:6A:22:64:77:94:2E:67
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F5CD97D685D421750AF066784096794D1
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TSvfkpnpteBkB9fRO2oiZHeULmc.roa
Signing time: Mon 13 Jul 2026 18:59:45 +0000
ROA not before: Mon 13 Jul 2026 18:59:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202610
IP address blocks: 144.31.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:21:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:d9:7d:68:5d:42:17:50:af:06:67:84:09:67:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jul 13 18:59:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4d2bdf9299e9b5e06407d7d13b6a226477942e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:80:5f:cd:06:c8:12:9b:91:4d:0c:2e:22:c0:
af:3c:c0:b3:59:7d:b1:83:e5:23:a6:93:8a:76:c7:
ec:d8:89:a0:23:56:1c:3b:9e:6e:41:6e:ac:36:ec:
f7:6c:b5:23:02:a2:c1:1e:49:ad:65:14:90:02:78:
fd:62:f6:72:86:e5:41:00:f6:87:3d:04:01:7b:ad:
23:b4:c3:34:50:4c:2b:99:e0:78:23:f1:fe:dd:ff:
3b:3f:9c:1e:ff:8b:07:4c:b1:4d:52:c5:94:3e:b5:
dd:e5:b6:e3:6f:65:94:13:8d:21:9d:18:1d:88:33:
43:ac:3a:f7:6c:5e:bf:c6:ad:97:c1:2d:ac:1b:ca:
95:cb:7d:ff:99:f2:34:65:ea:04:4f:87:ad:58:c7:
9d:dc:4f:44:8f:1c:8c:60:b5:28:7b:ff:c7:23:00:
98:bb:1b:80:a7:f0:c7:52:92:02:62:cb:ac:a8:6d:
24:b7:57:40:e5:fe:2c:0a:5d:bd:43:c5:89:76:90:
5b:2a:c7:7c:d5:f2:c3:f0:ab:87:ab:80:e1:4a:9b:
68:19:d9:70:cd:5a:6f:15:08:a6:74:2f:37:e9:ca:
d2:18:21:ff:35:ce:d4:38:f1:50:c0:fe:5c:36:fe:
40:9d:1b:6e:91:6c:28:ac:00:cc:7d:ba:2c:e7:47:
f5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2B:DF:92:99:E9:B5:E0:64:07:D7:D1:3B:6A:22:64:77:94:2E:67
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TSvfkpnpteBkB9fRO2oiZHeULmc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.231.0/24
Signature Algorithm: sha256WithRSAEncryption
62:1d:e0:bb:b2:91:81:ad:01:b8:00:ee:bd:01:4d:40:55:29:
6d:58:9a:19:86:59:a4:5b:36:bb:48:75:c2:0e:8f:19:f3:f5:
b6:b0:a2:3e:63:1b:b5:22:ad:65:5e:c3:dc:f1:6f:fd:b1:2c:
e2:41:18:06:22:dc:15:59:7d:1e:75:af:52:83:f5:30:dd:ec:
cf:4a:39:a0:90:bf:d7:99:83:8d:a6:87:f3:60:1e:1d:42:1a:
76:ba:83:4c:a7:00:25:75:0e:ca:b6:d9:9c:fc:76:0f:6b:85:
57:a1:fd:2d:93:89:ec:18:bb:40:d5:66:bb:1d:b2:97:4d:1a:
ee:db:0d:ca:6c:ba:d9:20:cf:9f:05:d8:0f:bf:43:8b:3f:c6:
4d:7e:3c:3a:5b:6f:c1:94:cb:eb:21:39:f4:0c:be:0c:ae:2f:
d2:be:03:52:35:9e:dc:c1:77:6d:e4:9c:fc:1d:55:92:49:d5:
13:2a:81:b0:dd:81:1a:ac:70:7b:ec:4a:03:c9:d7:84:65:9c:
ac:48:23:e9:e1:e2:08:98:d9:e1:3d:f4:46:a2:9f:99:df:43:
a8:25:2e:51:c0:29:c0:d4:2e:bf:0e:b6:b4:9a:ac:b8:97:37:
2d:40:f2:7a:38:c8:30:1f:55:1d:cb:f3:2a:66:f4:0d:65:78:
14:5e:30:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:03 2026 by rpki-client