Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9-3KRK-Sg7ojnPZ5Qg4lrEXF14g.roa
File: 9-3KRK-Sg7ojnPZ5Qg4lrEXF14g.roa (raw, json)
Hash identifier: IJMKUtdZBrx+X6ny8JYHLBJEZOj3wKg1Nu1C8TKWj7w=
Subject key identifier: F7:ED:CA:44:AF:92:83:BA:23:9C:F6:79:42:0E:25:AC:45:C5:D7:88
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C533BB6D3FD2C9E89DB155B5FEFFF7C40
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9-3KRK-Sg7ojnPZ5Qg4lrEXF14g.roa
Signing time: Thu 12 Feb 2026 19:02:28 +0000
ROA not before: Thu 12 Feb 2026 19:02:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33842
IP address blocks: 144.31.48.0/24 maxlen: 24
144.31.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:3b:b6:d3:fd:2c:9e:89:db:15:5b:5f:ef:ff:7c:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 12 19:02:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f7edca44af9283ba239cf679420e25ac45c5d788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:af:6d:81:d0:86:ed:31:b4:36:e6:51:f4:91:
68:f1:ca:ea:65:84:dd:ef:22:08:d5:71:30:4e:22:
b3:5d:a0:15:6f:cd:65:9f:93:8a:fe:54:38:f0:06:
da:e2:f9:a5:d4:8d:85:cd:51:31:ac:23:a6:72:12:
8e:54:a6:d0:2c:df:45:1d:54:d4:13:31:bb:76:ef:
be:cc:2e:f3:d7:5f:76:34:85:e9:4f:4e:41:cf:05:
61:41:ef:ac:a8:16:eb:df:aa:29:28:c5:76:a5:a1:
78:72:c9:2c:dc:e3:35:57:1b:08:e5:59:b5:5d:bf:
36:0b:b7:51:40:3c:3e:de:74:f9:cd:d1:c2:a5:f4:
8f:3e:86:32:8e:ac:f1:ee:18:46:7d:ea:dc:2f:58:
97:98:38:e8:1e:30:b9:0c:a1:20:46:9d:3f:2e:67:
69:7a:0d:39:fa:3f:e7:ed:81:fe:85:4e:98:48:86:
1d:3f:b4:a4:91:0b:d8:5e:3e:39:38:5e:37:43:7c:
35:51:24:66:9a:af:3c:0f:7f:d9:b7:cc:6c:3d:29:
b2:1a:16:6b:de:1c:24:b3:5a:f0:a5:e7:17:e3:10:
cd:53:44:0a:69:23:90:6c:78:72:e9:7c:9a:0b:31:
43:3d:e6:b6:e0:56:51:2b:3d:54:10:5f:3a:62:67:
48:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:ED:CA:44:AF:92:83:BA:23:9C:F6:79:42:0E:25:AC:45:C5:D7:88
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/9-3KRK-Sg7ojnPZ5Qg4lrEXF14g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.48.0/24
144.31.61.0/24
Signature Algorithm: sha256WithRSAEncryption
12:1d:74:26:e8:05:80:d4:7b:f7:08:91:d7:e7:77:43:2e:47:
e3:bc:57:f6:89:32:92:4b:ec:67:4c:15:38:67:1b:53:3f:a3:
68:c2:8e:8e:2c:df:89:5e:c0:f9:a3:9a:74:35:d4:ad:97:32:
44:62:0d:c1:2e:4c:10:6c:9b:67:c1:f1:2e:50:7e:41:10:78:
5f:f5:46:e5:1e:a4:40:43:8b:c5:85:28:9a:f5:e9:7b:a3:f7:
66:f0:69:bc:9d:cb:a4:c9:64:2a:dd:35:e6:39:1f:2d:e1:49:
e3:ed:6c:e3:a7:e1:93:e2:5d:ca:6a:df:38:d5:32:3c:87:c8:
16:f9:73:c2:58:90:d6:d5:4f:1c:31:6f:ca:35:b1:08:6f:74:
bc:68:27:41:19:17:69:46:12:8d:55:a2:c2:a5:12:5e:35:e0:
6c:7f:9d:9f:dc:fe:65:b0:c2:db:0c:e6:4f:0b:f5:f0:f7:33:
67:a4:9a:15:37:27:57:14:ce:59:6a:71:39:4b:3d:ac:03:4e:
75:18:ff:b2:b8:c7:79:f3:2f:24:79:57:ab:ac:fe:84:65:c9:
5b:be:a6:0b:00:35:83:1b:bb:94:94:70:6b:5c:da:54:a9:8d:
23:f4:92:d4:c1:7b:d0:d8:71:94:0c:3b:76:42:2a:8a:72:10:
f5:20:7c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:00:08 2026 by rpki-client