Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfUUQf2q1PhC8RUomKPji1PAD38.roa
File: BfUUQf2q1PhC8RUomKPji1PAD38.roa (raw, json)
Hash identifier: y/oXJb0k84FvvExqQrquHXHhKGLrs3hnG0AF/0QkSXU=
Subject key identifier: 05:F5:14:41:FD:AA:D4:F8:42:F1:15:28:98:A3:E3:8B:53:C0:0F:7F
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C4D9E1B9CB65AF2DCDEEC5494EA6D5291
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfUUQf2q1PhC8RUomKPji1PAD38.roa
Signing time: Wed 11 Feb 2026 16:52:13 +0000
ROA not before: Wed 11 Feb 2026 16:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208751
IP address blocks: 144.31.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:9e:1b:9c:b6:5a:f2:dc:de:ec:54:94:ea:6d:52:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 11 16:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=05f51441fdaad4f842f1152898a3e38b53c00f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:fd:ff:1b:09:89:eb:a2:d2:af:c7:ca:09:
10:62:3e:4f:0f:33:56:cb:90:1e:4e:9f:8c:35:17:
82:b1:99:d0:61:6e:ed:6c:90:aa:22:01:c0:97:71:
07:2f:7b:07:11:cd:1e:26:c1:33:d6:b7:7a:19:d4:
9f:53:a0:97:84:b1:67:6a:c4:d2:46:77:4e:54:8a:
12:5c:1f:f4:14:a2:18:b8:13:61:76:fb:2e:33:52:
06:73:3e:47:74:60:4b:e0:a1:c2:a4:cd:51:bb:ca:
f2:33:76:bb:aa:e2:92:c5:bb:1a:b5:91:4a:dc:d2:
66:f6:82:4b:77:2b:d5:62:38:7c:78:cd:f0:38:34:
3e:c0:f5:b1:e8:cc:0c:65:1b:4a:f1:a9:20:0c:9f:
40:b7:c6:08:02:7e:d1:ae:84:31:4b:b2:c3:84:f6:
0c:90:dd:ca:b8:f0:1a:fb:2b:be:d1:a2:d6:97:ad:
20:9d:6e:5c:84:06:4e:8e:ab:cd:55:07:0b:e4:73:
e3:e6:c8:21:40:65:81:e6:2f:29:dc:ea:48:b3:a5:
67:d0:77:20:de:85:14:6b:3e:32:8c:78:80:28:45:
2e:5c:6a:b2:64:97:f1:9e:78:fb:c5:c9:e2:24:28:
e9:9b:44:23:ba:03:8e:b3:9e:c0:85:94:99:65:ec:
e1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:F5:14:41:FD:AA:D4:F8:42:F1:15:28:98:A3:E3:8B:53:C0:0F:7F
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/BfUUQf2q1PhC8RUomKPji1PAD38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.151.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:61:6e:93:cf:1c:92:c4:cb:b6:ef:d9:e1:bd:b5:19:96:37:
58:40:7f:63:7e:84:7f:58:7c:e0:04:60:62:d0:c8:a7:9f:4d:
cd:5b:69:f3:50:44:56:e5:88:be:b8:e3:47:ce:0c:39:ce:71:
b4:58:8a:12:7d:a0:03:3e:6c:42:2d:32:57:ff:e6:07:ff:bb:
13:5e:56:cc:16:46:11:65:58:55:6a:27:81:74:b0:85:6b:2e:
74:1f:94:d6:2a:7d:6a:b5:90:06:41:04:4a:76:cb:3c:70:8c:
71:77:64:9c:94:de:f9:d4:fd:1b:37:06:00:32:a1:2f:f3:25:
06:cf:01:00:38:e8:0b:ed:82:67:d9:83:19:ec:bc:27:c7:d2:
92:91:a0:53:29:cb:4b:d0:8e:91:f6:03:67:0d:0a:0c:3a:c7:
26:ca:88:5f:fc:b8:db:53:0b:a9:a1:f6:86:66:59:18:ae:97:
8e:d7:9b:85:e0:ae:83:e9:ad:8e:42:7c:bb:34:9d:2f:28:7f:
ed:a0:aa:ab:67:eb:b9:1a:73:0f:4c:ce:d2:83:d0:84:19:af:
b6:b7:9d:df:19:e8:ea:85:a1:b1:e4:fa:29:cd:2e:c5:ec:65:
b6:f7:d7:22:5a:a8:2d:78:79:83:09:87:1a:78:48:70:6a:b1:
ec:4a:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:02:52 2026 by rpki-client