Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Fgw6zkKSoIVG_vP3lMOwp5e92ok.roa
File: Fgw6zkKSoIVG_vP3lMOwp5e92ok.roa (raw, json)
Hash identifier: avXBD2dT95cCwnagmX+AX0Jaovyv5DrbiYdrzd5eZ8Y=
Subject key identifier: 16:0C:3A:CE:42:92:A0:85:46:FE:F3:F7:94:C3:B0:A7:97:BD:DA:89
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C53C3E79D3CA24B2948379FB19450EC30
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Fgw6zkKSoIVG_vP3lMOwp5e92ok.roa
Signing time: Thu 12 Feb 2026 21:31:13 +0000
ROA not before: Thu 12 Feb 2026 21:31:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202831
IP address blocks: 144.31.222.0/24 maxlen: 24
150.241.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:53:c3:e7:9d:3c:a2:4b:29:48:37:9f:b1:94:50:ec:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 12 21:31:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=160c3ace4292a08546fef3f794c3b0a797bdda89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ba:4f:23:57:43:05:46:28:70:62:ac:bf:5e:
46:f3:c2:36:5f:33:f8:29:25:9d:c5:e3:9c:13:f2:
11:57:2b:68:35:02:d8:44:8e:f7:17:ba:aa:16:7f:
4c:2d:67:f9:58:f8:db:6e:cb:29:35:0c:60:62:a4:
6e:5e:c1:ef:6c:97:b7:bf:7c:62:d8:c7:1e:1b:91:
41:f3:35:54:0c:fd:c9:f7:62:59:b1:28:7e:82:6b:
ed:a0:ab:7d:61:94:28:72:d0:5b:16:87:7e:5f:02:
84:66:b0:6a:75:17:9f:59:31:68:d7:bb:1b:2a:73:
32:d1:dd:bb:3c:d6:04:d2:f8:05:df:0c:35:ba:9f:
a3:a5:40:aa:55:9b:91:d1:f8:b0:8e:20:fd:d6:9c:
aa:2e:04:af:bf:32:d7:48:53:2c:16:05:84:9a:3b:
7c:e8:64:95:09:3b:46:4a:c5:f6:01:58:de:cc:44:
8f:95:08:9f:0d:33:f8:c8:49:21:83:92:bb:92:47:
a7:b5:c8:64:16:a7:3a:6b:b8:cf:99:51:2d:67:04:
e4:59:e6:c8:75:3d:f1:f9:20:80:06:67:bf:25:84:
72:61:c0:26:67:91:16:7b:e8:0d:0e:9a:c7:8c:a2:
be:ab:5c:91:d2:87:e8:14:10:77:4e:62:b1:19:58:
5e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0C:3A:CE:42:92:A0:85:46:FE:F3:F7:94:C3:B0:A7:97:BD:DA:89
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Fgw6zkKSoIVG_vP3lMOwp5e92ok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.222.0/24
150.241.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:2e:f0:08:1e:a6:26:fc:a3:c9:bf:1c:2c:f3:63:6b:2e:68:
51:34:e8:24:9c:b7:31:c8:1c:32:82:c1:4c:2e:be:a3:b1:05:
aa:15:5b:98:7f:0b:91:8d:bd:ed:2a:de:77:81:c7:d5:9d:46:
64:02:a0:c4:be:1f:62:70:6e:ed:a5:2b:19:79:1f:78:74:b1:
6a:a8:0d:6b:59:59:df:68:85:44:a0:98:81:8e:f5:0b:f8:50:
73:f1:9d:0d:cb:89:05:15:fd:37:6b:1f:1c:ea:57:db:df:75:
f2:0a:e7:53:21:e2:13:1d:15:37:72:96:4d:9f:c5:e6:d5:dd:
e3:42:89:ac:d6:64:4a:84:42:6b:85:33:d4:5c:e8:4e:e4:e6:
23:4e:d4:04:19:e1:c3:c2:9d:ba:4f:4b:33:fb:5a:2e:9e:6c:
3a:af:bb:90:82:ac:19:b3:c3:f4:c7:c1:f6:e0:95:08:4c:7e:
1e:26:d4:86:40:79:57:29:bb:29:65:88:e2:ed:f5:71:4d:f4:
d8:a7:01:07:63:7c:ea:b3:e1:48:08:88:d3:be:72:97:93:8d:
ac:3f:44:8f:47:9f:21:3e:ac:7e:28:78:3c:3f:7f:1a:5e:50:
6d:f4:93:1d:0e:00:43:fe:57:36:64:18:d9:de:aa:a7:65:6c:
02:e3:b2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:55:17 2026 by rpki-client