Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EdBCGw7ZaZ3HSWEUqxE7hM5qVh4.roa
File: EdBCGw7ZaZ3HSWEUqxE7hM5qVh4.roa (raw, json)
Hash identifier: lRJc1nNAx/24oPW9k96X75nPkWJ4PQml0WlyRts0ijU=
Subject key identifier: 11:D0:42:1B:0E:D9:69:9D:C7:49:61:14:AB:11:3B:84:CE:6A:56:1E
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CB0167423C55EEB2F7BAA4D667414ABBD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EdBCGw7ZaZ3HSWEUqxE7hM5qVh4.roa
Signing time: Mon 02 Mar 2026 19:46:27 +0000
ROA not before: Mon 02 Mar 2026 19:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202413
IP address blocks: 144.31.12.0/24 maxlen: 24
144.31.191.0/24 maxlen: 24
144.31.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 22:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:16:74:23:c5:5e:eb:2f:7b:aa:4d:66:74:14:ab:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 2 19:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=11d0421b0ed9699dc7496114ab113b84ce6a561e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:5d:90:15:08:f8:f9:68:91:59:21:a9:62:
1e:ea:00:07:7a:0e:51:6f:a3:79:ba:9c:c7:a7:73:
b9:81:39:d8:60:1c:b9:34:91:2f:8b:59:15:eb:a5:
ef:3f:ae:1b:9d:ca:c4:5f:18:51:bc:5b:13:60:5f:
c1:5b:6e:e2:69:09:6c:9f:8e:ea:43:b7:e0:28:73:
0c:d3:3b:6c:fc:2d:fb:3d:da:69:63:03:d7:4c:47:
93:2d:28:77:58:40:a1:21:2b:67:ed:25:e7:a8:d0:
f2:41:c3:38:19:7f:fd:1c:34:17:fe:42:b8:0e:15:
37:56:8c:f3:2c:b7:13:a4:a8:17:e5:b2:38:d5:05:
b3:7e:c0:0e:ba:1f:ac:7a:d5:44:66:0f:3a:a9:1e:
6e:83:ff:fa:57:47:cb:31:e6:ac:4b:f4:ba:d0:38:
f5:6d:a9:3a:3c:1e:e2:f1:62:a7:5e:0f:3d:fd:4d:
84:3c:ef:57:97:85:52:99:ba:6f:25:3a:5d:b5:e9:
a9:17:9f:45:f2:5d:c2:f3:11:a7:9e:bf:3f:c7:db:
b3:1d:71:75:40:99:d4:ac:b4:9d:c1:b5:a0:f5:f3:
1b:19:16:bf:45:3a:13:e1:45:71:0f:e0:dd:6b:5b:
69:78:cb:23:14:97:b4:42:3c:13:5e:24:fa:26:6d:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D0:42:1B:0E:D9:69:9D:C7:49:61:14:AB:11:3B:84:CE:6A:56:1E
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/EdBCGw7ZaZ3HSWEUqxE7hM5qVh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.12.0/24
144.31.191.0/24
144.31.237.0/24
Signature Algorithm: sha256WithRSAEncryption
38:02:45:9b:d4:c4:e3:de:60:03:e5:48:b5:51:17:33:1d:6e:
c8:75:11:c8:66:8b:ee:d0:ef:32:15:91:d2:6e:eb:5d:60:38:
d6:1d:68:e2:d1:51:9e:77:83:da:c5:a6:e8:c2:d3:35:2f:7c:
03:f5:2e:a1:a2:54:b6:bd:3b:ff:c6:4e:20:42:17:96:c9:2a:
09:d8:b1:e5:29:21:a8:98:6f:c0:2f:47:14:b6:ec:7a:97:8c:
0c:0d:38:f9:0d:ea:1c:cb:ef:eb:f6:83:91:6a:77:c9:c7:0c:
58:7e:19:cf:9b:ed:b0:6d:4e:e3:62:d4:31:fd:06:ca:e1:14:
d3:fc:0d:2d:3f:f9:be:6d:d9:99:9a:5a:60:53:6a:32:9f:50:
b6:ed:64:78:f9:c7:eb:43:12:c2:80:93:54:3a:4f:6c:3e:d5:
43:c9:f5:6c:94:f9:0e:75:fa:f9:0d:af:96:73:70:62:6d:ad:
b8:d0:b4:f7:7b:c1:94:5d:4a:07:f0:22:8c:ad:43:3d:32:eb:
9c:1f:a8:02:1a:fb:16:fb:3a:4a:52:74:3f:a6:79:ee:fc:2e:
08:2a:cb:38:6d:b5:96:7a:fb:30:f2:12:88:70:c5:e7:97:4e:
a0:88:86:02:7f:54:84:1d:8f:f0:ee:6c:90:20:c1:e3:82:21:
d6:9a:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 8 06:38:26 2026 by rpki-client