Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sCQiTise38M3sfGlQLjY0fGdhcQ.roa
File: sCQiTise38M3sfGlQLjY0fGdhcQ.roa (raw, json)
Hash identifier: eKnDdPwKx/edTOWzbNYt/kQJQmYfFrrJc8PFTMBy3y8=
Subject key identifier: B0:24:22:4E:2B:1E:DF:C3:37:B1:F1:A5:40:B8:D8:D1:F1:9D:85:C4
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D0289AF1BD4FCB923590C83289892A389
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sCQiTise38M3sfGlQLjY0fGdhcQ.roa
Signing time: Wed 18 Mar 2026 20:01:10 +0000
ROA not before: Wed 18 Mar 2026 20:01:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401152
IP address blocks: 144.31.8.0/23 maxlen: 24
144.31.110.0/24 maxlen: 24
144.31.148.0/24 maxlen: 24
144.31.151.0/24 maxlen: 24
144.31.160.0/22 maxlen: 24
144.31.235.0/24 maxlen: 24
144.31.236.0/24 maxlen: 24
150.241.69.0/24 maxlen: 24
185.207.135.0/24 maxlen: 24
185.216.104.0/22 maxlen: 24
193.23.192.0/24 maxlen: 24
193.23.198.0/24 maxlen: 24
193.23.204.0/22 maxlen: 22
193.23.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:02:89:af:1b:d4:fc:b9:23:59:0c:83:28:98:92:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Mar 18 20:01:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b024224e2b1edfc337b1f1a540b8d8d1f19d85c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:a6:f3:78:29:5c:91:6b:4c:3b:f5:b2:d1:
7f:2e:b3:32:9b:00:0d:62:e0:96:e3:fb:a4:25:b9:
72:a7:bd:db:dc:89:26:fe:e3:f9:3f:c7:2b:32:a4:
19:f1:76:a6:4f:35:e4:47:a9:70:8b:30:f3:df:4e:
bb:c1:9c:b4:9e:e5:6c:31:e2:88:6e:77:6c:29:c2:
4d:b1:13:2a:04:59:c6:b9:2a:9c:12:e8:f7:d2:7f:
a5:f5:d3:54:87:c2:be:77:b9:3e:0b:fd:bf:2f:44:
f7:9b:90:ff:38:48:1e:4c:b0:c8:0b:8e:18:03:98:
db:a9:52:56:4a:52:75:cf:2e:b4:c9:79:51:22:00:
42:2e:14:8c:0c:7c:09:ae:cb:da:e3:ef:cc:70:a9:
00:13:5f:2e:6a:15:df:c8:cc:3d:9a:bf:34:18:7b:
fa:03:76:c9:d8:77:ce:c6:3c:24:7a:45:77:b2:99:
31:0a:30:ee:94:2a:b6:c0:95:ac:40:58:58:ba:23:
81:dd:83:ec:98:91:a3:31:83:75:9a:b9:8d:cc:ba:
83:a6:8b:fa:68:fd:af:44:5c:fb:62:d9:68:cd:1e:
2e:e6:e7:7e:11:06:49:19:13:03:71:ed:b1:31:89:
90:6b:9d:0f:7d:93:78:e1:d3:e5:a8:1f:36:0a:ec:
33:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:24:22:4E:2B:1E:DF:C3:37:B1:F1:A5:40:B8:D8:D1:F1:9D:85:C4
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/sCQiTise38M3sfGlQLjY0fGdhcQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.8.0/23
144.31.110.0/24
144.31.148.0/24
144.31.151.0/24
144.31.160.0/22
144.31.235.0-144.31.236.255
150.241.69.0/24
185.207.135.0/24
185.216.104.0/22
193.23.192.0/24
193.23.198.0/24
193.23.204.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:cb:69:ad:b4:2a:84:8c:af:79:cd:16:b7:b9:76:5b:ca:22:
c4:c8:42:14:97:15:7a:45:ab:13:f2:52:1b:86:76:ce:6d:ea:
38:c1:eb:d9:3b:17:18:69:02:68:c1:b8:df:75:0c:77:24:e4:
32:42:e3:9c:d1:9b:aa:39:15:b8:31:e8:3b:17:8e:66:3e:a6:
2f:6c:23:d9:5e:76:ad:50:ce:94:f1:56:05:77:6c:ee:d7:0b:
80:65:7a:10:28:34:1a:fb:fb:f7:ab:07:0a:31:3c:29:e6:2a:
9a:09:d1:8f:30:6b:d2:67:37:af:bd:ad:d7:6e:f8:4e:bf:47:
54:6a:07:f6:52:8d:74:43:54:dc:46:23:bd:ff:45:ac:2c:e9:
23:b3:b8:94:2b:1d:5f:8e:34:58:d1:34:82:b0:d0:0c:a5:ac:
79:c3:b4:88:0e:51:24:7f:7c:16:2b:50:63:96:38:14:9b:42:
4a:4e:f8:c3:aa:12:19:4c:1f:57:46:27:8f:b6:10:c8:e6:a6:
dd:6d:7d:1a:f9:b2:de:35:c0:6d:aa:94:53:36:30:15:2c:00:
80:c6:0f:d2:86:21:3f:3d:0f:f9:01:95:aa:46:b3:44:30:e2:
27:6b:ac:aa:5f:d1:1b:77:23:40:69:45:a0:b5:a4:00:a7:29:
04:bd:2c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 14:30:38 2026 by rpki-client