Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TiXI2921USAeJWfoZnJAPfQLGww.roa
File: TiXI2921USAeJWfoZnJAPfQLGww.roa (raw, json)
Hash identifier: +o4bexH1fQPFagLrsyhbvKqm6ElJ0F77yyYD69Q7mHo=
Subject key identifier: 4E:25:C8:DB:DD:B5:51:20:1E:25:67:E8:66:72:40:3D:F4:0B:1B:0C
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E465B710C1DAFC919232F5667F7D5E8E9
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TiXI2921USAeJWfoZnJAPfQLGww.roa
Signing time: Wed 20 May 2026 17:07:38 +0000
ROA not before: Wed 20 May 2026 17:07:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401322
IP address blocks: 31.77.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:46:5b:71:0c:1d:af:c9:19:23:2f:56:67:f7:d5:e8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 20 17:07:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4e25c8dbddb551201e2567e86672403df40b1b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:17:fa:0f:5e:6e:68:17:58:56:98:90:52:c1:
ef:fb:66:91:6b:ef:b8:69:22:a9:60:6a:aa:29:c5:
16:b2:3b:eb:af:ee:c6:4b:b7:97:70:0a:ff:5c:9c:
b4:a4:37:45:c8:53:7a:73:63:6c:fe:ef:c2:71:ba:
d8:74:db:5e:b8:3f:cc:ae:17:a1:24:49:a0:27:cd:
9a:7a:cb:9c:ae:42:1f:2c:d4:ec:83:11:c5:84:0f:
ea:d2:4a:45:42:b5:9f:02:f6:0d:f8:30:c9:69:ce:
a0:cd:cc:9e:4f:b0:05:85:50:49:96:2e:d9:25:db:
4a:5b:5c:f3:1d:25:83:cc:76:cf:56:88:3a:88:0c:
a6:2c:4f:02:f5:bf:ca:0a:01:8b:a0:79:5e:b4:74:
29:8d:92:11:01:ae:d3:7a:44:0a:e9:74:3a:21:f1:
7d:52:70:e1:ec:e3:ac:0f:af:45:bb:3d:af:b2:75:
84:4d:28:30:01:75:36:a6:af:68:97:77:f5:c5:e8:
4f:48:3a:73:6d:23:c9:70:7f:78:fa:56:3c:10:33:
ba:f8:88:ef:65:c3:55:1c:7f:75:ee:45:34:0b:d5:
99:3d:46:e2:1e:9b:de:bb:4c:f0:a3:49:15:69:46:
58:4f:17:69:2c:6e:49:e3:dd:d9:8f:24:35:42:7a:
ae:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:25:C8:DB:DD:B5:51:20:1E:25:67:E8:66:72:40:3D:F4:0B:1B:0C
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/TiXI2921USAeJWfoZnJAPfQLGww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.77.240.0/24
Signature Algorithm: sha256WithRSAEncryption
27:99:3f:18:ca:40:fe:c7:4c:b8:b3:db:27:d0:e0:bd:64:d8:
be:12:84:fb:0b:e0:c5:c4:c4:ba:c4:37:00:5a:f4:dd:a7:8b:
ca:a6:8b:45:d1:40:68:50:be:c0:97:f9:63:61:52:f4:17:d9:
4d:3c:f4:c8:d4:d2:90:c0:f4:30:cd:35:03:e9:e7:c0:49:4d:
37:f6:bc:79:64:51:80:63:06:2d:02:2d:eb:1a:44:80:7b:31:
b3:d2:86:c9:de:11:64:37:9c:b4:86:54:da:8b:a7:dc:dd:22:
33:2e:dc:1d:43:6d:6e:38:b4:1c:32:60:4b:f2:00:10:50:55:
1e:69:80:49:3a:ee:a6:cc:62:fd:88:6e:7f:40:60:f2:97:19:
ce:8b:87:0e:c9:c2:7c:8e:ff:c4:ed:83:38:fc:1f:87:5d:9c:
9e:d6:98:ed:51:6e:77:a4:6c:1e:63:c6:06:51:d3:5d:a9:b6:
bd:38:e0:9a:d0:20:ca:38:5b:fe:8c:e2:fd:4e:f5:a9:f5:37:
95:e7:25:58:36:7f:59:c2:83:4d:62:70:6b:8e:8e:3e:36:e2:
63:0a:bc:52:ac:04:7d:38:37:82:0a:c4:20:ff:03:24:b5:ab:
a0:80:2a:e2:9c:ba:5b:95:50:90:61:1b:65:6c:41:b9:6b:90:
96:4a:ad:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:20 2026 by rpki-client