Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TMfYv8tcXCk8BvM-MDZ97HryGNw.roa
File: TMfYv8tcXCk8BvM-MDZ97HryGNw.roa (raw, json)
Hash identifier: QMPWFAKuh2VG+ARpOsT1AXvBZIIkT9d1vh1O0l64seo=
Subject key identifier: 4C:C7:D8:BF:CB:5C:5C:29:3C:06:F3:3E:30:36:7D:EC:7A:F2:18:DC
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019F155F75D36413E55E33091DB923005B5C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TMfYv8tcXCk8BvM-MDZ97HryGNw.roa
Signing time: Mon 29 Jun 2026 21:53:25 +0000
ROA not before: Mon 29 Jun 2026 21:53:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 2.27.57.0/24 maxlen: 24
13.143.139.0/24 maxlen: 24
13.143.143.0/24 maxlen: 24
144.31.13.0/24 maxlen: 24
144.31.29.0/24 maxlen: 24
144.31.91.0/24 maxlen: 24
144.31.92.0/24 maxlen: 24
144.31.100.0/24 maxlen: 24
144.31.101.0/24 maxlen: 24
144.31.102.0/24 maxlen: 24
144.31.111.0/24 maxlen: 24
144.31.112.0/24 maxlen: 24
144.31.113.0/24 maxlen: 24
144.31.144.0/24 maxlen: 24
144.31.248.0/24 maxlen: 24
150.241.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 05:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:5f:75:d3:64:13:e5:5e:33:09:1d:b9:23:00:5b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 29 21:53:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4cc7d8bfcb5c5c293c06f33e30367dec7af218dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:7e:64:20:4a:62:18:82:b0:89:89:97:cb:
b3:b1:44:b5:06:54:8b:48:3f:65:6f:4a:17:2a:0d:
b1:0e:56:de:c7:84:ee:e2:62:6b:87:d2:ad:09:b4:
f3:72:b7:db:11:c9:dd:40:74:f8:df:01:b2:ea:28:
86:9b:d1:ef:d6:41:78:68:e7:f7:8a:0b:35:52:fa:
bd:b7:a2:bf:6f:d9:8d:c0:44:63:18:d2:88:03:b0:
ae:de:f5:a8:0a:a2:3e:da:e4:10:5a:30:a0:a6:f5:
91:1a:72:d9:68:6d:8a:47:77:8c:79:b0:c1:0f:41:
a5:fd:a3:4f:aa:05:18:23:be:e3:0b:11:4d:f0:8f:
2d:4c:bd:c4:d3:40:1b:ca:4d:19:fc:89:87:55:1f:
3c:09:2a:57:a1:ec:44:b1:dd:f2:9b:74:43:62:fa:
0b:03:d4:5c:68:a0:aa:55:4c:ca:b4:d0:76:ad:a9:
a1:10:de:30:ac:80:dd:c9:cc:31:c2:0d:df:4f:82:
69:ec:64:58:d0:0d:c6:58:02:fd:3e:96:8b:f0:60:
8c:1d:d5:86:40:9c:92:72:9c:25:cd:10:9d:d5:fb:
d3:ee:b5:a6:08:f8:88:5d:46:c6:15:98:68:ef:ab:
10:e5:aa:7d:37:9f:d5:1f:8d:fb:2b:e2:7e:e3:95:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:D8:BF:CB:5C:5C:29:3C:06:F3:3E:30:36:7D:EC:7A:F2:18:DC
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TMfYv8tcXCk8BvM-MDZ97HryGNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.27.57.0/24
13.143.139.0/24
13.143.143.0/24
144.31.13.0/24
