Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iWWPdSsgojFON9VQW6n9FgPpjoo.roa
File: iWWPdSsgojFON9VQW6n9FgPpjoo.roa (raw, json)
Hash identifier: tqT/agNSGfwV0XfbQZHnnj0VViQnzKD0bRxxOqcy3E4=
Subject key identifier: 89:65:8F:75:2B:20:A2:31:4E:37:D5:50:5B:A9:FD:16:03:E9:8E:8A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 0198E2C16ED8A7ABBD463D3257A790E8BD1A
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iWWPdSsgojFON9VQW6n9FgPpjoo.roa
Signing time: Mon 25 Aug 2025 19:43:04 +0000
ROA not before: Mon 25 Aug 2025 19:43:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212112
IP address blocks: 144.31.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e2:c1:6e:d8:a7:ab:bd:46:3d:32:57:a7:90:e8:bd:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 25 19:43:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=89658f752b20a2314e37d5505ba9fd1603e98e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:8d:6c:cb:dc:81:c6:49:64:6f:f2:17:a5:
6e:c2:15:28:ee:ec:2c:c1:87:2e:e2:87:38:8f:34:
90:83:58:15:32:bc:99:e9:bf:27:49:52:ea:5c:a3:
1a:0d:83:97:ac:88:5b:aa:1c:84:5f:3f:1c:ac:c1:
09:02:8d:03:20:8b:76:d0:ee:f1:a3:d5:d2:91:2c:
f3:cc:7d:de:94:99:8b:a3:b3:c7:5a:53:5d:5d:58:
fe:2e:94:7d:aa:e8:00:c9:a0:34:06:d1:6b:b8:cb:
1c:2e:42:85:94:c9:26:0f:01:03:48:96:ba:3c:7a:
97:72:c6:65:b8:a6:46:1d:17:5a:bb:49:e0:ba:bc:
92:93:91:c1:4e:7b:5a:3e:ab:0b:08:73:5b:90:79:
25:31:38:f2:25:be:a5:15:03:3a:2d:95:fd:eb:f9:
92:3f:16:fe:a0:43:64:46:4f:20:56:c9:e7:9c:2c:
bb:86:1d:3c:96:3f:9e:9b:fc:a4:74:a4:33:15:11:
98:98:ca:b2:b5:17:b2:59:45:70:d9:52:67:b9:15:
34:c1:46:3a:f5:e2:5c:95:da:d1:5b:93:ae:89:f2:
34:d1:84:c4:db:cc:b1:9d:90:03:cf:15:79:16:13:
ef:24:3a:51:29:f4:a0:17:43:a5:41:1f:40:76:65:
64:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:65:8F:75:2B:20:A2:31:4E:37:D5:50:5B:A9:FD:16:03:E9:8E:8A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/iWWPdSsgojFON9VQW6n9FgPpjoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.222.0/24
Signature Algorithm: sha256WithRSAEncryption
93:47:92:b1:63:7b:46:cd:fb:72:00:1c:83:b9:5d:e8:b0:c3:
c4:bc:f3:12:80:b1:48:46:8d:31:8f:3c:60:a1:b6:ac:6e:e9:
0d:ef:7f:dd:f1:21:6b:2c:f0:2b:43:80:38:61:6a:97:6b:20:
c1:0c:62:8c:c5:56:a5:f0:3a:68:04:fb:4f:10:e6:60:ab:8c:
ac:c1:a8:b2:57:56:15:b6:fb:df:8d:46:8b:c6:44:08:a3:8a:
12:25:17:39:b1:40:13:b3:77:ca:ea:64:d2:2c:7c:22:13:a5:
52:e5:79:a2:fd:8a:29:68:4b:2b:3e:f7:e9:71:27:c5:2a:f9:
8a:4d:a9:50:14:b9:2a:97:23:30:56:72:66:28:98:11:94:15:
34:d0:3c:80:0d:9b:d4:b1:51:f9:cd:f1:83:79:95:3e:3e:56:
60:1e:f0:7a:35:32:43:df:c3:40:e6:d4:80:39:b4:0a:8a:69:
cb:a1:e3:16:9c:75:38:a5:51:78:e8:e6:7a:18:94:32:eb:1c:
a0:28:7e:a8:3b:1e:ef:17:e0:15:77:c9:26:32:78:c9:0a:42:
99:c7:d4:61:1b:a1:45:e0:eb:b2:48:f5:ef:f0:4b:7f:71:87:
01:2a:9c:6f:62:da:6a:00:ae:36:7c:30:33:0a:99:eb:41:04:
bb:4e:1b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 21:58:05 2025 by rpki-client