Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kltKAIIeyPuKW1_5fCtmAiuq_90.roa
File: kltKAIIeyPuKW1_5fCtmAiuq_90.roa (raw, json)
Hash identifier: Cir159NMvUNvL8hPhiTiuJFKKeWwz/srwSeZd9/W8wY=
Subject key identifier: 92:5B:4A:00:82:1E:C8:FB:8A:5B:5F:F9:7C:2B:66:02:2B:AA:FF:DD
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019CD3D31212644BB60CE8673B978A613BC4
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kltKAIIeyPuKW1_5fCtmAiuq_90.roa
Signing time: Mon 09 Mar 2026 18:19:11 +0000
ROA not before: Mon 09 Mar 2026 18:19:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215103
IP address blocks: 77.239.115.0/24 maxlen: 24
144.31.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d3:d3:12:12:64:4b:b6:0c:e8:67:3b:97:8a:61:3b:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 9 18:19:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=925b4a00821ec8fb8a5b5ff97c2b66022baaffdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:fd:ce:4f:26:f4:07:fc:1c:5a:71:5c:56:6f:
0b:4d:38:17:ea:6e:96:de:c4:d3:23:2a:09:7a:89:
0d:6a:a3:29:aa:3b:59:74:6a:5e:7a:a7:ac:4c:cb:
5f:96:bf:41:f7:a0:37:9b:5a:eb:3d:9d:c2:f4:5c:
d5:60:cc:52:85:9b:5e:43:36:22:2b:09:88:61:f5:
f9:e2:b2:8e:11:fd:09:0b:53:21:1c:85:6f:56:53:
53:96:9f:e4:c9:cd:b1:af:30:bf:a7:a5:92:9b:de:
1b:ba:b5:c4:9e:f0:e7:f1:c6:46:be:3a:7d:f4:38:
9f:6e:25:23:db:80:4d:38:6c:c5:e1:ac:4f:b9:ad:
13:c2:6c:8d:31:e1:d2:b2:90:d2:b0:5c:30:eb:df:
84:8d:14:f7:f1:43:c2:70:07:e7:e3:0c:b2:e9:a7:
44:99:21:24:34:9f:f5:17:01:a5:ee:94:96:55:2f:
66:73:c1:cd:dc:66:49:b5:35:ee:5d:1e:69:c2:7e:
f9:5a:dd:13:a0:bb:12:d9:b5:4d:86:4e:22:14:b8:
2a:5a:a4:10:36:08:82:0b:6c:20:e1:68:83:8b:dc:
2a:37:0d:da:30:b7:25:fb:bb:3a:eb:a0:26:fe:d8:
f2:22:32:9f:10:db:1f:d9:25:31:8b:27:57:55:eb:
a6:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5B:4A:00:82:1E:C8:FB:8A:5B:5F:F9:7C:2B:66:02:2B:AA:FF:DD
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/kltKAIIeyPuKW1_5fCtmAiuq_90.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.239.115.0/24
144.31.202.0/24
Signature Algorithm: sha256WithRSAEncryption
81:6f:2c:0d:3b:3c:81:55:55:a8:8b:53:43:12:0a:61:17:56:
f7:ee:91:59:fd:6b:4a:9b:b1:65:2a:49:4c:1f:f6:53:0e:d6:
2a:f9:1d:f7:92:79:74:21:13:7c:3c:65:59:bf:1a:36:96:6d:
6e:cc:e1:d5:03:3e:b0:43:16:e3:d2:1b:2a:2e:5d:b0:5f:23:
37:1e:b9:12:96:82:32:c6:af:e2:64:75:d2:e5:6d:9c:bf:7c:
d0:f9:f9:b3:72:4e:ba:06:d1:7b:09:a4:29:02:c1:9e:6d:62:
25:09:9b:7e:5e:12:e3:f3:e2:ed:60:9b:f2:ba:44:22:95:f2:
4d:c9:55:51:80:02:ec:5e:8f:1c:44:cf:f9:3d:e4:37:c7:c1:
1b:ba:a5:08:75:5f:d6:9d:df:17:19:5c:14:54:6d:92:b6:53:
0c:61:29:4a:70:72:38:1b:94:0e:5c:89:12:9f:b1:34:05:7a:
69:2d:f0:a7:50:71:01:b1:5d:dd:dd:d2:aa:64:fd:0a:0a:f3:
8c:30:e0:26:19:0a:5b:12:e3:f4:3c:d5:20:2a:a0:94:8d:4b:
ff:e0:14:0b:e2:65:c7:d0:65:5e:4a:7c:33:2a:8e:e8:01:ff:
5c:53:68:ab:d6:ab:eb:0e:b1:a2:3d:fa:08:3c:5d:6f:ca:53:
18:37:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:31:01 2026 by rpki-client