Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ShKVg2qY0DT3khpe3DmMtj9BObY.roa
File: ShKVg2qY0DT3khpe3DmMtj9BObY.roa (raw, json)
Hash identifier: 5Pq6YlRY/GsUfL28RLm2eP6vY2s++dcWP1VlvZt15Gg=
Subject key identifier: 4A:12:95:83:6A:98:D0:34:F7:92:1A:5E:DC:39:8C:B6:3F:41:39:B6
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A0339AE4D03105F13DFE71F4E1B617787
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ShKVg2qY0DT3khpe3DmMtj9BObY.roa
Signing time: Mon 20 Oct 2025 20:05:03 +0000
ROA not before: Mon 20 Oct 2025 20:05:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207567
IP address blocks: 144.31.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:39:ae:4d:03:10:5f:13:df:e7:1f:4e:1b:61:77:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 20 20:05:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4a1295836a98d034f7921a5edc398cb63f4139b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e2:78:ed:4a:40:d8:ee:14:f0:76:5e:15:a7:
c6:e8:89:ed:f8:fb:bd:00:84:52:8a:c8:ef:d7:53:
da:ba:d4:38:cb:54:8c:00:a2:67:4b:89:96:f3:70:
ad:69:59:bf:e2:1e:bd:1e:81:4e:c0:6b:72:5a:45:
a9:a1:b7:59:6b:77:80:af:22:c0:fe:ef:0a:4d:f3:
eb:1c:cb:41:02:95:13:b9:94:44:57:97:b4:d2:ed:
49:f2:5a:fe:ee:19:a3:95:98:7a:74:1c:80:14:8f:
19:42:aa:da:d6:84:17:24:03:59:0e:36:3a:37:35:
6c:ac:3c:da:aa:8f:ea:ce:b2:95:6d:83:81:ee:41:
65:43:7a:0d:3e:7d:89:df:21:62:62:da:73:7a:26:
b6:7e:1b:a8:5d:2c:b3:39:d7:85:dc:12:a1:e7:a6:
0c:39:f3:7b:33:26:7d:9d:4f:60:0a:f9:6d:a5:ce:
92:ff:20:37:aa:ea:74:53:c2:8a:1e:09:c9:5a:6d:
a6:9a:10:77:81:36:1b:26:9b:63:46:33:f1:a0:86:
41:ad:a3:be:41:53:d4:b0:d8:7a:7d:14:4a:64:41:
4b:b0:dc:a3:bb:a5:c5:48:1d:bd:d9:df:41:aa:cc:
74:a1:3f:1c:b2:4e:e9:c2:e3:09:a3:3c:7e:bf:f9:
41:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:12:95:83:6A:98:D0:34:F7:92:1A:5E:DC:39:8C:B6:3F:41:39:B6
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ShKVg2qY0DT3khpe3DmMtj9BObY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.88.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:71:7a:68:63:4d:49:89:e4:00:f6:4f:8e:2e:f0:7b:f5:08:
8f:34:06:2d:eb:e7:97:e1:e4:48:01:40:3a:cf:54:f6:d9:fa:
9c:87:52:f3:d1:b7:7e:d9:ab:58:6b:06:43:23:6c:9a:e0:c0:
b0:7d:da:fb:de:8f:cd:de:47:57:47:ea:5a:4b:07:74:b3:d8:
4c:c1:49:0d:ae:6c:50:cc:4c:7e:2e:11:de:b4:43:eb:55:e8:
11:b6:df:5a:f1:12:4b:e5:1d:9d:6a:a8:db:cb:8a:3d:b8:44:
e3:d0:ce:0a:27:42:e4:6e:24:b1:d9:bf:57:6a:f3:2a:6f:c1:
16:f5:88:ad:32:9f:d5:ac:03:21:48:4c:ad:95:b8:61:59:40:
ba:9e:a7:5a:19:78:a8:46:a9:ee:32:35:e5:a4:0a:bc:5d:62:
df:16:06:b4:a6:54:16:6b:5d:59:d7:5a:6a:66:6f:0c:45:ba:
6f:46:63:8f:86:9d:25:be:af:a4:fd:74:4c:d0:6f:02:6b:09:
93:38:50:cd:f6:7a:09:34:25:57:e7:ad:ee:06:ed:d3:ea:27:
8a:c4:1f:6c:03:a6:af:d9:0a:94:b6:07:09:8c:81:a8:3b:00:
62:ec:69:20:c2:5b:76:25:88:3b:c9:e6:62:50:af:c1:68:c9:
bc:ba:c4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 21:07:25 2025 by rpki-client