Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A824A4YMuqeMtiIQIajSdelPohA.roa
File: A824A4YMuqeMtiIQIajSdelPohA.roa (raw, json)
Hash identifier: ZZ2QvyKRxx+n5/VdTovSSBc8A+tzsh2Re2d/1FdsVa0=
Subject key identifier: 03:CD:B8:03:86:0C:BA:A7:8C:B6:22:10:21:A8:D2:75:E9:4F:A2:10
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CE7E63663A3668207DD97750815A735ED
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A824A4YMuqeMtiIQIajSdelPohA.roa
Signing time: Fri 13 Mar 2026 15:52:29 +0000
ROA not before: Fri 13 Mar 2026 15:52:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26769
IP address blocks: 144.31.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:e6:36:63:a3:66:82:07:dd:97:75:08:15:a7:35:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 13 15:52:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03cdb803860cbaa78cb6221021a8d275e94fa210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e4:db:82:bb:8e:a6:69:2e:51:6c:3a:46:ff:
e7:50:b2:02:3c:05:67:cd:92:52:7c:9e:ba:ac:ae:
57:79:ea:68:f1:ec:06:b2:e3:e6:93:4a:14:89:25:
f5:70:48:45:ba:d4:69:20:57:d3:f3:73:b7:d9:49:
69:76:15:e5:f9:92:00:01:32:ad:c0:50:1b:9e:bb:
4e:f0:23:64:8d:ea:51:8a:01:82:02:24:40:0d:cd:
c2:80:3e:6e:42:89:cc:d7:0b:57:ff:6d:08:f2:31:
65:16:db:66:40:2b:d4:dc:71:ad:fa:59:24:8b:d3:
72:5d:8d:5e:f1:ab:86:71:24:23:5d:3d:18:6e:dd:
0e:20:6a:f7:e0:f5:bd:4c:3f:6c:e0:4b:2e:e5:d7:
5c:2d:c2:9f:9c:e8:fa:8d:37:c3:a6:6d:3a:af:da:
e3:bc:f8:f4:75:94:ed:1c:99:7c:16:a2:4e:46:11:
23:c3:6a:09:88:88:00:56:2e:42:b2:2d:d9:63:5d:
a1:70:a5:2e:79:05:b2:06:0a:77:eb:11:b0:b5:1b:
d1:51:6d:99:aa:ae:4f:10:b4:3e:b8:92:ae:1e:e0:
72:08:af:c3:d0:c8:4d:26:e9:56:34:a7:69:ea:1e:
e8:3a:94:de:d7:86:03:d8:4f:e8:2d:83:1c:6f:fc:
0b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CD:B8:03:86:0C:BA:A7:8C:B6:22:10:21:A8:D2:75:E9:4F:A2:10
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A824A4YMuqeMtiIQIajSdelPohA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.46.0/24
Signature Algorithm: sha256WithRSAEncryption
00:34:74:03:a0:b4:4b:ac:6f:3d:c0:58:07:9d:f0:75:1c:6f:
10:23:fe:00:bb:64:c0:bb:44:1a:f1:0c:82:01:4c:e0:c3:8f:
d4:88:1f:73:5b:a6:84:82:c7:d1:71:6f:f3:90:41:da:36:5d:
72:8b:9b:86:bd:28:67:25:ff:db:2f:90:98:83:3f:98:a0:e3:
2c:38:fc:e8:66:75:69:a9:8a:57:4d:0f:60:c3:d4:58:94:32:
af:99:20:e7:2e:19:33:b3:c0:33:70:84:6e:f8:7c:5d:8e:03:
9f:18:8b:e6:2d:31:30:09:49:40:21:07:01:6b:05:b9:ee:75:
1d:d9:18:6e:6c:62:61:e0:75:7f:02:d0:94:5c:17:11:a1:2e:
a2:6d:82:70:b2:a0:5f:45:4e:57:a3:f4:30:73:0b:99:15:5c:
15:3a:2f:cd:6a:4a:03:54:0a:2a:ac:96:90:f2:e5:f3:82:47:
01:8d:2f:af:22:79:2f:41:6e:b0:b6:4e:f2:7d:c0:51:30:f8:
97:03:62:7b:ad:1c:e6:6e:1e:4f:f5:6b:0c:8f:a5:2e:c6:76:
a6:91:c8:f8:3f:56:2f:34:e8:a4:dc:d1:11:54:61:c4:a1:4b:
eb:fb:d8:90:31:94:d3:82:c5:7f:ad:75:51:00:3c:1a:1e:d5:
e6:27:38:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:42 2026 by rpki-client