Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u7Y8BVVDUXl7fC12Cr-zsxDVt4M.roa
File: u7Y8BVVDUXl7fC12Cr-zsxDVt4M.roa (raw, json)
Hash identifier: ncAGExC4cqVthMuqux4bqGX1ssW+0MQXOa8b11b3Oe8=
Subject key identifier: BB:B6:3C:05:55:43:51:79:7B:7C:2D:76:0A:BF:B3:B3:10:D5:B7:83
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019901D31B32EBFD8CC17C203E3A9C7B549E
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u7Y8BVVDUXl7fC12Cr-zsxDVt4M.roa
Signing time: Sun 31 Aug 2025 20:30:36 +0000
ROA not before: Sun 31 Aug 2025 20:30:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210457
IP address blocks: 144.31.221.0/24 maxlen: 24
193.23.199.0/24 maxlen: 24
193.23.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:01:d3:1b:32:eb:fd:8c:c1:7c:20:3e:3a:9c:7b:54:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Aug 31 20:30:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbb63c05554351797b7c2d760abfb3b310d5b783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:bd:26:e5:30:ad:10:64:51:e9:bd:d9:74:
bf:33:80:45:f9:09:39:b9:b7:67:3b:98:f4:7c:16:
2d:07:ae:bf:b2:4e:7d:7f:f9:e4:e2:8a:38:fe:ec:
24:c9:5e:1c:cc:0c:fc:28:b9:d8:92:ad:ce:6c:04:
fa:fe:aa:f1:0e:d9:23:ff:4f:c7:3d:c6:1c:92:b8:
c9:cf:c3:42:49:18:44:90:f7:42:10:4f:84:b2:2f:
23:eb:9c:7e:a2:7d:c7:97:b2:fe:27:17:79:11:61:
12:b1:2d:7b:98:4b:de:39:56:6f:72:2a:f3:61:d9:
05:77:93:02:f2:04:49:e5:fb:0d:89:5a:46:70:66:
e7:db:8f:4b:6a:ef:1b:ad:56:31:a3:e6:08:c4:f1:
fd:e3:38:9e:4f:f5:d2:10:07:74:bf:22:e8:5d:dc:
8a:04:99:90:05:5f:bb:1c:24:d0:c7:99:9c:2d:48:
19:fa:69:82:f6:3b:51:24:6c:a7:8f:b8:b6:0f:25:
f7:12:05:b8:45:b1:ea:91:f5:af:6c:83:c1:33:4c:
09:78:ce:17:8a:de:51:3b:14:3c:7f:e9:7e:9b:17:
e6:f9:3b:b0:94:ec:89:93:b3:12:54:14:d3:3c:16:
19:20:bb:c7:d8:1c:1c:af:50:42:73:42:30:c8:05:
34:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B6:3C:05:55:43:51:79:7B:7C:2D:76:0A:BF:B3:B3:10:D5:B7:83
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/u7Y8BVVDUXl7fC12Cr-zsxDVt4M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.221.0/24
193.23.199.0/24
193.23.221.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d2:8d:b3:d1:d7:dc:a6:97:ca:69:f2:23:52:75:3e:df:96:
d4:ad:43:05:4a:f6:51:8b:2e:8b:37:15:79:bc:2c:89:15:69:
b3:64:fb:71:cd:81:b2:3b:88:06:d9:81:e2:cc:7b:ba:9d:5b:
ef:ce:5f:e3:2c:61:d5:23:69:5e:89:1d:19:37:72:07:f6:15:
e6:98:de:8a:dd:c6:2d:d7:d4:42:43:fb:03:d8:5e:71:c7:f8:
9b:0a:1e:41:28:61:ce:1d:7d:3f:5e:6f:de:0e:29:d6:f6:39:
83:c7:6c:16:64:e0:c6:aa:0a:59:dd:9c:77:fb:95:3e:c4:9f:
a4:e7:b8:5f:d4:e6:85:94:31:a5:b0:19:a4:8c:d3:c1:da:37:
f7:54:b3:41:40:9c:c8:73:a5:6f:58:d0:61:b2:e2:0e:71:25:
af:ce:70:27:d7:e1:0f:b4:45:4c:f2:0b:d3:1c:d3:c6:16:c3:
ab:65:c0:0f:e6:f3:df:91:c0:b2:14:f3:79:5a:7c:77:f5:ea:
bf:0c:b8:95:56:61:2f:77:8c:2a:be:17:67:fe:a6:d4:08:a6:
86:14:b3:33:49:04:9d:06:76:86:1a:9c:ce:42:11:bc:26:c4:
65:6b:f6:c9:5d:85:03:9e:f3:f3:02:26:ac:bb:c4:30:eb:c0:
4a:2a:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 22:02:44 2025 by rpki-client