Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TIAM21z1hUELI2RfGxmlRKiEzoA.roa
File: TIAM21z1hUELI2RfGxmlRKiEzoA.roa (raw, json)
Hash identifier: O5GQwuw367BOftRYH7gql7w3M0q9oVc3s3YmV3SM5co=
Subject key identifier: 4C:80:0C:DB:5C:F5:85:41:0B:23:64:5F:1B:19:A5:44:A8:84:CE:80
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 01A080F14F9EE5409296D6625DF20898AB30
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TIAM21z1hUELI2RfGxmlRKiEzoA.roa
Signing time: Tue 08 Sep 2026 12:14:53 +0000
ROA not before: Tue 08 Sep 2026 12:14:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197868
IP address blocks: 31.44.184.0/24 maxlen: 24
146.185.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:f1:4f:9e:e5:40:92:96:d6:62:5d:f2:08:98:ab:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Sep 8 12:14:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c800cdb5cf585410b23645f1b19a544a884ce80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:62:f7:c8:c6:e2:6a:b2:fb:5e:66:09:43:
8a:a6:10:03:29:b2:40:18:d1:e8:27:2e:77:7a:fa:
b0:41:34:58:dd:30:53:32:45:e9:d1:98:1a:d7:5b:
c6:1e:6b:38:89:ca:20:20:b2:0d:ef:7d:e3:e1:78:
b9:d7:d9:64:92:16:35:16:86:f0:0e:16:8a:17:c2:
55:69:be:a8:f0:13:18:c5:24:04:3d:7e:83:35:08:
14:7e:e8:18:0c:5a:3d:b5:e4:36:60:ce:f9:a5:28:
fe:9e:3a:bf:4f:3c:c4:8d:28:42:f1:a9:5f:51:8a:
f2:20:9e:14:70:81:96:ee:76:9b:b4:62:37:56:16:
4f:84:1c:64:1e:97:0d:23:9d:2e:01:57:de:65:07:
08:1b:0f:bf:94:b9:81:ce:b2:d9:9a:7b:c5:bd:5d:
bd:35:b9:7a:49:61:c7:9b:23:97:91:dd:a9:f8:91:
6c:d5:2d:33:d4:24:81:12:2f:81:72:62:a8:59:fe:
71:dc:ad:41:a8:1a:ec:97:c6:ce:c1:b5:2c:b0:ae:
bd:2f:1c:f3:bf:1d:cf:23:93:f4:ee:37:75:46:bc:
4a:b2:57:f4:f5:b1:a3:85:a3:69:51:73:4f:19:93:
95:70:f1:85:e2:21:4c:eb:6b:f2:ad:0f:35:75:f4:
4e:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:80:0C:DB:5C:F5:85:41:0B:23:64:5F:1B:19:A5:44:A8:84:CE:80
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/TIAM21z1hUELI2RfGxmlRKiEzoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.184.0/24
146.185.233.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:ae:6b:b2:21:95:64:a2:ea:e7:99:7d:9f:2e:c4:c5:7e:81:
35:45:6b:b4:63:e4:39:dd:da:83:66:37:c0:79:90:36:25:76:
b9:5d:cf:17:09:aa:e7:f4:11:9b:58:de:65:d3:12:09:f7:27:
b6:87:e2:5c:6c:e8:44:7c:10:2d:ba:20:fb:c5:40:67:ae:a8:
37:0e:2e:09:68:88:3b:37:d2:4c:70:29:e1:e3:48:33:41:2e:
17:a1:c0:7e:98:b6:cb:24:3c:20:a1:c3:8d:86:e3:d2:25:77:
fb:3c:6e:b0:86:25:b1:46:64:6d:f5:a4:f9:8b:0f:c6:39:d6:
75:fa:af:13:40:b8:64:31:40:36:fa:2a:25:0d:2d:c7:dc:56:
9c:f0:2c:a2:1a:25:0f:85:ec:be:57:00:2d:5d:f3:6c:a3:74:
d3:7f:ef:79:1e:9b:20:2b:67:74:2d:c0:42:50:79:81:f8:03:
70:93:27:2a:56:25:81:8d:b6:e3:59:d4:52:9d:5c:39:95:8f:
15:02:e2:f1:90:ef:66:01:8f:48:d7:2e:da:01:6c:86:6d:98:
ea:e9:e8:53:6e:eb:70:a8:fc:e5:60:af:51:68:ee:28:12:1a:
86:ed:f8:57:83:fe:b2:f8:a6:1a:18:89:28:5a:6f:a2:2d:0e:
a9:96:4e:20
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCA8U+e5UCSltZiXfIImKswMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjYwOTA4MTIxNDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzgwMGNkYjVjZjU4NTQxMGIyMzY0NWYxYjE5YTU0NGE4ODRjZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs09i98jG4mqy+15mCUOKphADKbJA
GNHoJy53evqwQTRY3TBTMkXp0Zga11vGHms4icogILIN733j4Xi519lkkhY1Fobw
DhaKF8JVab6o8BMYxSQEPX6DNQgUfugYDFo9teQ2YM75pSj+njq/TzzEjShC8alf
UYryIJ4UcIGW7nabtGI3VhZPhBxkHpcNI50uAVfeZQcIGw+/lLmBzrLZmnvFvV29
Nbl6SWHHmyOXkd2p+JFs1S0z1CSBEi+BcmKoWf5x3K1BqBrsl8bOwbUssK69Lxzz
vx3PI5P07jd1RrxKslf09bGjhaNpUXNPGZOVcPGF4iFM62vyrQ81dfROOwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEyADNtc9YVBCyNkXxsZpUSohM6AMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvVElBTTIxejFoVUVMSTJSZkd4bWxSS2lFem9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAHyy4AwQA
krnpMA0GCSqGSIb3DQEBCwUAA4IBAQDGrmuyIZVkournmX2fLsTFfoE1RWu0Y+Q5
3dqDZjfAeZA2JXa5Xc8XCarn9BGbWN5l0xIJ9ye2h+JcbOhEfBAtuiD7xUBnrqg3
Di4JaIg7N9JMcCnh40gzQS4XocB+mLbLJDwgocONhuPSJXf7PG6whiWxRmRt9aT5
iw/GOdZ1+q8TQLhkMUA2+iolDS3H3Fac8CyiGiUPhey+VwAtXfNso3TTf+95Hpsg
K2d0LcBCUHmB+ANwkycqViWBjbbjWdRSnVw5lY8VAuLxkO9mAY9I1y7aAWyGbZjq
6ehTbutwqPzlYK9RaO4oEhqG7fhXg/6y+KYaGIkoWm+iLQ6plk4g
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:12 2026 by rpki-client