Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YYSfFqa9ZJbgIQeKyGebPSm-55g.roa
File: YYSfFqa9ZJbgIQeKyGebPSm-55g.roa (raw, json)
Hash identifier: rKrpyWYZF9fy+MRgKjIcmhNh9kdpLfIJkCK/iNSsjrY=
Subject key identifier: 61:84:9F:16:A6:BD:64:96:E0:21:07:8A:C8:67:9B:3D:29:BE:E7:98
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A15A3B8D0C50EFD895FC7552ADA262EFEA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YYSfFqa9ZJbgIQeKyGebPSm-55g.roa
Signing time: Tue 20 Oct 2026 16:53:34 +0000
ROA not before: Tue 20 Oct 2026 16:53:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26383
IP address blocks: 144.31.55.0/24 maxlen: 24
144.31.56.0/24 maxlen: 24
144.31.58.0/24 maxlen: 24
144.31.59.0/24 maxlen: 24
144.31.60.0/24 maxlen: 24
150.241.121.0/24 maxlen: 24
177.3.193.0/24 maxlen: 24
177.3.194.0/24 maxlen: 24
177.3.198.0/24 maxlen: 24
177.3.201.0/24 maxlen: 24
177.3.202.0/24 maxlen: 24
177.3.203.0/24 maxlen: 24
177.3.204.0/24 maxlen: 24
177.3.205.0/24 maxlen: 24
177.3.206.0/24 maxlen: 24
177.3.207.0/24 maxlen: 24
185.229.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 01:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:3b:8d:0c:50:ef:d8:95:fc:75:52:ad:a2:62:ef:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 20 16:53:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=61849f16a6bd6496e021078ac8679b3d29bee798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:27:49:7c:ec:04:2a:7b:c4:01:15:3b:12:
dd:72:db:c0:98:ca:90:23:23:45:6e:b5:48:6e:89:
b1:54:f7:2a:87:91:6e:15:35:6f:ed:fa:06:e0:e6:
a7:79:52:80:75:81:9d:9b:56:97:ad:af:89:e2:32:
29:b1:66:41:50:f9:4a:29:38:8c:af:fd:61:78:75:
ca:9a:92:1a:bd:ee:0f:e9:9e:24:a0:ac:5b:5e:83:
38:a1:11:98:57:91:b5:d1:cb:17:67:9e:35:66:7a:
fa:83:01:2a:b4:93:ce:d1:0e:45:fe:cb:53:53:70:
c3:f9:29:99:57:40:89:8e:a8:5f:7c:9a:89:b3:44:
61:6d:40:8c:cf:38:e3:3f:28:7a:1f:77:eb:1e:7c:
bd:18:8a:8c:01:cb:4c:16:8b:8e:7e:a5:37:cc:e7:
d5:bf:fe:2a:32:ba:20:51:27:65:4a:68:73:fa:8c:
12:f4:d4:dd:64:c7:f5:76:4b:44:3d:2b:ec:c2:81:
10:6d:48:a4:26:f9:20:38:35:55:71:a2:2c:da:00:
70:3f:fe:40:6b:bb:ed:6e:e8:36:c9:8e:c3:e4:5b:
e9:a5:44:3c:ec:db:b3:3f:5a:b1:87:59:a2:ec:df:
ec:86:43:27:3b:b9:e2:c1:1f:17:29:59:2a:c1:36:
8a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:9F:16:A6:BD:64:96:E0:21:07:8A:C8:67:9B:3D:29:BE:E7:98
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/YYSfFqa9ZJbgIQeKyGebPSm-55g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.55.0-144.31.56.255
