Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A3lL-FoxAmvmVmp_LhyIZxk4JlM.roa
File: A3lL-FoxAmvmVmp_LhyIZxk4JlM.roa (raw, json)
Hash identifier: eglhvN4oqAdxA1gv55DMvmyT90Que17F3vQ+6uu7cVM=
Subject key identifier: 03:79:4B:F8:5A:31:02:6B:E6:56:6A:7F:2E:1C:88:67:19:38:26:53
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019E510A1CAF70D064824A605ADC68C8DAFD
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A3lL-FoxAmvmVmp_LhyIZxk4JlM.roa
Signing time: Fri 22 May 2026 18:54:37 +0000
ROA not before: Fri 22 May 2026 18:54:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 134926
IP address blocks: 144.31.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:51:0a:1c:af:70:d0:64:82:4a:60:5a:dc:68:c8:da:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: May 22 18:54:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=03794bf85a31026be6566a7f2e1c886719382653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:1f:04:35:fd:e7:5e:be:a6:91:6b:8e:7d:
e5:a2:62:17:42:60:75:02:3b:56:4a:4b:c9:35:ed:
35:51:07:f1:d5:97:8e:ad:5f:ce:36:60:78:ff:c4:
1e:70:6a:98:e3:ae:0b:66:17:f4:9d:83:91:69:75:
bb:09:a8:10:74:27:6d:8e:4c:27:e1:2d:35:05:4a:
8f:2f:8d:65:b8:7a:61:ed:26:06:38:10:a6:1a:3d:
35:60:a7:f0:dd:1a:82:b7:aa:d9:6d:07:f5:e7:f2:
22:f3:f9:11:b6:7c:e8:0e:00:94:2a:c9:6a:eb:9a:
19:5d:f9:24:ab:80:f3:12:6b:3d:c0:40:9f:21:63:
50:45:5b:b0:90:31:bb:21:d5:5b:9a:88:ce:f8:20:
a4:16:53:8f:1a:57:5e:10:0a:a8:74:23:2e:8b:48:
c5:71:d5:fe:79:6e:cc:93:7c:27:f3:76:b6:48:15:
e7:50:b7:34:00:b0:41:ad:cf:a5:81:8b:b0:ce:2e:
cb:2e:a0:85:49:d3:32:ff:d3:0d:8d:a3:62:da:ea:
a2:ac:87:03:a9:02:c1:4e:a1:96:a5:4e:ba:04:41:
1e:bd:14:55:bf:fd:7e:54:b0:66:bb:ae:0c:58:b2:
44:7e:95:32:c8:c2:91:bc:39:66:cd:2f:80:5f:2d:
98:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:79:4B:F8:5A:31:02:6B:E6:56:6A:7F:2E:1C:88:67:19:38:26:53
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/A3lL-FoxAmvmVmp_LhyIZxk4JlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.146.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:3f:60:4c:e8:46:e2:36:7b:6a:4c:cb:e2:4f:8b:67:47:89:
89:d2:f0:aa:ea:36:b8:df:73:b2:87:6a:58:18:43:e9:56:33:
1a:1d:75:d7:58:93:49:ac:dd:c4:01:8d:fa:81:3a:c6:a3:35:
68:a2:9c:e2:af:17:11:f5:a7:6a:7b:d9:73:a2:1a:b6:9f:23:
0e:88:ed:c7:da:90:f0:8b:ff:96:36:87:99:65:9c:48:5b:8e:
c5:14:46:0d:bf:b6:0b:38:bc:64:48:b9:9a:56:f1:ed:45:9c:
21:b0:bc:fc:72:3e:f4:0a:5e:cf:18:15:21:33:a1:1f:7f:5d:
15:08:d9:ee:47:95:49:3e:0b:32:e4:15:e0:17:0b:e2:2c:b6:
84:f1:7c:2b:df:09:d5:ad:01:5e:52:4c:a5:15:71:44:39:5a:
3d:b2:e3:57:0c:ab:1a:8a:b5:5a:e9:cd:af:d4:4a:99:fa:c6:
80:f3:51:3f:d3:e0:61:bd:46:cf:a7:71:70:6b:5c:5b:ea:eb:
de:d7:da:25:74:d0:d5:d7:e0:0c:26:ac:72:7b:33:20:f7:42:
39:8e:e9:5f:fe:94:a2:94:15:4f:eb:7b:eb:a6:19:95:5c:b5:
89:e3:35:6b:99:13:54:11:fd:a3:3d:6a:34:4e:e3:3b:91:2f:
ef:40:95:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5RChyvcNBkgkpgWtxoyNr9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNTIyMTg1NDM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMzc5NGJmODVhMzEwMjZiZTY1NjZhN2YyZTFjODg2NzE5MzgyNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNEfBDX9516+ppFrjn3lomIXQmB1
AjtWSkvJNe01UQfx1ZeOrV/ONmB4/8QecGqY464LZhf0nYORaXW7CagQdCdtjkwn
4S01BUqPL41luHph7SYGOBCmGj01YKfw3RqCt6rZbQf15/Ii8/kRtnzoDgCUKslq
65oZXfkkq4DzEms9wECfIWNQRVuwkDG7IdVbmojO+CCkFlOPGldeEAqodCMui0jF
cdX+eW7Mk3wn83a2SBXnULc0ALBBrc+lgYuwzi7LLqCFSdMy/9MNjaNi2uqirIcD
qQLBTqGWpU66BEEevRRVv/1+VLBmu64MWLJEfpUyyMKRvDlmzS+AXy2YqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAN5S/haMQJr5lZqfy4ciGcZOCZTMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvQTNsTC1Gb3hBbXZtVm1wX0xoeUlaeGs0SmxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB+SMA0G
CSqGSIb3DQEBCwUAA4IBAQA8P2BM6EbiNntqTMviT4tnR4mJ0vCq6ja433Oyh2pY
GEPpVjMaHXXXWJNJrN3EAY36gTrGozVoopzirxcR9adqe9lzohq2nyMOiO3H2pDw
i/+WNoeZZZxIW47FFEYNv7YLOLxkSLmaVvHtRZwhsLz8cj70Cl7PGBUhM6Eff10V
CNnuR5VJPgsy5BXgFwviLLaE8Xwr3wnVrQFeUkylFXFEOVo9suNXDKsairVa6c2v
1EqZ+saA81E/0+BhvUbPp3Fwa1xb6uve19oldNDV1+AMJqxyezMg90I5julf/pSi
lBVP63vrphmVXLWJ4zVrmRNUEf2jPWo0TuM7kS/vQJXj
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:21 2026 by rpki-client