Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ruiPRhy0DDXPrFsNXCQexW3rURE.roa
File: ruiPRhy0DDXPrFsNXCQexW3rURE.roa (raw, json)
Hash identifier: w108RlCebQWgbplNYdCkb3ZcJzOqQhB0cvunqVWOa28=
Subject key identifier: AE:E8:8F:46:1C:B4:0C:35:CF:AC:5B:0D:5C:24:1E:C5:6D:EB:51:11
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A091B7ACBD24E5F26B4E621E4D19986874
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ruiPRhy0DDXPrFsNXCQexW3rURE.roa
Signing time: Fri 11 Sep 2026 18:25:28 +0000
ROA not before: Fri 11 Sep 2026 18:25:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 144.31.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:91:b7:ac:bd:24:e5:f2:6b:4e:62:1e:4d:19:98:68:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Sep 11 18:25:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aee88f461cb40c35cfac5b0d5c241ec56deb5111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:40:31:27:d5:f4:d5:9c:b8:4c:c4:43:d4:82:
13:2e:59:2c:17:45:df:b3:d5:33:73:be:4f:2f:3b:
8a:8f:76:1e:e5:5d:d5:4b:a9:e3:ed:32:f7:6f:3d:
62:53:a5:ab:b0:5d:0b:88:8f:a4:8c:61:88:47:81:
40:d0:f3:2e:74:c6:e9:4b:a0:21:07:e1:d5:00:a9:
80:1f:f2:02:3d:26:1d:a0:a6:f0:ce:53:2c:0e:93:
99:f5:20:f6:87:57:ae:a9:6f:46:ac:30:20:bb:a1:
f1:7f:ae:ce:b9:d4:fe:d0:4f:eb:f8:35:b3:1a:8b:
f7:20:6f:59:71:bf:d1:bc:b2:21:68:62:1a:9c:57:
0b:a8:e4:e1:67:bf:44:38:f8:69:8d:08:fc:e6:d8:
b7:16:6f:56:e9:90:92:c7:d3:e3:b7:a6:51:08:13:
37:19:0b:0c:81:b8:2e:f5:84:d6:3d:cc:de:6f:b9:
e4:18:eb:d3:5c:bb:45:4e:bd:02:a6:55:37:3a:99:
2e:7e:8e:43:6e:9d:3b:7a:81:a0:19:59:48:14:1f:
3e:34:df:d6:b4:99:ba:b2:52:3c:af:18:a3:4d:77:
99:16:1e:05:15:8c:f6:c4:40:50:9f:22:05:e1:b2:
06:6c:93:fd:6e:c6:60:46:2d:44:1c:67:6b:a0:88:
46:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:E8:8F:46:1C:B4:0C:35:CF:AC:5B:0D:5C:24:1E:C5:6D:EB:51:11
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/ruiPRhy0DDXPrFsNXCQexW3rURE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.145.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a1:15:69:04:f3:a5:f3:7e:3c:79:0f:df:8b:89:03:7c:0c:
1a:19:0d:2b:6a:f9:1c:56:fa:fd:bb:d4:b3:5d:47:b4:7d:df:
ac:d0:36:fc:7d:33:79:6c:d8:57:a0:15:68:42:9b:93:e9:e5:
e5:64:ef:24:4e:c0:e2:6f:dd:93:24:3f:ad:53:0e:28:00:d3:
e6:d0:69:5b:64:1b:92:02:75:9f:05:86:06:bc:be:28:6b:cf:
41:d7:81:5d:18:dd:35:ea:53:ac:f8:fc:fd:6a:ff:7b:3d:b9:
7a:a3:41:47:ba:5f:e9:77:fd:4f:65:1f:c4:11:2c:76:80:ad:
60:8a:d8:bd:54:fe:ea:50:5c:ec:e7:ba:2e:ff:22:c9:6b:89:
8d:27:91:8f:35:1a:e4:a8:f9:f2:c9:ad:25:1d:f4:d3:54:bc:
14:ee:37:a3:23:fb:60:10:e3:9b:06:f4:fd:6f:3f:af:79:e2:
6a:b3:57:76:03:94:c2:df:b3:8f:f9:1a:b4:a5:87:09:07:94:
02:49:ae:e2:e5:67:f4:37:14:03:4f:c0:c9:ce:f1:d2:39:2f:
97:c4:cd:64:20:e8:9e:37:1c:b6:df:bf:46:4e:87:88:ef:62:
58:be:92:ab:5a:18:b8:eb:ed:b4:43:d0:dc:6f:a8:46:6a:c2:
97:98:6e:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCRt6y9JOXya05iHk0ZmGh0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwOTExMTgyNTI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWU4OGY0NjFjYjQwYzM1Y2ZhYzViMGQ1YzI0MWVjNTZkZWI1MTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0AxJ9X01Zy4TMRD1IITLlksF0Xf
s9Uzc75PLzuKj3Ye5V3VS6nj7TL3bz1iU6WrsF0LiI+kjGGIR4FA0PMudMbpS6Ah
B+HVAKmAH/ICPSYdoKbwzlMsDpOZ9SD2h1euqW9GrDAgu6Hxf67OudT+0E/r+DWz
Gov3IG9Zcb/RvLIhaGIanFcLqOThZ79EOPhpjQj85ti3Fm9W6ZCSx9Pjt6ZRCBM3
GQsMgbgu9YTWPczeb7nkGOvTXLtFTr0CplU3Opkufo5Dbp07eoGgGVlIFB8+NN/W
tJm6slI8rxijTXeZFh4FFYz2xEBQnyIF4bIGbJP9bsZgRi1EHGdroIhG3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK7oj0YctAw1z6xbDVwkHsVt61ERMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvcnVpUFJoeTBERFhQckZzTlhDUWV4VzNyVVJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB+RMA0G
CSqGSIb3DQEBCwUAA4IBAQChoRVpBPOl8348eQ/fi4kDfAwaGQ0ravkcVvr9u9Sz
XUe0fd+s0Db8fTN5bNhXoBVoQpuT6eXlZO8kTsDib92TJD+tUw4oANPm0GlbZBuS
AnWfBYYGvL4oa89B14FdGN016lOs+Pz9av97Pbl6o0FHul/pd/1PZR/EESx2gK1g
iti9VP7qUFzs57ou/yLJa4mNJ5GPNRrkqPnyya0lHfTTVLwU7jejI/tgEOObBvT9
bz+veeJqs1d2A5TC37OP+Rq0pYcJB5QCSa7i5Wf0NxQDT8DJzvHSOS+XxM1kIOie
Nxy2379GToeI72JYvpKrWhi46+20Q9Dcb6hGasKXmG7A
-----END CERTIFICATE-----
Generated at Fri Sep 18 16:26:06 2026 by rpki-client