Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iAEJNcLBH4h34VLZ2SF4--fYgs.roa
File: 1-iAEJNcLBH4h34VLZ2SF4--fYgs.roa (raw, json)
Hash identifier: 4I2rrvdbD0Bdl6wRBZDhpUOLN7Ew9bI74y9Fl8UV2g4=
Subject key identifier: FA:20:04:24:D7:0B:04:7E:21:DF:85:4B:67:64:85:E3:EF:9F:62:0B
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A02988C48D03792F4A59485109069F458
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iAEJNcLBH4h34VLZ2SF4--fYgs.roa
Signing time: Mon 20 Oct 2025 17:09:03 +0000
ROA not before: Mon 20 Oct 2025 17:09:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15083
IP address blocks: 144.31.20.0/22 maxlen: 24
150.241.100.0/24 maxlen: 24
150.241.101.0/24 maxlen: 24
150.241.102.0/24 maxlen: 24
150.241.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:98:8c:48:d0:37:92:f4:a5:94:85:10:90:69:f4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 20 17:09:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa200424d70b047e21df854b676485e3ef9f620b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:71:1f:4e:74:a7:67:86:31:01:d5:4a:40:
2c:73:f3:51:2c:99:ef:d3:70:c9:66:bd:bc:54:0f:
71:3b:4a:8a:f1:fd:7f:d6:b3:1c:f2:ae:6e:ee:40:
6b:71:5d:67:07:98:f3:8a:ed:f1:62:45:42:4b:4f:
f2:fa:df:42:a0:05:61:90:f1:1d:39:9e:e5:00:b9:
0f:b9:87:17:22:e4:ad:ce:64:32:17:b0:ed:c0:97:
1a:21:38:44:c5:5d:a4:32:01:d6:e7:78:57:06:e5:
56:e2:95:d1:85:1c:16:35:bb:6f:2d:2f:80:67:98:
d9:2d:61:ca:18:27:f8:be:55:73:15:97:79:60:85:
80:fa:49:ff:e2:dc:0d:1a:0e:95:5a:2d:f5:ac:90:
20:47:a7:00:cf:db:24:2e:b7:66:ad:69:21:90:af:
1d:98:b6:da:8e:37:be:87:13:ff:8b:b6:13:dd:2c:
48:08:8d:fb:4c:bd:eb:d5:52:91:81:d5:92:32:9f:
ee:87:8b:2c:5c:50:af:da:0a:87:f8:c2:0a:fa:58:
96:ce:2e:c1:cc:d9:c9:ad:c1:d5:2f:63:83:8b:9e:
72:67:73:49:3a:f0:d7:aa:ab:25:a3:50:b7:c5:28:
d8:1b:f4:b8:1e:3a:8a:61:57:de:a7:a9:a7:81:b3:
7b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:04:24:D7:0B:04:7E:21:DF:85:4B:67:64:85:E3:EF:9F:62:0B
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/1-iAEJNcLBH4h34VLZ2SF4--fYgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.20.0/22
150.241.100.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:c1:38:6f:17:f7:0f:3f:ee:f6:1b:a7:01:d2:e6:80:ad:96:
69:82:7b:97:33:1a:1e:3f:86:99:2e:30:27:41:50:30:86:d9:
b0:bf:44:fc:16:57:56:51:a3:6a:d7:bb:6b:01:e3:0f:f6:62:
4c:3d:2a:28:30:da:1c:ae:cc:98:14:be:60:c0:ca:08:83:eb:
d2:a3:fc:c2:ad:29:e2:68:02:2a:a0:b3:72:3b:a6:52:d1:1a:
6a:ec:95:2f:9e:ec:8d:77:9e:86:65:28:dd:2b:73:d9:d5:a1:
b1:47:e2:b7:e8:4b:b4:7d:31:b2:97:ce:fc:b5:36:74:e2:b4:
c8:e7:4e:10:3f:5d:76:cb:3e:41:88:c4:9e:a4:ca:ec:12:fb:
7e:ed:5d:63:c5:fa:d5:57:46:57:18:6f:83:d4:06:d0:ac:4f:
81:c3:99:0c:d4:f2:6d:84:18:e0:38:9f:71:3b:4b:6e:59:cc:
f7:e0:e6:a5:f6:53:c6:eb:f3:d2:11:93:64:85:46:f7:84:1a:
c9:50:b7:62:01:e5:a6:49:68:d9:6c:f6:b5:dd:e7:91:b4:ba:
bc:4b:c8:91:cc:9c:4f:a0:c0:fc:2a:b7:3a:96:00:fa:54:0d:
45:46:3b:9f:97:14:00:f5:b8:36:d9:a5:db:73:06:30:ab:ff:
ea:86:2d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:01:10 2025 by rpki-client