144.31.29.0/24
144.31.91.0-144.31.92.255
144.31.100.0-144.31.102.255
144.31.111.0-144.31.113.255
144.31.144.0/24
144.31.248.0/24
150.241.80.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:e9:92:3b:6a:b9:d9:86:6d:f6:fb:8b:8f:ee:19:c4:5a:ac:
08:bc:93:9a:49:01:35:4e:61:8b:46:a8:ea:eb:90:91:4d:ad:
06:a9:30:48:72:4c:1c:a6:79:56:03:49:c7:5a:da:ce:66:db:
51:96:9a:2e:94:9d:ae:c0:1c:8c:f6:b0:6e:9d:af:b7:bf:e5:
28:b4:2e:ae:ad:f6:2b:7d:fa:5c:1d:16:fd:aa:70:13:c9:31:
1c:a8:c0:5f:db:16:5c:0c:a6:e0:9a:0e:7e:59:51:c3:6e:10:
15:5e:bb:8e:6d:6a:80:43:d2:b1:f9:f7:ff:be:25:82:e7:04:
7d:29:7c:f5:92:fe:2c:ff:d6:8f:89:e7:e1:bc:fa:f2:6a:62:
1d:40:c3:8b:8f:8d:00:fa:e7:cc:ea:db:ec:5b:22:a2:e0:34:
ad:9c:e3:25:bf:e0:48:1e:6c:58:8b:87:91:d6:98:22:58:29:
b9:f1:3e:21:ea:fc:35:09:8f:27:a0:89:a8:1c:44:3f:a4:7b:
1c:ea:3d:4f:6d:70:ff:aa:85:35:30:60:36:54:d7:f0:eb:cd:
27:40:f2:fb:8c:ea:ca:65:29:22:0a:c2:97:aa:b9:91:c8:a8:
70:aa:9c:46:63:0d:eb:d6:ae:b6:ad:31:e9:02:2e:de:cf:0b:
1c:c4:b4:90
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAZ8VX3XTZBPlXjMJHbkjAFtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjI5MjE1MzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2M3ZDhiZmNiNWM1YzI5M2MwNmYzM2UzMDM2N2RlYzdhZjIxOGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreV+ZCBKYhiCsImJl8uzsUS1BlSL
SD9lb0oXKg2xDlbex4Tu4mJrh9KtCbTzcrfbEcndQHT43wGy6iiGm9Hv1kF4aOf3
igs1Uvq9t6K/b9mNwERjGNKIA7Cu3vWoCqI+2uQQWjCgpvWRGnLZaG2KR3eMebDB
D0Gl/aNPqgUYI77jCxFN8I8tTL3E00Abyk0Z/ImHVR88CSpXoexEsd3ym3RDYvoL
A9RcaKCqVUzKtNB2ramhEN4wrIDdycwxwg3fT4Jp7GRY0A3GWAL9PpaL8GCMHdWG
QJyScpwlzRCd1fvT7rWmCPiIXUbGFZho76sQ5ap9N5/VH437K+J+45VJyQIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFEzH2L/LXFwpPAbzPjA2fex68hjcMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVE1mWXY4dGNYQ2s4QnZNLU1EWjk3SHJ5R053LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjBgBAIAATBaAwQAAhs5AwQA
DY+LAwQADY+PAwQAkB8NAwQAkB8dMAwDBACQH1sDBACQH1wwDAMEApAfZAMEAJAf
ZjAMAwQAkB9vAwQBkB9wAwQAkB+QAwQAkB/4AwQAlvFQMA0GCSqGSIb3DQEBCwUA
A4IBAQBf6ZI7arnZhm32+4uP7hnEWqwIvJOaSQE1TmGLRqjq65CRTa0GqTBIckwc
pnlWA0nHWtrOZttRlpoulJ2uwByM9rBuna+3v+UotC6urfYrffpcHRb9qnATyTEc
qMBf2xZcDKbgmg5+WVHDbhAVXruObWqAQ9Kx+ff/viWC5wR9KXz1kv4s/9aPiefh
vPryamIdQMOLj40A+ufM6tvsWyKi4DStnOMlv+BIHmxYi4eR1pgiWCm58T4h6vw1
CY8noImoHEQ/pHsc6j1PbXD/qoU1MGA2VNfw680nQPL7jOrKZSkiCsKXqrmRyKhw
qpxGYw3r1q62rTHpAi7ezwscxLSQ
-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:26 2026 by rpki-client