Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4lPUSny6dT7sZRQV0YMR2vlxIxg.roa
File: 4lPUSny6dT7sZRQV0YMR2vlxIxg.roa (raw, json)
Hash identifier: Lj9bAiEh7Dti2okjdxZgUbeSt9ejUYqPR9iW8yO/leQ=
Subject key identifier: E2:53:D4:4A:7C:BA:75:3E:EC:65:14:15:D1:83:11:DA:F9:71:23:18
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FF80BD59CE5BCCDACAE08A636522BC9E4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4lPUSny6dT7sZRQV0YMR2vlxIxg.roa
Signing time: Wed 12 Aug 2026 22:15:52 +0000
ROA not before: Wed 12 Aug 2026 22:15:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209809
IP address blocks: 144.31.39.0/24 maxlen: 24
144.31.41.0/24 maxlen: 24
144.31.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:0b:d5:9c:e5:bc:cd:ac:ae:08:a6:36:52:2b:c9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 12 22:15:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=e253d44a7cba753eec651415d18311daf9712318
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:b6:5d:68:27:3b:32:bc:09:92:88:24:93:
a5:eb:58:fa:c6:e2:2d:53:ed:6a:d2:e2:d8:ac:0c:
c3:42:7e:05:17:2b:08:1b:2e:16:67:aa:83:6e:d2:
8f:31:24:d1:37:89:57:c5:cd:2b:b8:69:79:30:cf:
2a:42:dc:5f:b4:32:42:82:de:e8:86:67:6f:6c:db:
60:31:76:29:37:89:23:c9:72:eb:5c:21:51:45:05:
4c:13:75:f4:d7:0a:76:03:e9:2e:2d:44:d9:bd:b8:
c2:27:c5:25:32:10:ed:e4:9a:8f:b4:54:b4:e5:9b:
27:a6:eb:84:38:23:98:ea:ad:7f:4f:4b:d1:6c:56:
39:37:c3:28:38:df:ef:15:0b:40:32:23:7a:5d:1f:
af:2c:07:20:5d:e6:e0:1f:cc:f2:27:11:24:c5:46:
8c:90:bf:71:20:b3:f3:5f:8d:d5:90:ec:2d:ee:41:
0f:8e:79:ea:6f:08:4c:20:a1:30:64:d0:15:63:2b:
33:8c:b0:a4:a1:87:a0:61:7d:5d:0e:a2:1d:7b:aa:
5a:d8:6b:92:c6:16:3a:ff:be:13:97:ed:ec:8e:7e:
98:99:eb:86:0b:14:60:62:c3:40:76:d1:cb:38:65:
d2:f0:cc:db:07:2a:c3:4f:0d:cd:8a:1f:19:ec:d5:
8a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:53:D4:4A:7C:BA:75:3E:EC:65:14:15:D1:83:11:DA:F9:71:23:18
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/4lPUSny6dT7sZRQV0YMR2vlxIxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.39.0/24
144.31.41.0/24
144.31.43.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:73:9f:88:d0:26:e3:6b:8d:c7:19:2c:4f:6c:2a:e0:76:79:
d9:fc:30:f8:d5:24:20:b0:77:c3:f8:86:5e:d2:99:66:71:ef:
42:d8:94:92:b6:1f:3b:65:5f:6f:ab:d8:1e:c0:e0:e6:d2:f2:
0c:cd:bc:0d:28:23:3c:3a:2a:24:84:f7:f1:24:bd:d1:cc:92:
69:da:c0:53:7d:ad:95:68:70:01:31:d3:a2:f3:99:82:2b:76:
86:fd:51:23:c1:c6:05:b6:cf:4b:c7:d1:4f:40:70:e8:4d:8a:
81:8c:ea:4f:85:ee:0c:be:52:06:d8:1e:5b:ff:e9:a3:39:dc:
4f:8e:ff:71:5c:e0:cb:f3:f9:3e:7c:5f:97:b6:c4:6f:71:e1:
bb:25:de:32:f6:13:5c:bd:5a:35:fa:dd:3c:83:f9:ad:5c:cb:
ea:e6:02:96:8d:d9:f5:e5:f1:d1:d9:25:b0:84:7d:ee:e1:38:
2d:99:8a:d0:2f:92:af:d0:8c:33:c8:7a:71:74:2f:c6:e0:3c:
df:33:25:5a:51:e8:94:58:8f:24:c9:9f:63:cb:68:d0:6e:49:
7e:51:53:96:db:57:a0:15:71:99:46:6d:98:3d:30:59:c5:c6:
f6:10:2a:46:b0:94:b8:80:f6:e0:d5:44:87:c0:85:90:cf:72:
6a:5c:1e:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 16:27:09 2026 by rpki-client