Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ikn6qCTtqond9IMrQPlAAnGNwHg.roa
File: Ikn6qCTtqond9IMrQPlAAnGNwHg.roa (raw, json)
Hash identifier: o9vjVr/wRSlTvf7ts1n33qx9A3ECf112yjtml7UTv30=
Subject key identifier: 22:49:FA:A8:24:ED:AA:89:DD:F4:83:2B:40:F9:40:02:71:8D:C0:78
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D4FADFE7A3F9394EF853FF4F5EC96222A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ikn6qCTtqond9IMrQPlAAnGNwHg.roa
Signing time: Thu 02 Apr 2026 19:31:36 +0000
ROA not before: Thu 02 Apr 2026 19:31:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 Apr 2026 15:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:ad:fe:7a:3f:93:94:ef:85:3f:f4:f5:ec:96:22:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 2 19:31:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2249faa824edaa89ddf4832b40f94002718dc078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1f:54:91:d8:02:7c:0a:95:eb:98:d2:f7:6b:
06:3f:bf:19:c4:bc:c7:eb:d6:a8:4f:41:6d:f9:04:
af:c4:ff:05:ef:18:b7:62:6a:d7:cb:34:83:22:b7:
af:2f:f5:fc:56:9f:85:71:0d:a5:e0:0f:bf:65:b3:
63:36:ee:c9:b0:55:fc:7b:26:4b:11:8c:e2:a0:ae:
92:76:f0:25:54:0c:1a:be:ed:c5:eb:c0:48:03:4f:
ee:5d:8f:ef:18:0a:9b:7b:9d:ea:a1:35:89:c2:93:
d1:b1:a4:22:03:5c:62:1f:f5:41:28:8f:95:cc:aa:
75:a9:39:ca:b0:a8:4f:5a:7a:11:d2:f7:ff:3b:a2:
12:00:4d:75:73:c2:f1:7e:d9:9f:15:65:11:5b:b3:
62:51:82:32:ec:3f:d0:e8:4e:69:cf:b0:b9:2a:40:
a1:a9:cf:05:b6:ff:59:c4:35:56:c1:c1:6b:a6:8a:
19:1f:b6:01:e4:34:8b:32:9b:06:f9:10:89:14:c3:
eb:a2:96:d1:97:50:72:f3:db:46:6f:1c:2e:92:a7:
e4:58:f3:c2:c6:36:d4:10:ca:54:d0:39:ce:97:98:
98:5d:d2:a6:8d:d1:6a:8f:5c:1d:9a:de:10:fb:f2:
13:54:87:17:d1:e0:73:57:2a:30:e6:50:10:71:24:
03:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:FA:A8:24:ED:AA:89:DD:F4:83:2B:40:F9:40:02:71:8D:C0:78
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Ikn6qCTtqond9IMrQPlAAnGNwHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.8.0/23
144.31.110.0/24
144.31.160.0/22
144.31.235.0/24
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ab:04:d6:1a:de:93:43:a0:23:34:86:4b:f5:ef:8f:81:8c:
27:50:8e:1e:70:71:ea:33:c4:05:0d:6d:a7:49:db:f1:be:2c:
7c:c2:3a:f6:7a:e6:23:a5:59:3b:d7:cd:67:d9:7d:c0:62:56:
d5:c4:e4:96:16:16:86:94:ad:ad:d7:c7:f2:41:23:da:e5:85:
bc:56:04:a7:23:64:5f:79:e0:10:be:a6:10:56:f5:23:d7:10:
cd:d9:8c:07:ca:f9:3b:71:fa:ce:94:b1:8c:11:bf:33:f4:a5:
e9:03:51:df:18:a8:c6:ee:23:0f:c1:cc:a6:78:da:b2:9c:22:
d8:56:b2:6a:f9:c8:94:45:f8:b4:bb:1b:2c:c7:05:86:5a:23:
b7:85:1c:82:c6:55:8d:7a:12:70:db:34:92:39:3d:d4:ef:6e:
48:59:44:b5:47:9c:bd:12:c3:91:05:e5:e2:d4:23:96:73:b5:
5a:1c:a9:01:6b:88:9e:eb:c4:83:b7:a5:d1:21:f6:05:81:66:
42:5c:94:c4:1a:2f:53:0e:8d:28:58:e4:3d:62:a0:68:cb:01:
64:2f:7d:ee:44:1e:e5:fa:9f:47:2a:da:ad:31:75:bf:ce:e8:
e1:ab:a0:de:52:e8:d6:9d:fb:4e:57:b7:bb:e0:dd:a0:f6:2d:
97:e7:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 2 22:32:43 2026 by rpki-client