Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Uf9U2jbCefPvLWOc0jQrH_WpiP4.roa
File: Uf9U2jbCefPvLWOc0jQrH_WpiP4.roa (raw, json)
Hash identifier: 7jRJ2VGfFYIKTCb6NebvVlEA79xZRfCDf/AZVcHLa4Y=
Subject key identifier: 51:FF:54:DA:36:C2:79:F3:EF:2D:63:9C:D2:34:2B:1F:F5:A9:88:FE
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C4DC0E660FF014C732E02E3687E60C8FA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Uf9U2jbCefPvLWOc0jQrH_WpiP4.roa
Signing time: Wed 11 Feb 2026 17:30:13 +0000
ROA not before: Wed 11 Feb 2026 17:30:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212701
IP address blocks: 144.31.154.0/23 maxlen: 24
144.31.180.0/22 maxlen: 24
144.31.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:c0:e6:60:ff:01:4c:73:2e:02:e3:68:7e:60:c8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 11 17:30:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=51ff54da36c279f3ef2d639cd2342b1ff5a988fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f8:ef:32:5c:e1:7f:af:81:c7:53:8f:a1:ba:
52:e8:7a:2f:ef:33:53:0c:34:e8:03:8f:a7:69:fb:
50:f5:18:df:af:26:b4:e0:57:38:19:72:4c:51:65:
3a:c3:d1:58:07:c7:94:86:9b:c3:83:e6:8d:87:4b:
78:92:ad:71:6f:a1:f9:aa:83:e3:c8:c8:2f:e9:5e:
dd:e1:00:61:59:a4:00:61:b9:be:5a:a5:49:4f:9b:
2c:9e:e8:76:5d:44:6f:a9:4d:a1:f7:84:e1:20:c9:
cf:9a:de:88:7b:7f:66:9b:22:15:6f:79:e1:5d:53:
99:7a:ea:9c:0f:76:98:ca:69:a7:cc:2a:b4:10:87:
95:d6:91:f5:27:7e:02:d5:64:0d:89:34:0b:4d:3e:
00:46:6f:78:da:a7:78:d4:99:69:0c:97:4f:fb:63:
52:91:44:bc:93:d9:e9:9d:5a:b1:5a:a5:65:9a:e8:
e5:7a:b7:46:f0:cf:8a:05:47:ef:95:c3:8d:c2:f0:
2e:e9:90:17:88:91:19:8c:b6:ca:e4:db:37:2d:51:
c9:c8:d6:1b:7b:88:3b:ce:48:3a:d5:29:89:04:3e:
96:e8:8e:51:6f:4e:52:ec:62:a1:84:0e:43:47:7f:
54:e2:83:af:8c:8f:90:27:37:29:55:fc:54:91:5e:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:FF:54:DA:36:C2:79:F3:EF:2D:63:9C:D2:34:2B:1F:F5:A9:88:FE
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Uf9U2jbCefPvLWOc0jQrH_WpiP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.154.0/23
144.31.180.0/22
144.31.188.0/23
Signature Algorithm: sha256WithRSAEncryption
15:23:a8:8f:25:57:59:ae:5d:69:7d:76:6e:50:f4:73:16:35:
5b:62:1c:c8:f8:eb:15:5f:22:65:34:6b:c1:23:a3:10:15:6a:
fa:9c:0d:d4:a1:89:25:62:e9:a2:3c:a1:c7:70:77:65:3c:c2:
e3:94:75:f4:a9:a7:bb:f8:a2:20:ee:a6:bd:25:45:4f:2d:65:
84:30:56:a9:ac:2b:bc:9e:33:f3:27:d0:9e:0e:dd:7c:2d:b9:
82:02:64:c7:15:a2:37:26:dd:78:be:92:1c:af:c4:f8:b3:9d:
87:88:68:92:bb:78:62:68:79:06:eb:e6:7d:36:c8:23:18:e1:
b9:a8:87:2f:cc:ce:11:90:a4:e7:48:78:10:67:38:1e:8e:c7:
41:3b:51:20:ac:a6:66:35:b9:52:73:a5:96:5c:99:82:2c:bf:
34:f5:76:41:b0:f3:e3:00:5c:fa:1e:24:84:2d:08:a8:0a:f5:
f4:17:00:a3:ab:b6:5b:27:95:42:08:ed:e5:da:88:1e:34:11:
09:3e:35:4c:1d:d5:f3:86:19:27:92:53:e0:c2:3a:39:20:9d:
a6:57:21:39:e6:65:84:ea:c2:0e:7b:e8:72:8b:ca:9a:50:0e:
89:79:fe:2f:7e:1f:d0:50:b2:ea:14:97:39:5c:80:d2:ac:57:
4b:99:07:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:48:00 2026 by rpki-client