Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KUjIBHpk6vlytWE4Ro0J0DE1ewQ.roa
File: KUjIBHpk6vlytWE4Ro0J0DE1ewQ.roa (raw, json)
Hash identifier: vdGGCif7n3uZbk3wDTq4+Iof+KYh23n7LCBMDoG7B0Q=
Subject key identifier: 29:48:C8:04:7A:64:EA:F9:72:B5:61:38:46:8D:09:D0:31:35:7B:04
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019EA5408CA182DC4ADED321864F874BDEDA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KUjIBHpk6vlytWE4Ro0J0DE1ewQ.roa
Signing time: Mon 08 Jun 2026 03:22:11 +0000
ROA not before: Mon 08 Jun 2026 03:22:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 144.31.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a5:40:8c:a1:82:dc:4a:de:d3:21:86:4f:87:4b:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Jun 8 03:22:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2948c8047a64eaf972b56138468d09d031357b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0b:e5:d3:99:24:01:ab:fc:ca:de:6a:0f:70:
ca:38:b6:0c:82:0e:c1:56:7c:51:54:8e:a1:3f:6a:
80:d5:59:b2:fb:f8:ad:72:0d:28:4a:49:e5:2b:5a:
7d:70:57:f3:cb:82:3c:07:dd:71:74:9c:59:e3:30:
19:4e:40:0a:f3:db:6a:a5:61:fb:b0:41:0a:19:55:
0d:dd:7d:62:4d:b4:a5:71:de:87:e4:bc:dc:66:23:
a5:42:c5:4b:8b:f5:35:5e:66:bc:37:6c:74:a4:20:
80:a7:62:2e:b4:e2:bf:9d:6f:f2:ed:97:cb:6d:66:
ed:33:d3:c6:fb:bf:52:32:00:c2:a2:bc:fb:47:32:
03:67:d0:c2:ac:37:90:bd:14:c5:c8:13:55:2a:c3:
39:dd:43:e7:04:22:09:d3:5e:6b:af:b0:a4:9c:d9:
b2:8e:bd:9a:12:56:11:f1:24:f9:a9:a6:cb:6f:99:
59:04:d1:cc:ac:91:f7:0b:3b:71:fa:97:57:8e:74:
b5:24:0f:67:f9:71:76:b0:18:62:46:e1:e5:74:c3:
37:70:65:79:65:a1:7d:c1:75:bc:5f:1f:94:19:d2:
1c:77:d4:db:74:d1:68:05:fa:f9:f9:20:b3:7f:df:
a5:37:be:88:d1:64:34:4d:29:e9:b3:9d:34:58:5f:
d4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:48:C8:04:7A:64:EA:F9:72:B5:61:38:46:8D:09:D0:31:35:7B:04
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/KUjIBHpk6vlytWE4Ro0J0DE1ewQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.41.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:3c:23:3c:bc:47:68:bd:70:35:3d:39:68:34:ce:b1:97:e8:
eb:06:44:39:f8:32:32:9c:84:51:85:f2:bb:ce:dd:1d:ec:2c:
67:20:eb:ad:ae:3b:39:38:24:a5:e0:6c:3a:ba:32:64:95:a4:
1e:42:59:68:83:02:4f:74:0d:56:e1:55:e2:03:e6:31:a6:7a:
e2:48:92:fd:6f:7b:d2:0f:c5:8e:0f:7a:94:f4:5d:e9:dc:03:
1e:6c:51:b0:ab:5c:71:91:2e:f3:ba:03:55:65:3f:34:ae:c4:
a7:ff:f6:08:7a:d8:37:48:dc:99:c8:40:2c:98:ab:9c:e0:b7:
d1:06:0b:36:55:19:1a:17:4e:04:36:e5:b1:69:74:23:5d:55:
1f:66:49:66:c9:fe:23:af:ff:93:75:8a:a9:24:56:1d:46:0c:
5f:07:20:20:6f:e9:57:3a:c2:67:06:62:88:c8:84:80:e7:0d:
2c:00:77:6b:13:48:e3:3b:02:c3:15:79:ac:66:0c:13:2d:23:
93:17:b7:21:0c:a2:8f:d7:43:6a:29:e0:c9:8f:c4:fe:69:eb:
12:86:1f:27:e4:2f:c5:f4:1c:ad:3d:f5:f1:57:25:c9:e5:6a:
0f:18:72:ba:8d:87:ee:c4:2b:2b:a5:e9:a1:14:6a:4d:ea:44:
29:47:a6:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6lQIyhgtxK3tMhhk+HS97aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNjA4MDMyMjExWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTQ4YzgwNDdhNjRlYWY5NzJiNTYxMzg0NjhkMDlkMDMxMzU3YjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwvl05kkAav8yt5qD3DKOLYMgg7B
VnxRVI6hP2qA1Vmy+/itcg0oSknlK1p9cFfzy4I8B91xdJxZ4zAZTkAK89tqpWH7
sEEKGVUN3X1iTbSlcd6H5LzcZiOlQsVLi/U1Xma8N2x0pCCAp2IutOK/nW/y7ZfL
bWbtM9PG+79SMgDCorz7RzIDZ9DCrDeQvRTFyBNVKsM53UPnBCIJ015rr7CknNmy
jr2aElYR8ST5qabLb5lZBNHMrJH3Cztx+pdXjnS1JA9n+XF2sBhiRuHldMM3cGV5
ZaF9wXW8Xx+UGdIcd9TbdNFoBfr5+SCzf9+lN76I0WQ0TSnps500WF/UvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFClIyAR6ZOr5crVhOEaNCdAxNXsEMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvS1VqSUJIcGs2dmx5dFdFNFJvMEowREUxZXdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB8pMA0G
CSqGSIb3DQEBCwUAA4IBAQBvPCM8vEdovXA1PTloNM6xl+jrBkQ5+DIynIRRhfK7
zt0d7CxnIOutrjs5OCSl4Gw6ujJklaQeQllogwJPdA1W4VXiA+YxpnriSJL9b3vS
D8WOD3qU9F3p3AMebFGwq1xxkS7zugNVZT80rsSn//YIetg3SNyZyEAsmKuc4LfR
Bgs2VRkaF04ENuWxaXQjXVUfZklmyf4jr/+TdYqpJFYdRgxfByAgb+lXOsJnBmKI
yISA5w0sAHdrE0jjOwLDFXmsZgwTLSOTF7chDKKP10NqKeDJj8T+aesShh8n5C/F
9BytPfXxVyXJ5WoPGHK6jYfuxCsrpemhFGpN6kQpR6Y+
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:57:08 2026 by rpki-client