144.31.58.0-144.31.60.255
150.241.121.0/24
177.3.193.0-177.3.194.255
177.3.198.0/24
177.3.201.0-177.3.207.255
185.229.222.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:82:a4:58:40:03:d4:76:e5:77:4f:64:9b:00:26:86:fa:10:
cf:46:1b:7a:65:36:4f:1e:a9:7b:b1:b1:65:8d:ab:c3:10:e0:
95:70:07:c7:ce:84:df:83:ee:1d:61:89:42:2e:a5:96:12:d8:
b0:8e:ca:06:b0:86:ba:b9:cb:c1:fb:b8:87:f2:77:d8:88:e6:
bd:0a:c7:a1:1b:f6:21:e5:4d:14:f4:f5:19:66:5d:d9:b8:a7:
01:e4:54:6b:c8:2e:b1:f6:92:4f:be:a4:6b:1e:d1:4f:b7:3d:
89:3d:fa:29:76:ac:0d:2a:92:9e:80:7c:4e:67:f5:76:8e:b4:
1c:99:88:9d:65:4b:fc:98:b7:6c:c2:74:0e:e9:ef:a7:d4:e8:
cd:85:24:c9:4d:59:6c:87:11:fe:2c:94:68:d3:1a:a1:e1:4e:
2f:54:86:ed:a9:f5:90:d6:80:b7:03:3d:35:93:1a:51:ac:0d:
8c:4a:95:69:67:b8:17:53:b0:23:a8:a5:09:90:61:d2:2b:07:
1d:bb:b4:f7:84:f6:d7:71:e8:ea:31:c6:a2:c7:2e:54:68:66:
d1:67:15:bc:16:68:75:fc:41:c7:a1:44:34:c1:4f:60:8d:e8:
5e:a6:d6:09:ba:d2:db:c0:61:b0:20:90:4a:46:bf:58:45:26:
15:36:50:32
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgISAaFaO40MUO/Ylfx1Uq2iYu/qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYxMDIwMTY1MzM0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg0OWYxNmE2YmQ2NDk2ZTAyMTA3OGFjODY3OWIzZDI5YmVlNzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd0nSXzsBCp7xAEVOxLdctvAmMqQ
IyNFbrVIbomxVPcqh5FuFTVv7foG4OaneVKAdYGdm1aXra+J4jIpsWZBUPlKKTiM
r/1heHXKmpIave4P6Z4koKxbXoM4oRGYV5G10csXZ541Znr6gwEqtJPO0Q5F/stT
U3DD+SmZV0CJjqhffJqJs0RhbUCMzzjjPyh6H3frHny9GIqMActMFouOfqU3zOfV
v/4qMrogUSdlSmhz+owS9NTdZMf1dktEPSvswoEQbUikJvkgODVVcaIs2gBwP/5A
a7vtbug2yY7D5FvppUQ87NuzP1qxh1mi7N/shkMnO7niwR8XKVkqwTaKnQIDAQAB
o4ICTTCCAkkwHQYDVR0OBBYEFGGEnxamvWSW4CEHishnmz0pvueYMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvWVlTZkZxYTlaSmJnSVFlS3lHZWJQU20tNTVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGMGCCsGAQUFBwEHAQH/BFQwUjBQBAIAATBKMAwDBACQHzcD
BACQHzgwDAMEAZAfOgMEAJAfPAMEAJbxeTAMAwQAsQPBAwQAsQPCAwQAsQPGMAwD
BACxA8kDBASxA8ADBAC55d4wDQYJKoZIhvcNAQELBQADggEBAEqCpFhAA9R25XdP
ZJsAJob6EM9GG3plNk8eqXuxsWWNq8MQ4JVwB8fOhN+D7h1hiUIupZYS2LCOygaw
hrq5y8H7uIfyd9iI5r0Kx6Eb9iHlTRT09RlmXdm4pwHkVGvILrH2kk++pGse0U+3
PYk9+il2rA0qkp6AfE5n9XaOtByZiJ1lS/yYt2zCdA7p76fU6M2FJMlNWWyHEf4s
lGjTGqHhTi9Uhu2p9ZDWgLcDPTWTGlGsDYxKlWlnuBdTsCOopQmQYdIrBx27tPeE
9tdx6OoxxqLHLlRoZtFnFbwWaHX8QcehRDTBT2CN6F6m1gm60tvAYbAgkEpGv1hF
JhU2UDI=
-----END CERTIFICATE-----
Generated at Wed Nov 4 11:18:16 2026 by rpki-client