Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Vf-kp2hdoavvHiJ46iBt_fIMyxE.roa
File: Vf-kp2hdoavvHiJ46iBt_fIMyxE.roa (raw, json)
Hash identifier: 74d0/1UvL/AdmhdjsZlT92c5mUkoBPml/YsraRw6554=
Subject key identifier: 55:FF:A4:A7:68:5D:A1:AB:EF:1E:22:78:EA:20:6D:FD:F2:0C:CB:11
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019D68DA28215CA6510E89F79A9BC53475BA
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Vf-kp2hdoavvHiJ46iBt_fIMyxE.roa
Signing time: Tue 07 Apr 2026 16:50:20 +0000
ROA not before: Tue 07 Apr 2026 16:50:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 144.31.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:68:da:28:21:5c:a6:51:0e:89:f7:9a:9b:c5:34:75:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Apr 7 16:50:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=55ffa4a7685da1abef1e2278ea206dfdf20ccb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:bf:f9:92:85:ad:36:78:08:f1:af:5e:3a:
f9:22:1c:1b:20:39:a7:51:81:29:63:a9:b8:5b:05:
bd:6d:34:4e:4e:1e:76:59:7a:3f:99:21:64:a1:ca:
a3:61:2a:ce:a2:51:67:0b:b2:8e:2c:d9:c7:29:e5:
30:55:a3:32:83:6a:30:11:f6:b8:a5:53:11:99:20:
f6:a1:7b:b9:2e:3d:3d:89:9e:06:7c:bb:41:67:dc:
2a:e9:71:5d:dc:6e:79:1e:24:41:66:55:33:ad:4f:
03:0c:4c:e4:81:2c:92:7b:04:81:55:f3:b0:b7:5e:
ff:dd:99:20:46:d2:e0:73:0e:9d:df:1d:50:d3:d9:
41:66:cc:f4:d1:1b:12:79:a0:b5:34:86:bd:90:c2:
34:ca:a0:ad:dd:23:8f:15:16:9d:1f:d1:77:f1:01:
e2:31:ab:44:63:44:61:63:8e:53:6a:4f:52:2d:0a:
45:00:8b:b6:45:d8:4a:77:c3:c9:6f:97:96:8c:2d:
e0:bb:08:c7:31:09:05:49:26:6c:be:9e:3b:7f:16:
cb:53:58:d3:93:8b:77:74:bb:9a:eb:32:1d:24:78:
7c:81:17:6b:51:3d:29:71:ab:a4:2e:5f:c9:1d:a8:
34:2b:db:d9:dd:05:86:6f:ea:6b:74:cf:27:e5:d5:
d0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:FF:A4:A7:68:5D:A1:AB:EF:1E:22:78:EA:20:6D:FD:F2:0C:CB:11
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/Vf-kp2hdoavvHiJ46iBt_fIMyxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.31.37.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:f9:ce:c1:09:b3:fc:cd:cb:fa:89:9b:c0:f3:a9:1c:a1:31:
ed:94:f8:10:b1:55:56:f4:22:88:d8:8d:5f:39:9d:8a:0d:17:
69:67:65:ba:de:5f:00:9b:0b:88:27:ea:7b:78:99:e5:9d:2d:
5f:62:53:33:84:ee:8a:34:2d:18:c5:f8:0f:27:57:aa:d7:e3:
49:73:6c:30:88:fc:f3:94:b0:66:5e:31:7f:b7:58:ec:67:63:
9e:12:9b:57:ad:a2:93:f3:8f:82:0d:95:f0:dc:fb:dc:2f:9e:
37:be:4c:b0:f4:7d:c1:ad:c4:42:ee:50:d8:2d:28:ec:39:09:
b8:0f:f3:c8:eb:ff:26:7d:5b:37:17:9f:1c:9a:67:46:62:52:
b3:8a:c6:38:87:d1:dc:8e:e3:0b:f6:e7:ca:ba:3f:fb:81:62:
51:19:de:86:4f:02:e4:b8:0c:55:f0:d2:53:fb:fa:d6:7b:d8:
d4:98:60:a4:53:95:75:e5:9a:76:2f:b2:83:52:6c:e9:c2:8b:
ac:6e:49:9a:88:5a:a1:6f:89:f6:42:11:88:90:d5:44:e2:cb:
48:8b:9a:b5:5f:2c:ae:43:2e:69:c3:35:1e:3b:b1:b0:2d:b1:
3e:b1:df:89:9e:f1:3c:e9:80:f3:bb:f5:be:07:0d:0a:c1:d2:
8a:d3:1a:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ1o2ighXKZRDon3mpvFNHW6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4
NDAwMDMwHhcNMjYwNDA3MTY1MDIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NWZmYTRhNzY4NWRhMWFiZWYxZTIyNzhlYTIwNmRmZGYyMGNjYjExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8m/+ZKFrTZ4CPGvXjr5IhwbIDmn
UYEpY6m4WwW9bTROTh52WXo/mSFkocqjYSrOolFnC7KOLNnHKeUwVaMyg2owEfa4
pVMRmSD2oXu5Lj09iZ4GfLtBZ9wq6XFd3G55HiRBZlUzrU8DDEzkgSySewSBVfOw
t17/3ZkgRtLgcw6d3x1Q09lBZsz00RsSeaC1NIa9kMI0yqCt3SOPFRadH9F38QHi
MatEY0RhY45Tak9SLQpFAIu2RdhKd8PJb5eWjC3guwjHMQkFSSZsvp47fxbLU1jT
k4t3dLua6zIdJHh8gRdrUT0pcaukLl/JHag0K9vZ3QWGb+prdM8n5dXQKQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFX/pKdoXaGr7x4ieOogbf3yDMsRMB8GA1UdIwQY
MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt
MTQzOTY3YThmZTA4LzEvVmYta3AyaGRvYXZ2SGlKNDZpQnRfZklNeXhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4
LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkB8lMA0G
CSqGSIb3DQEBCwUAA4IBAQA++c7BCbP8zcv6iZvA86kcoTHtlPgQsVVW9CKI2I1f
OZ2KDRdpZ2W63l8AmwuIJ+p7eJnlnS1fYlMzhO6KNC0YxfgPJ1eq1+NJc2wwiPzz
lLBmXjF/t1jsZ2OeEptXraKT84+CDZXw3PvcL543vkyw9H3BrcRC7lDYLSjsOQm4
D/PI6/8mfVs3F58cmmdGYlKzisY4h9HcjuML9ufKuj/7gWJRGd6GTwLkuAxV8NJT
+/rWe9jUmGCkU5V15Zp2L7KDUmzpwousbkmaiFqhb4n2QhGIkNVE4stIi5q1Xyyu
Qy5pwzUeO7GwLbE+sd+JnvE86YDzu/W+Bw0KwdKK0xoB
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:53:10 2026 by rpki-client