Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_aNJFbSzgBbBwEdQVNoH-8orVIc.roa
File: _aNJFbSzgBbBwEdQVNoH-8orVIc.roa (raw, json)
Hash identifier: Gx3Ug56pkt0ImfnaxOgRmhF/HNlvVeK7QQcQbC39qBo=
Subject key identifier: FD:A3:49:15:B4:B3:80:16:C1:C0:47:50:54:DA:07:FB:CA:2B:54:87
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019915B36CD20E38B45DFD7B8BBC1DCC549F
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_aNJFbSzgBbBwEdQVNoH-8orVIc.roa
Signing time: Thu 04 Sep 2025 17:08:24 +0000
ROA not before: Thu 04 Sep 2025 17:08:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210654
IP address blocks: 144.31.172.0/22 maxlen: 24
144.31.184.0/22 maxlen: 24
144.31.208.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:15:b3:6c:d2:0e:38:b4:5d:fd:7b:8b:bc:1d:cc:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 4 17:08:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fda34915b4b38016c1c0475054da07fbca2b5487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:43:1c:14:0f:c4:94:d8:6b:96:c8:c4:e2:fe:
e0:6d:61:ef:3b:62:3e:b6:49:fe:f8:26:ef:9b:4c:
ca:cf:2a:94:62:11:c4:0c:94:f0:d7:14:2e:dd:7c:
38:d4:05:7b:fd:8b:7d:b4:17:dc:0c:13:6d:7a:92:
e6:3a:d0:43:71:65:07:23:40:b8:15:ea:70:f3:54:
e8:48:65:76:b5:2c:f8:69:e4:b0:df:d5:06:1e:a8:
90:9e:6c:a4:9c:18:52:89:42:73:91:0b:ac:e6:84:
4f:6d:10:78:61:72:7e:aa:dc:7d:a5:60:58:be:24:
09:34:6b:48:9b:1f:35:62:37:cf:bb:d6:76:db:62:
95:5a:fe:12:b6:94:77:3a:15:36:51:5b:f0:40:7a:
9e:ae:28:fe:8c:07:69:d9:97:d1:cb:bb:7a:9b:6a:
c2:1a:55:8b:ce:93:74:fe:21:fb:f1:fc:62:a4:3f:
57:4f:1e:2b:fc:75:24:a5:19:8f:d6:ad:90:30:86:
ea:0c:dd:4f:2e:6e:d7:64:08:96:c9:fe:a7:45:80:
8e:ab:60:91:4c:e7:bd:e2:d5:fc:92:ff:60:26:57:
ed:4c:c2:2c:d8:98:97:f2:46:47:64:ec:d0:5d:9f:
b7:22:05:c0:37:6b:e2:0c:d1:39:c6:61:ae:d8:7d:
a4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A3:49:15:B4:B3:80:16:C1:C0:47:50:54:DA:07:FB:CA:2B:54:87
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/_aNJFbSzgBbBwEdQVNoH-8orVIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.172.0/22
144.31.184.0/22
144.31.208.0/22
Signature Algorithm: sha256WithRSAEncryption
59:65:b2:84:44:a9:f4:86:bf:8f:ee:77:ca:0b:7e:84:c9:c5:
16:f9:d3:67:e1:fa:fc:16:07:60:08:d1:04:88:d4:88:15:84:
e3:91:f7:7b:a4:78:93:ee:e8:b0:56:fd:44:e1:2f:c9:5d:18:
0b:03:33:7e:be:29:bf:5c:87:b9:8a:88:9f:b9:8a:9f:16:88:
c3:af:44:3f:f8:10:ab:a8:2d:3e:5d:14:7a:d0:63:08:49:c7:
b6:07:62:e2:a7:34:79:f4:40:c3:05:36:72:f0:88:13:de:45:
8e:79:64:43:08:ca:52:57:68:f0:03:84:52:c5:53:4f:32:f5:
9b:e7:d6:56:58:75:78:55:17:83:50:95:02:7d:ea:7e:67:54:
37:a4:f0:91:cb:de:02:6d:61:ae:19:23:bf:34:d4:a2:00:ed:
e0:9d:f7:f5:d3:1a:c5:b6:d8:77:81:20:97:47:8d:9e:e9:4d:
fc:31:67:98:15:c2:44:ae:e2:80:92:8f:a1:71:d7:40:54:8f:
66:c7:f0:68:e1:f3:42:30:bd:8b:27:de:ca:26:34:f2:ad:ad:
35:fa:6d:64:0f:2d:8b:59:d9:11:51:21:19:f9:23:50:de:33:
ae:54:b5:91:7e:b8:25:c3:d3:99:90:5e:50:6a:9c:59:e8:20:
aa:47:c1:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:55:59 2025 by rpki-client