Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/th-pkYsabCtPHP7XSfMxlWWoLcc.roa
File: th-pkYsabCtPHP7XSfMxlWWoLcc.roa (raw, json)
Hash identifier: 7JcEYA3oBFrQgm+OWdr61iqJwxaW+l4ViwD1FUIVuRI=
Subject key identifier: B6:1F:A9:91:8B:1A:6C:2B:4F:1C:FE:D7:49:F3:31:95:65:A8:2D:C7
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 019D914485766A96FBD0618808B2775C2D1B
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/th-pkYsabCtPHP7XSfMxlWWoLcc.roa
Signing time: Wed 15 Apr 2026 13:11:20 +0000
ROA not before: Wed 15 Apr 2026 13:11:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215245
IP address blocks: 31.22.72.0/24 maxlen: 24
31.22.73.0/24 maxlen: 24
31.22.75.0/24 maxlen: 24
31.22.77.0/24 maxlen: 24
185.230.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:44:85:76:6a:96:fb:d0:61:88:08:b2:77:5c:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Apr 15 13:11:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b61fa9918b1a6c2b4f1cfed749f3319565a82dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:7f:35:34:08:7e:63:66:15:e0:10:c8:5e:
2a:77:b5:9e:5b:bf:36:95:c5:f4:1f:24:78:c9:9e:
27:30:00:d5:23:82:da:c1:01:86:3b:10:3e:06:d8:
99:6a:7f:c5:e5:76:de:8b:8d:11:db:74:86:52:e4:
8d:4a:5e:b3:ed:3a:fb:73:8a:02:d1:a8:48:a0:06:
c7:1d:f6:f2:cc:46:59:da:34:36:dc:e1:9f:40:fc:
e9:a9:d0:8f:2f:6d:78:21:7a:e2:c6:c3:6c:5a:2a:
c3:2e:14:6e:f6:52:f9:54:dd:65:4e:1f:94:ec:3c:
82:23:fc:12:e7:83:05:77:0f:0e:3c:12:0e:9b:de:
47:05:23:3e:4a:18:38:f0:2b:72:ec:be:20:39:0a:
b4:86:69:7a:66:9e:13:6e:8e:03:36:c2:ef:08:fd:
01:f6:58:95:2f:62:6d:95:57:83:cf:36:99:a4:bb:
a5:c5:5f:4e:96:89:04:6d:2e:3e:27:e8:e1:81:e7:
f4:11:f0:79:17:8d:cd:6a:0c:f8:e6:fc:16:22:69:
98:87:bd:c3:ae:6b:8b:25:02:4a:e7:c2:43:54:69:
99:27:cc:f6:0b:3c:03:ee:fe:98:77:4b:70:5c:bc:
13:94:54:4b:d3:93:eb:73:93:2c:46:ca:61:e7:e1:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1F:A9:91:8B:1A:6C:2B:4F:1C:FE:D7:49:F3:31:95:65:A8:2D:C7
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/th-pkYsabCtPHP7XSfMxlWWoLcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.22.72.0/23
31.22.75.0/24
31.22.77.0/24
185.230.160.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:87:b2:1d:5b:d9:18:4a:50:68:69:24:b1:e7:1b:bd:61:d3:
ea:40:56:6b:02:2e:ad:a1:d9:fb:0a:1d:bf:7a:0c:3b:d3:84:
55:75:fc:6b:04:c7:28:2b:88:d5:a2:d0:0a:9e:1f:69:15:39:
ce:7e:a1:88:97:5a:b8:a0:20:f3:ec:05:bf:44:76:ef:ab:2f:
2e:0d:6e:d2:07:42:eb:f7:26:cc:ed:9e:76:90:dd:56:4b:b1:
b9:3f:9a:eb:2d:cb:78:59:61:5a:8e:4e:ee:6d:ee:15:e2:38:
78:e9:42:41:d4:42:ba:b7:13:0c:7e:1d:00:b8:af:97:3a:f4:
e7:6a:02:d3:ba:72:6f:a1:f5:11:ad:48:b2:02:36:a3:4f:a9:
30:9f:18:e8:c3:a7:c0:56:5f:af:5c:95:88:08:8b:a7:2e:6a:
ce:20:06:c4:05:03:d4:9e:a6:d4:61:b4:00:46:9b:1a:14:cf:
0c:bb:ae:c1:98:97:12:20:e4:5f:54:71:e3:71:ee:2e:8b:d0:
88:c7:8a:ce:35:22:92:50:ca:f7:b0:8a:c9:67:56:ef:97:ac:
14:8c:5c:8f:f9:de:78:a0:50:d5:a0:a7:5f:62:ce:80:f4:44:
02:97:e9:f2:2d:c0:68:da:46:b8:c8:e5:81:ae:6e:25:58:c9:
56:52:b5:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:31:34 2026 by rpki-client