Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02eFQYRizU7XpdxbscMcxh9Q2U0.roa
File: 02eFQYRizU7XpdxbscMcxh9Q2U0.roa (raw, json)
Hash identifier: 5HSXZFkwL2yvqEgv69g7esSp98ShNQe89eUEorMya5A=
Subject key identifier: D3:67:85:41:84:62:CD:4E:D7:A5:DC:5B:B1:C3:1C:C6:1F:50:D9:4D
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019A3B605FED8F1C1C9BCCC1AD6A6CA8E997
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02eFQYRizU7XpdxbscMcxh9Q2U0.roa
Signing time: Fri 31 Oct 2025 17:46:03 +0000
ROA not before: Fri 31 Oct 2025 17:46:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215730
IP address blocks: 64.188.91.0/24 maxlen: 24
144.31.0.0/21 maxlen: 24
144.31.90.0/24 maxlen: 24
144.31.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:18:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3b:60:5f:ed:8f:1c:1c:9b:cc:c1:ad:6a:6c:a8:e9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 31 17:46:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d36785418462cd4ed7a5dc5bb1c31cc61f50d94d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0b:7c:88:9b:aa:4e:5e:89:26:89:dc:8e:08:
96:45:a3:62:3c:ed:d6:e2:96:2d:1e:35:40:fe:63:
c8:b9:24:52:eb:a9:ae:65:c9:9d:1d:49:1a:00:01:
f0:60:93:bf:e7:1a:21:65:b4:6f:89:bd:e8:0b:c7:
53:ba:56:73:48:ea:8b:2e:b2:fe:4a:00:af:bb:95:
5c:e6:c9:50:c2:26:eb:90:e2:69:bc:ae:e6:a3:4a:
cb:d7:94:2e:43:5a:32:dc:da:37:8e:1e:93:48:ec:
07:cb:bb:71:ed:91:22:2a:ce:1e:54:c9:52:6b:77:
d8:95:d3:13:a9:2f:12:89:7a:f4:50:36:cc:d9:58:
56:8a:bc:3f:77:7d:eb:22:f8:9b:0e:10:1a:f2:32:
50:6d:bd:65:7c:91:9e:f9:d2:09:a9:a4:8c:eb:ff:
54:9b:dd:9f:2d:eb:5e:18:9a:34:d9:70:7d:50:08:
20:dc:23:56:6f:b5:99:47:85:08:c7:41:6a:12:fb:
12:84:07:0c:4d:fc:1a:cc:95:08:a3:b3:34:cf:52:
ed:ba:6a:33:2b:3a:32:63:e7:7e:e1:a2:8e:62:cd:
4a:b1:0f:9d:b0:0e:9f:ea:01:93:c2:4b:cf:9a:dc:
c4:b9:8a:9d:88:a0:7a:71:d0:fd:0b:38:e1:e6:3d:
d6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:67:85:41:84:62:CD:4E:D7:A5:DC:5B:B1:C3:1C:C6:1F:50:D9:4D
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/02eFQYRizU7XpdxbscMcxh9Q2U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.91.0/24
144.31.0.0/21
144.31.90.0/24
144.31.94.0/24
Signature Algorithm: sha256WithRSAEncryption
18:a4:43:4f:37:25:6f:74:f0:f8:6b:f0:11:a3:f6:d6:a1:96:
08:56:b4:18:bf:0d:6d:0e:20:14:2e:8a:b7:a1:6c:39:63:71:
0f:7b:1b:bc:cc:58:ae:76:a6:ce:6b:fe:77:e1:07:3e:ec:6d:
e9:11:77:22:da:d9:08:96:78:36:bd:e5:91:3d:22:61:6e:27:
78:13:e0:20:ab:df:2e:2e:15:e8:f4:45:b2:d1:46:3b:6f:5c:
58:47:52:44:4b:18:58:41:cd:9d:ea:7d:7f:a3:ab:ff:e1:ca:
0c:21:ee:c7:d9:92:0c:73:b6:3e:c0:a1:b4:1c:3c:44:5a:03:
2e:bf:78:72:8e:9b:53:c6:a1:63:99:2e:a1:b9:f3:2b:b2:af:
13:e4:68:6e:27:8a:ad:ff:48:a1:d2:fd:f9:71:a0:c9:2b:2f:
ff:41:8d:56:71:fc:ee:3a:d2:1f:30:92:63:00:42:db:9b:da:
f7:78:a4:99:b9:64:3c:58:54:33:91:72:b7:f5:52:63:69:7b:
aa:1c:d2:57:4c:e0:26:01:27:46:a7:87:64:72:00:59:06:cb:
90:a9:a7:d3:de:f1:07:19:31:1a:3d:70:37:c4:82:1d:50:66:
e1:3a:f7:a7:98:42:27:c3:15:ad:fb:28:41:76:fa:86:3d:b8:
e5:19:66:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:51:06 2025 by rpki-client