Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Tir5opp_ZttVSnFMKWqgQRKMifg.roa
File: Tir5opp_ZttVSnFMKWqgQRKMifg.roa (raw, json)
Hash identifier: 3dpVEqiogYGJzYfHzxUBKHTBipqxH1nuazcDWbGpMdY=
Subject key identifier: 4E:2A:F9:A2:9A:7F:66:DB:55:4A:71:4C:29:6A:A0:41:12:8C:89:F8
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019DB0F9B24F61F46616FA0D3DB3760AF231
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Tir5opp_ZttVSnFMKWqgQRKMifg.roa
Signing time: Tue 21 Apr 2026 16:57:27 +0000
ROA not before: Tue 21 Apr 2026 16:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 144.31.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b0:f9:b2:4f:61:f4:66:16:fa:0d:3d:b3:76:0a:f2:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 21 16:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e2af9a29a7f66db554a714c296aa041128c89f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:19:c9:1f:fc:0c:13:7a:3b:de:dd:53:5a:5d:
08:78:32:ae:83:e5:6e:eb:70:01:be:07:40:b0:fe:
88:67:2e:26:fe:66:72:b8:20:d9:81:fb:41:f9:94:
9a:8e:bb:d9:c5:bc:e3:57:55:c8:aa:ae:2e:b2:dc:
0a:ae:2a:7e:b7:51:0a:30:d8:ab:2f:be:11:c7:0f:
74:2d:68:bc:a1:11:56:43:fc:76:f5:4c:da:e1:74:
d4:5c:01:a6:36:ea:ad:75:97:5d:c6:b5:e1:85:cd:
48:d9:8f:b7:b2:a5:f3:a1:0e:72:44:df:be:ae:6f:
8a:00:41:63:c5:5e:c0:1d:39:d7:53:cf:b4:10:e7:
76:10:d0:91:de:a9:aa:e6:d4:21:bc:60:72:dd:29:
32:33:d1:89:fc:af:2c:4c:65:e5:38:da:57:0d:fd:
38:22:62:fd:98:5b:c9:c0:4c:c8:82:17:8d:24:3a:
5e:60:57:df:71:9b:e7:f3:8f:b8:35:b2:db:4a:ab:
a9:3b:0d:44:7b:c3:aa:57:88:8b:d8:02:64:ff:c7:
81:e5:a1:03:fa:20:8f:53:88:80:83:33:79:92:5e:
c1:e6:9a:2d:91:7f:59:b9:9e:bb:26:2a:b3:25:7a:
88:31:7e:99:45:11:af:73:49:39:24:66:0e:5f:1b:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:F9:A2:9A:7F:66:DB:55:4A:71:4C:29:6A:A0:41:12:8C:89:F8
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Tir5opp_ZttVSnFMKWqgQRKMifg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.40.0/24
Signature Algorithm: sha256WithRSAEncryption
39:0f:47:2d:e1:38:8d:a6:15:f9:70:78:21:8b:0e:e6:db:85:
ee:69:14:80:13:7e:c1:23:13:95:a4:11:24:1e:14:6f:d2:54:
df:1f:b9:be:42:36:48:50:dc:89:42:d0:e0:ce:5f:b5:15:3a:
2b:ea:e9:7d:b0:b6:d9:88:dd:b0:f3:0f:16:f0:0b:b6:19:39:
46:27:8d:af:fd:bb:41:00:c1:08:bf:49:bc:72:3a:60:6a:4a:
1e:ca:f4:ef:0d:f7:28:44:cb:b4:e8:35:8a:a9:6d:b2:69:e7:
14:a4:8b:b0:72:4f:94:62:40:e2:ab:54:8b:4b:4f:ea:6d:9b:
eb:6a:fa:52:5b:a9:eb:28:7e:64:e5:be:92:39:c7:75:6e:31:
49:c3:58:dc:79:b2:38:74:b6:fe:6a:f5:e8:4c:26:53:74:b9:
33:dc:2a:dc:b7:f6:43:0a:06:c8:47:e4:95:31:74:fa:cc:71:
3d:dc:5a:e1:55:12:47:43:86:7c:0d:7b:f9:1f:0d:77:47:72:
a3:96:26:37:a3:f1:b2:f2:7f:c0:4a:0c:b6:60:e1:51:ad:c5:
76:3c:74:c8:7d:4d:28:09:d2:b3:e7:48:a5:a8:2d:8b:f3:bb:
78:b3:4e:7a:f3:a4:0d:e3:57:6d:f8:82:b4:81:d1:90:7e:27:
f9:75:13:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ2w+bJPYfRmFvoNPbN2CvIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDIxMTY1NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTJhZjlhMjlhN2Y2NmRiNTU0YTcxNGMyOTZhYTA0MTEyOGM4OWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBnJH/wME3o73t1TWl0IeDKug+Vu
63ABvgdAsP6IZy4m/mZyuCDZgftB+ZSajrvZxbzjV1XIqq4ustwKrip+t1EKMNir
L74Rxw90LWi8oRFWQ/x29Uza4XTUXAGmNuqtdZddxrXhhc1I2Y+3sqXzoQ5yRN++
rm+KAEFjxV7AHTnXU8+0EOd2ENCR3qmq5tQhvGBy3SkyM9GJ/K8sTGXlONpXDf04
ImL9mFvJwEzIgheNJDpeYFffcZvn84+4NbLbSqupOw1Ee8OqV4iL2AJk/8eB5aED
+iCPU4iAgzN5kl7B5potkX9ZuZ67JiqzJXqIMX6ZRRGvc0k5JGYOXxvAEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE4q+aKaf2bbVUpxTClqoEESjIn4MB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVGlyNW9wcF9adHRWU25GTUtXcWdRUktNaWZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB8oMA0G
CSqGSIb3DQEBCwUAA4IBAQA5D0ct4TiNphX5cHghiw7m24XuaRSAE37BIxOVpBEk
HhRv0lTfH7m+QjZIUNyJQtDgzl+1FTor6ul9sLbZiN2w8w8W8Au2GTlGJ42v/btB
AMEIv0m8cjpgakoeyvTvDfcoRMu06DWKqW2yaecUpIuwck+UYkDiq1SLS0/qbZvr
avpSW6nrKH5k5b6SOcd1bjFJw1jcebI4dLb+avXoTCZTdLkz3Crct/ZDCgbIR+SV
MXT6zHE93FrhVRJHQ4Z8DXv5Hw13R3KjliY3o/Gy8n/ASgy2YOFRrcV2PHTIfU0o
CdKz50ilqC2L87t4s05686QN41dt+IK0gdGQfif5dRMN
-----END CERTIFICATE-----
Generated at Tue May 5 16:49:28 2026 by rpki-client