Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rt07mYLirY69kklgpyUsNMlwnSo.roa
File: Rt07mYLirY69kklgpyUsNMlwnSo.roa (raw, json)
Hash identifier: e0H+Rcj6ywomVX/ljoDFb8er6F17mn7luc0OKWhekQY=
Subject key identifier: 46:DD:3B:99:82:E2:AD:8E:BD:92:49:60:A7:25:2C:34:C9:70:9D:2A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019FC94DF38A1D6DB2C1A866D0100F8EE40C
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rt07mYLirY69kklgpyUsNMlwnSo.roa
Signing time: Mon 03 Aug 2026 20:25:56 +0000
ROA not before: Mon 03 Aug 2026 20:25:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213035
IP address blocks: 144.31.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:4d:f3:8a:1d:6d:b2:c1:a8:66:d0:10:0f:8e:e4:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 3 20:25:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46dd3b9982e2ad8ebd924960a7252c34c9709d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3d:bd:de:bf:65:85:ed:64:9b:34:af:a5:24:
3e:09:94:0c:05:49:cb:4b:c3:62:f7:ff:8e:9f:cd:
a9:9c:fb:4e:d9:a4:d8:45:be:48:de:31:c1:ae:6c:
bf:e3:df:fc:95:3d:65:e5:ea:8b:41:ba:6c:3e:ae:
d7:22:81:ff:19:53:e5:d1:50:e7:d5:1b:36:5b:53:
e0:3e:47:dc:d2:f2:ff:9a:b0:80:91:5d:ca:4f:a3:
b2:81:a8:73:6e:25:49:00:39:be:c8:b7:84:89:a1:
f4:16:98:04:f5:fc:fc:a0:e0:b9:0e:db:8a:58:9f:
24:46:7b:5e:4a:39:61:fe:d5:99:9a:83:b0:d3:b4:
8c:5a:f4:f1:27:d1:06:38:4d:fc:b6:63:87:97:d0:
bc:06:68:50:74:29:cd:82:f8:b5:4c:40:5b:f8:6d:
c0:d7:39:e9:98:59:8b:c4:52:88:dd:38:57:5f:e4:
d8:69:82:40:a7:d3:53:50:74:58:ad:3d:10:f1:98:
54:f9:27:ed:1c:a9:a2:04:b2:ad:e7:4c:0b:ed:f7:
c0:0c:0d:82:03:97:76:72:3f:ca:24:64:7d:2e:18:
e3:0b:34:6d:78:86:f9:fa:c8:bb:45:9b:65:35:0d:
00:a8:5a:44:eb:d6:58:a9:9b:39:bb:da:b8:11:1b:
2d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:3B:99:82:E2:AD:8E:BD:92:49:60:A7:25:2C:34:C9:70:9D:2A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Rt07mYLirY69kklgpyUsNMlwnSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.172.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:1c:5f:5c:a1:fc:e4:c5:b7:1b:6f:32:1b:13:c9:3b:df:a3:
4e:78:7c:a0:82:08:da:c5:b7:a4:be:15:d7:6e:45:88:1a:e7:
d5:a2:6f:d5:24:2f:1f:e0:83:c8:de:f2:29:1c:a9:64:35:17:
1a:a5:3e:8e:3d:a0:20:f9:b3:5d:3d:52:01:eb:5a:46:47:1a:
58:e9:4c:c9:92:c7:8f:4c:a8:9d:48:26:fd:a8:7f:69:6c:e5:
7a:4f:7d:11:32:6a:27:a3:6a:31:e5:10:5b:96:07:a9:b9:5c:
9b:2c:56:c6:81:aa:70:9d:96:b0:1b:b8:b2:80:1f:17:d0:f4:
56:fb:a5:71:1f:9c:ef:08:cb:7b:9d:6b:8d:ea:8a:9e:ba:af:
ed:22:af:8c:74:b7:ca:35:c5:fe:b9:6b:36:4f:ea:1e:c0:df:
60:31:3b:4a:e5:12:e1:09:e1:2f:90:4b:75:d0:49:25:8c:4b:
f9:55:dc:0b:1d:48:b7:72:1b:2e:8b:cb:19:aa:54:93:3e:20:
86:ea:48:18:3e:03:1e:3f:1b:ba:1d:f1:97:4e:ad:5c:59:5d:
59:7c:f6:86:4e:2e:0c:82:e4:1e:d5:96:2d:d6:c6:e4:6b:78:
3d:a9:dc:ea:a4:d9:31:ea:0f:5f:e0:b1:8b:9a:9c:9c:d6:bf:
88:61:82:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ/JTfOKHW2ywahm0BAPjuQMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwODAzMjAyNTU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmRkM2I5OTgyZTJhZDhlYmQ5MjQ5NjBhNzI1MmMzNGM5NzA5ZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmD293r9lhe1kmzSvpSQ+CZQMBUnL
S8Ni9/+On82pnPtO2aTYRb5I3jHBrmy/49/8lT1l5eqLQbpsPq7XIoH/GVPl0VDn
1Rs2W1PgPkfc0vL/mrCAkV3KT6OygahzbiVJADm+yLeEiaH0FpgE9fz8oOC5DtuK
WJ8kRnteSjlh/tWZmoOw07SMWvTxJ9EGOE38tmOHl9C8BmhQdCnNgvi1TEBb+G3A
1znpmFmLxFKI3ThXX+TYaYJAp9NTUHRYrT0Q8ZhU+SftHKmiBLKt50wL7ffADA2C
A5d2cj/KJGR9LhjjCzRteIb5+si7RZtlNQ0AqFpE69ZYqZs5u9q4ERstZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEbdO5mC4q2OvZJJYKclLDTJcJ0qMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvUnQwN21ZTGlyWTY5a2tsZ3B5VXNOTWx3blNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkB+sMA0G
CSqGSIb3DQEBCwUAA4IBAQB8HF9cofzkxbcbbzIbE8k736NOeHygggjaxbekvhXX
bkWIGufVom/VJC8f4IPI3vIpHKlkNRcapT6OPaAg+bNdPVIB61pGRxpY6UzJkseP
TKidSCb9qH9pbOV6T30RMmono2ox5RBblgepuVybLFbGgapwnZawG7iygB8X0PRW
+6VxH5zvCMt7nWuN6oqeuq/tIq+MdLfKNcX+uWs2T+oewN9gMTtK5RLhCeEvkEt1
0EkljEv5VdwLHUi3chsui8sZqlSTPiCG6kgYPgMePxu6HfGXTq1cWV1ZfPaGTi4M
guQe1ZYt1sbka3g9qdzqpNkx6g9f4LGLmpyc1r+IYYI6
-----END CERTIFICATE-----
Generated at Tue Aug 4 09:51:40 2026 by rpki-client